November/December Risk Pool Report

November/December 2023

Safety @ Your Finger T.I.P.S. Text Messaging – Sign Up Now!
Cyber Corner: Small Local Governments – Responding to a Ransomware Incident
Holiday Message from Board Chair Mary M. Dennis
Member Spotlight: City of Live Oak’s Hometown News
TML Magazine Article Features Interview with Risk Pool’s Cyber Risk Services Manager
National League of Cities Honors Former TML Risk Pool Executive Bob Haynes
TML Risk Pool Remembers Former Trustee Pat Norriss
Risk Management Minute: Procurement for Unforeseen Damages
Service in Focus: January is R.O.A.D. Ready Month

Action Items

Safety @ Your Finger T.I.P.S. Text Messaging – Sign Up Now!

The TML Risk Pool wants every employee to go home safe, every time. We are proud to introduce Safety @ Your Finger T.I.P.S. to support that mission. Safety @ Your Finger T.I.P.S. (“Together Improving Processes and Safety”) is a new text-message initiative designed to increase your awareness of safety-related hazards and exposures in the workplace and apply that knowledge in your day-to-day work or as a discussion topic in your safety/tailgate meetings.

In addition to safety information, you can sign up to receive notifications about weather and emergency management updates, training programs, and the R.O.A.D. Ready initiative that’s designed to save lives, prevent injuries, and protect property by raising awareness of dangers on and near roadways.

Go to https://info.tmlirp.org/textsignup now to sign up today! The first text went out in November and linked to this document showing injury statistics. Future texts will help Members avoid contributing to the list!

Cyber Corner: Small Local Governments – Responding to a Ransomware Incident

Most of the TML Risk Pool’s Members are smaller cities and other local governments that don’t have an “IT Department.” In fact, many may have only one or a few computers. So, what should you do if you or another employee clicks on a ransomware link or other type of phishing cyber-attack? Follow these simple steps and – if you have cyber coverage with the Pool – contact us immediately.

Disconnect from the Network: Immediately disconnect the affected device from the network, including Wi-Fi, Bluetooth, and any connected drives. This step helps prevent the ransomware from spreading to other devices and networks.

If you are unable to disconnect from the network, Power Off the Device. However, turning off the device may preclude recovery of valuable forensic information. Thus, powering off should be done only if you are unable to disconnect the device from the network.
Cease communication via email: Only use “out of band” communication methods (like phone calls) to communicate, as the threat actors could be monitoring your email traffic. This could tip them off and cause them to start moving laterally or deploying ransomware widely.
Notify IT or Security Team: If you have one, inform the IT or security team immediately. They can take swift action to contain the incident, assess the extent of the damage, and initiate recovery protocols.
Report the Incident: Contact the TML Risk Pool FIRST. Be ready with all relevant details, including when the incident occurred, any messages received, and the nature of the attack. The Pool can quickly bring resources to bear that may stop or mitigate the attack.

In addition, Texas Government Code 2054.603 now requires that a state or local agency that experiences a security incident, report such incident to the Texas Department of Information Resources within 48 hours of discovery of the incident (and notify the Secretary of State if he incident involved election data).

Of course, the best thing is to stop a cyber-attack before it happens. How best to do so?

Educate and Train Yourself and Your Employees: Promote awareness about ransomware threats and provide guidance on safe online practices to prevent future incidents. This tip should be number one. Check out fun and informative training through the Pool’s Stronger, Together Podcast (Episodes 9-9b).
Implement Security Measures: Strengthen cybersecurity measures by installing and updating reliable security software, using firewalls, and regularly updating operating systems and applications.
Backup Regularly: Establish a routine backup schedule for important files. Regular backups provide an additional layer of protection, allowing for faster recovery without succumbing to ransom demands.
Take Advantage of the Pool’s Cyber Services: The Pool has a dedicated Cyber Risk Services Manager and will soon be adding a second position to our cyber team. We can help you stay safe in several ways, including by:

Conducting simulated phishing exercises.
Providing sample policies and procedures.
Consulting on cybersecurity best practices.
Applying an assessment tool to identify cyber risk.
Reviewing cyber coverage to address cyber exposure.

To take advantage of any of the services listed above, or to ask cyber-related questions, reach out to Ryan Burns – the TML Risk Pool’s Cyber Risk Services Manager – at rburns@tmlirp.org.

Updates and More

Holiday Message from Board Chair Mary M. Dennis

Greetings fellow TML Risk Pool Members! I’m Mary M. Dennis, and I serve as the Chair of the TML Risk Pool’s Board of Trustees. I’ve been the Mayor of the City of Live Oak since 2010 and you may remember me as President of the Texas Municipal League during 2016-2017.

As we approach the end of the year, I find myself thankful in so many ways. I’m thankful for the honor of serving as Chair of the Pool’s Board of Trustees, I’m thankful we are here to help you – our Members – through daily challenges and also some of the toughest times you’ll face, and I’m thankful the partnership among our Members is strong. Most importantly, I want to extend my warmest wishes to you and your families during the Holiday Season.

May the Holiday Season bring you moments of joy, peace, and reflection. May you find inspiration in the company of family and friends, and may the coming year be filled with prosperity, success, and new opportunities for personal and professional growth.

I am truly honored to serve as Chair during the Pool’s 50^th Anniversary celebration, and I look forward to the Pool’s continued success. Thank you for your unwavering support, dedication, and commitment to our shared mission.

Wishing you and your loved ones a Merry Christmas, a Happy Hanukkah, a festive Kwanzaa, and a joyful New Year!

Sincerely,

Mary M. Dennis

Member Spotlight: City of Live Oak’s Hometown News

The City of Live Oak’s Hometown News magazine serves as an example of a great way to keep residents and visitors informed about living, learning, working, and playing in the city. It initially started as a two-page, one-color newsletter, but it quickly evolved into a high-quality magazine that is recognized statewide! (Read more on page 16 of the December issue of Texas Town & City Magazine.)

TML Magazine Article Features Interview with Risk Pool’s Cyber Risk Services Manager

According to an article that appears in the December issue of Texas Town & City Magazine, cyber coverage is critically important for municipalities. “With ransomware attacks attacking municipalities more than any other industry – even more than schools or healthcare organizations – a perfect storm exists as municipalities are also often the least-equipped to handle a cyberattack.” To educate municipalities about this critical situation, while also providing some tips on navigating the cyber insurance environment today, the article’s author talked to Ryan Burns, Cyber Risk Services Manager at the Texas Municipal League (TML) Risk Pool. (Read more on page 36 of the December issue of Texas Town & City Magazine.)

National League of Cities Honors Former TML Risk Pool Executive Bob Haynes

The NLC Mutual Insurance Company has bestowed the William F. Fulginiti Legacy Award to former TML Risk Pool Deputy Director Bob Haynes. The award, named after the longtime New Mexico League Director who chaired the NLC Mutual Board for over a quarter century, honors the life, legacy, and spirit of public service embodied by Mr. Fulginitti. Bob will receive the award next week at the NLC Mutual Board Meeting in Washington, D.C. Only two other recipients have been awarded this honor since its creation in 2021. They include Mike Sittig, former Executive Director of the Florida League of Cities, and Cal Wray, former Director of Pooling Programs at the Georgia Municipal Association.

TML Risk Pool Remembers Former Trustee Pat Norriss

Pat Norriss of Burkburnett, passed away on Saturday, November 11, 2023, in Wichita Falls, Texas. Pat was a loving wife, mother, grandmother, great- grandmother and community advocate, and she served on the TML Risk Pool Board of Trustees for 22 years.

Pat was a dedicated community leader and held many “firsts” for females in Wichita County. Pat was the first female mayor in Wichita County and Burkburnett, serving as mayor for 16 years and on the Burkburnett City Council for 22 years. Pat’s “firsts” extend to the first female County Commissioner in Wichita County, serving Precinct 2 for four terms and sixteen years. As president and board member, she served on the District 3 North Texas Regional Planning Commission. Pat was a board member and elected President of the Texas Association of Regional Councils and then elected board member of the National Association of Regional Governments. Pat served on the Sheppard Military Affairs Committee for Sheppard Air Force Base and on the board of Wichita and Wilbarger 911 Services.

In addition, Pat served as a trustee of the Texas Municipal League Risk Pool from 1996 to 2018. Join us in remembering a truly inspiring leader and dedicated servant of her community and beyond.

Risk Management Minute: Procurement for Unforeseen Damages

Q: May a city forego bidding or proposals for purchases that are necessary because of unforeseen damage to public machinery, equipment, or other property?

A: Yes. A city is not required to follow state law competitive procurement procedures when making a purchase that is necessary because of unforeseen damage to public machinery, equipment, or other property. For example, city officials have used this exception to justify purchasing parts for emergency equipment, such as firefighting equipment, when the equipment was unexpectedly damaged or broken. (FEMA rules, grant restrictions, and other laws or regulations may require certain procedure in addition to state law requirements.) To learn more about other exceptions to bidding or proposals and just about everything else related to city procurement, check out the “Texas Municipal Procurement Made Easy” handbook linked under Episode 4 of the Local Officials: Stronger, Together Podcast Series.

Service in Focus: January is R.O.A.D. Ready Month - Let’s Roll!
R.O.A.D. Ready (Recognize the Hazards; Observe People, Processes, and Equipment; Assess the Risk Level; Determine the Safest Course of Action) is a Risk Pool program designed to save lives, prevent injuries, and protect property by raising Member awareness of dangers on and near roadways. The Pool provides participating Members with: (1) specifically designed resources and training to mitigate roadway risks; and (2) promotional materials to show they are R.O.A.D. Ready.

To participate, your organization should: (1) make a commitment to becoming R.O.A.D. Ready by providing internal roadway safety training or using the Pool’s resources to do so; and (2) participate in national roadway, vehicle, or work zone programs.

Go to the R.O.A.D. Ready webpage to download posters and learn more about the program, and/or contact your Safety and Loss Control Consultant or Risk Management Advisor for more information.