Ssn winter '17 final

Volume 14, Issue 4

y

winter

g

bu 201 yers7-2 iss ’ g 018 ue uide

Visit us online at www.SecurityShreddingNews.com

ATTN: READERS !

Are you looking for Products, Equipment or Services for your business?

If so, please check out these leading companies advertised in this issue:

Collection & Storage Containers Bomac Carts – pg 13

Equipment Financing TransLease Inc – pg 15

Lock & Locking Systems Lock America Intl. – pg 3

Mobile Truck Shredders Alpine Shredders Ltd – pg 14 Vecoplan, LLC – pg 4

Moving Floor System Keith Manufacturing – pg 2

Stationary Shredders & Grinders Vecoplan, LLC – pg 4

Trade Associations NAID/Shred School – pg 16

(National Association of Information Destruction)

RIOS – pg 5

Secure Destruction Outlook: Stability and Opportunity Amid Challenges

H

By Bob Johnson

aving the benefit of watching the secure destruction industry evolve over four decades, I am more inclined to look at its status in terms of multi-year phases; the 1980s when both customer awareness (demand) was low and competition was sparse, the 1990s saw the rise of mobile destruction, the 2000s when regulation and enforcement increased awareness and competition, thus increasing focus on electronic media destruction and the first rounds of industry consolidation, and, finally, the last ten years which have been marked by further consolidation, the importance of web-based marketing, a continued focus on electronic media, and a general market stability due to industry contraction.

Additionally, my involvement with NAID over the past 24 years has given me an international perspective. While the “phases” described above apply for the most part to the North American secure destruction sector, their timing and flow are quite different around the world; other regions tending to be in a phase previously experienced by the U.S., or in some cases, skipping some completely. As an example of the latter, we see Asian markets where the newly blossoming economies seems to have skipped the hard copy (paper) phase of secure destruction, with the focus of service providers going directly to electronic media destruction. Additionally, recognition of NAID AAA Certification by the Australian SCEC may

dramatically limit the ability of unqualified operators to function at all. The point is, the opportunities and challenges facing the secure information destruction industry differ markedly by region, and why most Security Shredding News readers are likely interested in the North American market, developments around the world, notably with the new General Data Protection Regulation in Europe, will further support compliance-related trends already affecting demand, service provider scrutiny, and marketplace stability in the U.S. and Canada.

Of course, compliance-related issues aren’t the only international factor affecting the secure destruction services market. A significant portion of service providers receive a varying percentage of their revenue from the sale of their destroyed byproducts, and the commodity price for such byproducts depends largely on the international market.

What Does It Mean?

aving set the proverbial table with these H (somewhat obvious) observations, it seems that secure data destruction operators in North America that have incorporated a “regulatory compliance, strong web-based marketing” model will continue to do well for the immediate future.

I specifically use the word “continue” because I said the same thing last year… and for all intents, it generally proved correct. Service Continued on page 3

Security Shredding News

www.youtube.com/user/KeithMfgCo

www.keithwalkingfloor.com

2 Security Shredding News Winter 2017-2018

Security Shredding News

Secure Destruction Outlook:

Stability and Opportunity Amid Challenges Continued from page 1

lines of operations (electronics refurbishing) providers that have adopted this model 1) or strong partnerships with organizations that secured an increased demand from the growing provide a broad scope of electronic media number of businesses that responded to rising solutions. As clients become educated and their data protection liabilities, 2) capitalized on expanding electronic destruction needs evolve, the increasing customer dependence on search hard copy destruction firms may soon lose them engines to locate services, and 3) freed themselves to the competition, simply because of limited from reliance on commodity pricing by focusing knowledge and insufficient service options. To on service revenue. put a finer point on it, even the response “we These operators find themselves well can only shred your hard drives,” will not suffice positioned to get the most out of continued in the not too distant future. market contraction in North “Obviously, those This is not a problem; it is a America. If they decide to business opportunity. sell, they will garner maximum service providers The upcoming European value. If they stay put, they unprepared to Data Protection Regulation will benefit from the continued address U.S.-E.U. (GDPR) that goes into effect price stability resulting from on May 18, 2018, represents the ongoing contraction.

Privacy Shield Despite this trend, it issues will likely find another opportunity. To be clear, for European-based doesn’t mean service providers themselves on the service providers, the word that have not adopted the ‘opportunity’ doesn’t really compliance-intensive, web- wrong side of client do it justice. For them, it is based approach aren’t able legally-mandated the ultimate game changer. It to compete. I am sure every requirements.” is a ten on the Richter scale of reader can think of some regulatory changes. Some will make millions on competitor that ignores both and also knows it, others won’t survive. The GDPR will usher of scores, even hundreds, of clients that are in far-reaching, cross-border changes that, oblivious to anything but price. The point here though nowhere near as impactful as in Europe is that it will become harder and harder for those itself, will be felt globally. Any organization companies to compete effectively, especially in North America that has information on when it comes to competing for clients willing a European citizen, which includes every to pay a fair price. They will be subject to the financial institution, every investment firm, unreliable volatility of commodity pricing. And many government offices, all multi-national it is also likely that their business will be worth corporations, travel companies, and credit little if they ever do want to sell. bureaus, among many others, is subject to the requirements of the GDPR. And whether North The Job is Never Over American service providers realize it or not, assume at this point some readers are feeling because they are receiving such information from pretty good about their continued prospects. these organizations, they are technically subject They have a decent compliance profile, they’re to the GDPR as well.

NAID AAA Certified, and their salespeople As such, it is very likely that an existing know all the talking points on contracts and account in the U.S., subject to GDPR provisions, insurance; they’re walking the talk. They’re will ask you, “Is your firm compliant with the happy with their search engine results and their U.S.-E.U. Privacy Shield Framework?” It’s just conversion rate. To them, I say, good job, and it’s as likely that a competitor aware of such issues time to get back to work. will approach your existing customers with Electronic media and IT asset disposition that same question. A service provider unaware are opportunities for profit that no service of the issues will be blindsided. On the other provider should ignore. I am not talking about hand, those ready to proactively raise the issue occasionally shredding a half dozen hard with clients and prospects will be in a position drives either. The average NAID member has to capitalize. hundreds if not thousands of local clients. There U.S.-based service providers that are already is little excuse for not aggressively pursuing compliant with HIPAA, GLB, and state breach opportunities with each of those clients to help notification laws (as verified by NAID AAA them properly destroy (shred/wipe) all of their Certification) are already prepared operationally electronic media. It is a mistake to wait for them to meet GDPR requirements and only need to to ask. It needs to be part of every sales call, even understand how to convey that readiness to their perhaps every service event. Client contracts, clients. For these professionals, the impact of service orders, and marketing materials should the GDPR will be more knowledge-based and stress the importance of this business need. For

I

service providers, this may mean pursuing new

Continued on page 4

Now Even More Options for Customers Who Want Their Own Key Codes!

Lock America Adds More New Key Codes for Padlocks and Console Locks.

• Give your drivers and customers a single key that fits all the locks at a site.

• Ask your console or bin supplier for new available key codes, or contact Lock America directly.

One Key Can Now Operate All Your Locks!

Tel: (951) 277-5180 Fax: (951) 277-5170 www.laigroup.com

800-422-2866

9168 Stellar Court Corona, CA 92883 sales@laigroup.com

PUBLICATION STAFF Publisher / Editor Rick Downing Contributing Editors / Writers Bob Johnson • Ken McEntee Sandy Woodthorpe Production / Layout Barb Fontanelle • Christine Mantush Advertising Sales Rick Downing Subscription / Circulation Donna Downing Editorial, Circulation & Advertising Office 6075 Hopkins Rd., Mentor, OH 44060 Ph: 440-257-6453 • Fax: 440-257-6459 Email: downassoc2@oh.rr.com www.securityshreddingnews.com For subscription information, please call 440-257-6453 Security Shredding News (ISSN #15498654) is published bimonthly by Downing & Associates. Reproductions or transmission of Security Shredding News, in whole or in part, without written permission of the publisher is prohibited.

Annual subscription rate U.S. is $19.95.

Outside of the U.S. add $10.00 ($29.95).

Contact our main office, or mail-in the subscription form with payment.

©Copyright 2017 by Downing & Associates Printed on Post-Consumer Recycled Paper

Security Shredding News Winter 2017-2018

3

Security Shredding News

Stability and Opportunity Amid Challenges Continued from page 3

communications-based. If they prepare and implement correctly, there is a big potential upside. Obviously, those service providers unprepared to address U.S.-E.U. Privacy Shield issues will likely find themselves on the wrong side of client legally-mandated requirements.

Robert (Bob) Johnson (rjohnson@naidonline.org) is the CEO and founder of NAID, the non-profit, international trade association for the secure information destruction industry, which he started after more than a decade in the industry as a service provider. As a pioneer creating tangible means for the industry to be more regulated and thus successful, Johnson has testified before the More of the Same Coming United States Senate and the Canadian House of arket contraction will likely continue well Commons on the importance of secure information into 2019. Increasing client scrutiny and disposal and provided input on data protection consolidation in North America have already regulations around the world. He recently proven good for pricing stability and margin authored the first concise textbook on the topic of growth in North America. Those left standing are information disposition, Information Disposition: generally doing well and there is more to come.

A Practical Guide to the Secure and Compliant Service providers that continue to invest Disposal of Records, Media and I.T. Assets. more heavily in compliance and staff education, Johnson is a prolific writer and speaker on the topic web-based lead generation and conversion, and of secure disposal, data protection regulations, diversify into electronic media solutions are policy development, and employee compliance, and bound to see their fortunes rise. Even new market occasionally entrants prepared to embrace these trends would Security Shredding & Storage News, Mobile - 1/2 page, 4Cserves as an expert witness in legal likely do well. disputes related to secure information disposition.

M

Shredding Companies Merge

B

aton Rouge, LA - A merger between Secure Shredding and Recycling and Absolute Document Destruction was completed before the end of 2017, TheAdvocate. com reports.

According to press release, the companies say they plan to combine resources to provide customers more trucks and additional efficiencies, service and long-term savings.

Absolute Document Destruction, which has been in the shredding business since 1991, shares a pool of clients with Secure Shredding and Recycling’s software and technology operations. The company will retain the Secure Shredding and Recycling name.

Secure Shredding and Recycling serves clients across the Louisiana Gulf south region, providing shredding, destroying or recycling of media, documents, consoles, containers or bins in compliance with HIPPA requirements and governmental standards. The company also offers on-site services through shred trucks or collection services to destroy documents at a plant facility.

rail

800mm h] [31 1/2inc

m 1108.6m nch] [43 21/32i

For more information, contact Rick Downing at 440-257-6453 or email rickdowning@oh.rr.com.

Shreds Everything!

533.4mm [21inch]

Advertise in all 4 issues of Security Shredding News and $AVE !!

266.6mm h] [10 1/2inc

Secure Destruction Outlook:

Shreds Everything!

SHSHRREECDD S S U CKK TRU TR new & USed Single-Shaft RotaRy ShReddeRS PieRce & teaR ShReddeRS cdl & non-cdl

WITH

W

ba c fa ge ked Pa ctoRnUin by Rt S & y diRe Se ec RV t ice

IT H

(336) 285-0021 www.VecoPlanllc.com 5708 UwhaRRie Road • aRchdale, nc 27263

4 Security Shredding News Winter 2017-2018

26' - 1"

Shreds Everything!

rail 8' - 7"

Yep, That Too! 35' - 4" Truck Curb Side Vie

w

17 Body (Tail End)

1,200 Cubic Feet Shredded Materia Storage Capacity

www.certifymerecycling.org info@certifymerecycling.org

Security Shredding News Winter 2017-2018

5

Security Shredding News

Office Paper Remains Stable During Year of Scrap Pandemonium

T

By Ken McEntee

he Chinese government made 2017 a year of pandemonium for the global old corrugated container (OCC) and mixed paper markets, but office paper remained generally steady throughout the year.

For sorted office paper (SOP), the year began on a good note. During recent years, U.S. mill prices for SOP tended to decline by $20 to $30 per ton during the fourth quarter. During the last quarter of 2016, however, prices for most recovered paper grades, including SOP, pushed surprisingly upward, then improved slightly during the first quarter of 2017. Strong demand from Mexican mills supplementing steady buying from U.S. tissue makers, was generally cited as the market’s driving factor.

Since May, however, U.S. prices have generally demonstrated their typical trend, holding steady through the summer, then tailing off during the third quarter.

According to market surveys done by The Paper Stock Report, the average national mill buying price for SOP started the year at $186.25 per short ton, bumping up a slight $1 per ton, then holding through the summer at just under $180 per ton.

In October, U.S. mill prices dropped $10 per ton, then fell another $13, settling around $155 per ton in November. December saw a slight up-tick in most U.S. regions.

Because a small portion of SOP and other deinking grades generated in the U.S. are exported to China, the grade escaped the turmoil that ensued with the announcement by the Chinese government in July that it would prohibit the import of “unsorted waste paper” and other recyclable commodities at the end of the year. The U.S. trade association, the Institute of Scrap Recycling Industries (ISRI), and the international Bureau of International Recycling (BIR) called the China’s policy “devastating” to the global recycling industry.

The July announcement came after several months of rumors that China had planned to restrict mixed paper imports as early as the beginning of June, a measure that didn’t happen. Soon after it’s July announcement, however, China further announced that it would prohibit, at the end of the year, the importation of any recovered paper that exceeds a 0.3 percent level of contamination – a measure that literally nobody considers to be achievable, particularly for residential paper processed at material recovery facilities (MRFs). China’s contamination level remained a matter of speculation and concern as 2017 drew to an end.

Prior to China’s bombshell, U.S. suppliers were enjoying a nearly unprecedented and unexpected run-up in OCC prices. According to The Paper Stock Report, the average national mill buying price for OCC shot up from under $140 per ton in January, to more than $170 per ton in February, then peaking well over $200 per ton in July with a April and May free fall in between.

Sources cited a strong American economy for pushing containerboard mill demand for OCC. Through the year, domestic containerboard continued to run about 3 percent better than in 2016. Exports, meanwhile, remained solid, despite early uncertainty about how the election of President Donald Trump would impact overall trade with major partners China and Mexico.

“Everybody knew that the prices weren’t going to stay where they were for very long, and they didn’t,” said one exporter during the April trough.

“But nothing has changed as far as business. Business continues to be very good. The domestic economy is very strong and mills are running very well. And we haven’t even gotten into the busy season yet.”

U.S. demand for OCC was so strong in March, traders reported, that mills in the Midwest and southern areas of the country were trucking in loads from California and even from Mexico – an unusual phenomenon.

Among higher grades, prices of pulp substitutes were slowly creeping upwards, gaining about $30 per ton in North America by summer. Markets for deinking grades, like SOP, varied by location in the U.S. Mexican tissue

6 Security Shredding News Winter 2017-2018

producers reportedly had strong inventories and were not buying heavily, negatively impacting markets in the southern U.S., while some mills in the Midwest and eastern U.S. were buying strongly, stabilizing overall prices.

Despite reports that U.S. mills were loaded with OCC, prices for that grade remained near record levels throughout the summer.

Following China’s July announcement that it would not accept unsorted paper after December 31, exporters speculated how Chinese mills would run without the 2.5 to 3 million tons of mixed paper that the U.S. ships to China annually.

As the Southeast U.S. recovered from two powerful hurricanes in August and September, exporters began to report major disruption in orders to China. The disruptions were caused by the suspension of government issued import licenses that enabled mills to bring recovered paper into the country - a development that many traders deemed as more harmful to the market than the impending ban on mixed paper imports.

“The licenses are running out on a daily basis and it’s getting very hard to get an order into China,” one exporter said. “It’s created a domino effect. The other Asian mills know what’s going on and the prices are plummeting.”

With limited export demand, old corrugated containers (OCC) and other grades were backing up in the U.S. during a time when the high production season for containerboard was coming to a close. As a result, domestic OCC mill buying prices were tumbling, particularly on the West Coast, where suppliers noted August-to-September reductions ranging from $30 to $50 per ton. Prices in other regions of the country fell as well, but not as severely as on the West Coast.

In September, the average domestic OCC price was higher than $175 per ton. Within a month, the price dropped to $110.

Slowly, most import licenses were reinstated, but OCC prices held flat through December.

Prices for SOP also began to tail off in October, but the reductions had little to do with exports to China.

Of the more than 21 million tons of recovered paper exported to China annually, SOP and other deinking grades account for only 4 percent – although that percentage has ticked up to 5 percent for this year through October. The main reason is less because of increased shipments of deinking grades than it is because of the reduction of mixed paper and OCC exports during September and October.

Deinking grade exports have held relatively steady throughout the year, with a high mark of 88,000 tons shipped in August and a low mark of 73,000 tons shipped in February. Exports to China topped out at 6,300 tons in March, and a low mark of 1,000 tons in August.

Presently, the export issues with China remain unresolved. China has notified the World Trade Organization (WTO) that it will modify its standards for imported recyclable materials by March 1, 2018.

In response, the National Waste and Recycling Association (NWRA) comments with the Standardization Administration of China saying that its standards “pose significant barriers to the export of mixed paper and other recyclables into China through the implementation of contamination limits that are impossible to meet, according to industry consensus.”

“NWRA supports high quality standards for recyclable materials and supports policies to achieve them,” said Darrell Smith, NWRA CEO. “Our member companies’ processing facilities work to completely eliminate all materials that do not meet those specifications. We support the use of existing, internationally recognized specifications. The global recycling industry will face significant challenges should these standards move forward as written.”

Ken McEntee is editor and publisher of The Paper Stock Report (www. recycle.cc), based in Strongsville, Ohio.

Security Shredding News

2017-2018 Buyers’ Guide Directory category listings

Baler Manufacturers

Advanced Equipment Sales Ameri-Shred Corp American Baler Co BACE Balemaster USA Harris International Baler Corp IPS Balers Mfg Maren Engineering

Corp Waste Processing Equipment, Inc

Baling Wire & Strapping Systems

Advanced Equipment Sales Cavert Wire Co, Inc Eastern Wire Products Wire Industries LLC

Business Consultants, Employment Services & Drug Screening Inquire Hire K-2 Partners, LLC Lane-Link Group, Inc Shotgun Capital Advisors LLC

Conveyors & Moving Floor Systems

Advanced Equipment Sales Ameri-Shred Corp Cresswood Shredding Machinery Harris KEITH Mfg Co

Document & Product

Destruction Services

AMS Store and Shred LLC

Document Storage Containers / Collection Carts

All Source

Manufacturing Corp Big Dog Shred Bins USA Bomac Carts CONF Industries, S.r.L Guardian Containers Jake, Connor & Crew Inc MOD-Meese Orbitron Dunne Co Rapid Distributing Schaefer Systems Intl

Dust Control Systems

Advanced Equipment Sales Ameri-Shred Corp Nordfab Ducting Ohio Blow Pipe

Electronics Recyclers

AMS Store and Shred LLC BCS Clover Environmental Solutions Dan-Mar Components Ex-It Technologies ZRG Inc

Fire Protection Systems, Vaults & Fire Prevention Services

Advanced Equipment Sales Critical Systems Fire Protection Intl Consortium Firelock Fireproof Modular Vaults FLAMEX, Inc

HIPAA Compliance Training

Prime Compliance

Insurance Providers

Downstream Data Coverage EMPLOYERS

Leasing Companies

Intek Truck & Equipment Leasing Trans Lease, Inc

Marketing, Advertising, Website Development & Online Services NetGain

Merger & Acquisition Firms

K-2 Partners, LLC Lane-Link Group, Inc Shotgun Capital Advisors LLC Waterfront Capital, Inc

Rack Storage Systems

Shred Truck Manufacturers & Dealers

DACS, Inc Elite Storage Solutions

Alpine Shredders Ltd Ameri-Shred Corp

AXO Shredders Shred-Tech Shredfast, Inc ShredSupply UltraShred LLC Vecoplan LLC

Repair Services (Balers & Shredders)

Advanced Equipment Sales CMB Commercial Shredder Repair, LLC Dun-Rite Tooling Pacific Coast Shredder Repair Co Shred Supply

Shredder Manufacturers (Plant-based)

Routing, Billing & Inventory Software

DHS Worldwide Software Solutions DocuData Software eRouteIt EZshred Software Systems RouteOptix Inc

Security Locks & Alarm Systems Babaco Alarm Systems Lock America International The Wilson Bohannan Lock Co

Security, Safety, Loss Prevention & Risk Management Specialists

Baker Security Group, LLC

Advanced Equipment Sales Allegheny Shredders Ameri-Shred Corp American Pulverizer Co Cresswood Shredding Machinery Cumberland Recycling Jordan Reduction Solutions Security Engineered Machinery Co Shred-Tech UNTHA America Vecoplan LLC WEIMA America, Inc

Shredder Wear Parts Dun-Rite Tooling ShredSupply Tryco Manufacturing Co

X-ray Film Recycling & Processing

AMS Store and Shred LLC Commodity Resource & Environmental Inc Pyromet

Security Shredding News Winter 2017-2018

7

2017-2018 Buyers’ Guide COMPANY INDEX

A

Advanced Equipment Sales

Souderton, PA (215) 723-7200 www.advancedequipmentsales.com

All Source Manufacturing Corp Barrie, ON Canada (705) 726-6460 www.allsourcemfg.com

Allegheny Shredders

Delmont, PA (800) 245-2497 / (724) 468-4300 www.alleghenyshredders.com

AMS Store and Shred LLC Lake in the Hills, IL (800) 262-2344 www.amsstoreandshred.com

Babaco Alarm Systems

Baker Security Group, LLC State College, PA (814) 321-3102 www.bakersecuritygroup.com

Balemaster USA

Ameri-Shred Corp Alpena, MI (800) 634-8981 www.ameri-shred.com

American Baler Co

Bellevue, OH (800) 843-7512 www.americanbaler.com

American Pulverzier Co St. Louis, MO (314) 781-6100 www.ampulverizer.com

Crown Point, IN (219) 663-4525 www.balemaster.com

BCS

Canoga Park, CA (888) 286-7188 www.scrapdr.com

Bomac Carts / Royal Basket Trucks

201 Badger Parkway Darien, WI 53114 (262) 882-5000 Cindy Lapidakis sales@bomaccarts.com www.bomaccarts.com Heavy-Duty utility car ts are o u r sp eci a l t y. Fro m R ec ycl i n g, Manufacturing, Shipping / Receiving, Commercial Laundry and Mailrooms, our offering meets a broad range of uses in many industries.

See ad on pg 13

C

Cavert Wire Company, Inc Rural Hall, NC (800) 969-2601 www.cavertwire.com

Advertise here and reach over 3,100 businesses involved in ...

• Document & Product Destruction Contractors • Records & Media Storage Facility Owners • Waste Paper Recyclers For more information, contact Rick Downing at 440-257-6453 or email rickdowning@oh.rr.com.

8 Security Shredding News Winter 2017-2018

Hoffman Estates, IL (815) 431-8100 www.clovertech.com

Fuquay-Varina, NC (919) 577-6714 www.cmbcommercialshredderrepair. com

B

Moonachie, NJ (800) 283-2222 www.babaco.com

Clover Environmental Solutions

CMB Commercial Shredder Repair, LLC

Philadelphia, PA (484) 953-3580 www.axo.cc

Charlotte, NC (877) 506-2223 www.bacecorp.com

30 Alpine Court Kitchener, ON N2E 2M7 Canada (866) 246-5634 Guy Wakutz, Sales GWakutz@AlpineShredders.com www.AlpineShredders.com Alpine Shredders has engineered Mobile Shredding Equipment that is simple to maintain – with fewer moving par ts than competitive equipment. Our low-RPM, hightorque shredder assembly increases the life of all hydraulics, pumps, gearboxes and shredder shafts. High tip force and aggressive hook profile ensures superior throughput even on the toughest dense paper. The end result is a shred truck that requires low maintenance and is ENGINEERED TO LAST. See ad on pg 14

Lakeside, CA (855) 792-4050 www.bigdogshredbins.com

AXO Shredders

BACE

Alpine Shredders Limited

Big Dog Shred Bins USA

Commodity Resource & Environmental Inc (CRE) Burbank, CA (818) 843-2811 www.creweb.com

CONF Industries, S.r.L Travagliato (BS), Italy 011-039-030-6863617 www.confindustries.it

Cresswood Shredding Machinery Cortland, IL (800) 962-7302 www.cresswood.com

Critical Systems

Louisville, KY (502) 231-2402 www.critical-systems.net

Cumberland Recycling

New Berlin, WI (262) 641-8600 www.cumberland-plastics.com

D

DACS, Inc

Portsmouth, VA (757) 393-0704 www.dacsinc.com

Dan-Mar Components Deer Park, NY (631) 242-8877 www.dan-mar.com

DHS Worldwide Software Solutions Orange Park, FL (800) 377-8406 www.dhsworldwide.com

DocuData Software Montreal, QC Canada (866) 789-2789 www.docudatasoft.com

Buyers’ Guide 2017-2018 COMPANY INDEX Inquire Hire

Davenport, IA (563) 323-5922 www.inquirehire.com

EZshred Software Systems Downstream Data Coverage

877-710-2498 Downstream@naidonline.org www.downstreamdata.com Downstream Data Coverage is professional liability insurance, developed exclusively for NAID members to address many of the shortcomings of standard professional liability coverage that leave service providers and their customers at risk.

Dun-Rite Tooling

Cortland, IL (800) 209-3145 www.dun-ritetooling.com

E

Eastern Wire Products Jacksonville, FL (800) 351-8138 www.eastern-wire.com

Elite Storage Solutions

Irvine, CA (949) 757-1377 www.elitestoragesolutions.com

EMPLOYERS

Reno, NV (888) 682-6671 www.employers.com

eRouteIt

Lincoln, NE (402) 261-4067 www.erouteit.com

PO Box 8 Chesterland, OH 44026 (877) 392-7123 Tiffanie Julian tjulian@ezshred.com EZshred is a simple to learn, yet extremely powerful software system to run your shredding and medical waste business.

From scheduling and routing using Google maps to invoicing and reporting, EZshred takes care of the details so that you have time to manage and grow your business. Ask about our cuttingedge Android and Apple smartphone apps, recycling, record storage solutions and cloud services as well!

F

Fire Protection Intl Consortium

Concord, CA (925) 825-4643 www.globalfireprotection.com

Firelock Fireproof Modular Vaults Kutztown, PA (610) 756-4440 www.firelock.com

Attention Advertisers !

Now is the time to schedule your 4-color logo/photo listing in next year’s Buyers’ Guide Issue.

For more information, contact Rick Downing at 440-257-6453.

IPS Balers Mfg

Baxley, GA (800) 280-2313 www.ipsbalers.com

J

Jake, Connor & Crew Inc Kitchener, ON Canada (877) 565-5253 www.jakeconnorandcrew.com

Jordan Reduction Solutions

Birmingham, AL (888) 733-8248 www.jordanreductionsolutions.com

K

K-2 Partners, LLC Villanova, PA (215) 690-1133

Cordele, GA (229) 273-2500 www.harrisequip.com

I

Intek Truck & Equipment Leasing Roseland, NJ (973) 403-7788 www.intekleasing.com

M

South Holland, IL (800) 875-1038 www.marenengineering.com

MOD-Meese Orbitron Dunne Co

N

NetGain

Barrie, ON Canada (888) 797-2455 www.netgainseo.com

Guardian Containers

Harris

9168 Stellar Court Corona, CA 92883 (800) 422-2866 / (951) 277-5180 sales@laigroup.com www.laigroup.com For over 30 years, Lock America has been an innovative market leader in a wide range of industries that demand lock and security hardware.

See ad on pg 3

Ashtabula, OH (800) 772-7659 www.meeseinc.com

G

H

Lock America International

Maren Engineering Corp

Greensboro, NC (336) 299-2933 www.sparkdetection.com

Gardena, CA (310) 217-1533 www.guardiancontainers.com

Heath, TX (972) 772-5680 www.lane-link.com

Jacksonville, FL (800) 231-9286 www.intl-baler.com

FLAMEX, Inc

Ex-It Technologies

Naples, FL (239) 596-2254 www.exittechnologies.com

International Baler Corp

L

Lane-Link Group, Inc

KEITH Manufacturing Co

PO Box 1 Madras, OR 97741 (800) 547-6161 / (541) 475-3802 sales@keithwalkingfloor.com www.keithwalkingfloor.com The KEITH WALKING FLOOR unloading system increases efficiency in the mobile document destruction environment.

Installed in a shred truck, the moving floor system stores shredded documents and automatically unloads them once the truck reaches a secure location.

Unloading time is under five minutes and no tipping is needed.

See ad on pg 2

Nordfab Ducting Reno, NV (866) 652-1588 www.nordfab.com

P

Pacific Coast Shredder Repair Co Newark, CA (877) 434-9747 www.pcsrco.com

Pyromet

Aston, PA (610) 497-1743 www.pyromet999.com

Security Shredding News Winter 2017-2018

9

2017-2018 Buyers’ Guide COMPANY INDEX

P Continued

T

V

Prime Compliance

(616) 893-8243 Tom Dumez, CHP, CSCS President tdumez@thehipaaman.com www.thehipaaman.com Tom Dumez has been providing industry specific risk assessments and HIPAA training and consulting services to RIM companies since 2009, after a 12-year career in the industry. He is also a NAID Approved Consultant and can help companies obtain their first time AAA certifications. He has worked with 100 companies.

R

Rapid Distributing

Grandville, MI (616) 791-4747 www.rapiddistributing.com

RouteOptix Inc

Kitchener, ON Canada (866) 926-7849 www.routeoptix.com

Vecoplan LLC Shredfast, Inc

13026 W McFarlane Road, Bldg C-2 Airway Heights, WA 99001 (509) 244-7076 Karl Ellwood karl@shredsupply.com www.shredfast.com Since 1998, Shredfast has been committed to manufacturing the highest quality document shredding trucks, collection trucks, and media destruction equipment in the industry.

With Shredfast you’ll get more than just a great product, you’ll be backed by an experienced support team you can trust.

We design, engineer, machine, fabricate and assemble all our equipment in house in the U.S.

Trans Lease, Inc

4475 E 74th Ave #103 Commerce City, CO 80022 (877) 600-6423, (303) 301-7651 Terry Lee, Business Development Mgr tlee@transleaseinc.com www.transleaseinc.com Our vision at Trans Lease is to provide you with the means to capture and grow expanding markets through our ability to provide financial choices and personal service. Since 1991, Trans Lease has expanded, doing business in all 50 states plus Canada and Puerto Rico, with a lease fleet of more than 5,000 units. See ad on pg 15

Tryco Manufacturing Co Decatur, IL (217) 864-4541

S

U

Security Engineered Machinery Co

UltraShred LLC

Westboro, MA (800) 225-9293 www.semshred.com

Spokane Valley, WA (877) 468-5872 www.ultrashred.com

Shotgun Capital Advisors

UNTHA America

Southlake, TX (817) 421-5940 www.shotguncapital.com

Shred-Tech

295 Pinebush Road Cambridge, ON N1T 1B2 Canada (800) 465-3214 shred@shred-tech.com www.shred-tech.com Shred-Tech® is globally recognized for designing and manufacturing firstclass reduction systems and shredding machinery to cost-effectively meet your waste reduction and recycling needs.

ShredSupply

13026 W McFarlane Road, Bldg C-2 Airway Heights, WA 99001 (866) 520-8762 Karl Ellwood info@shredsupply.com www.shredsupply.com At ShredSupply, our mission is to be your industrial shredding supply company.

We provide qualit y pre - owned and refurbished mobile shredding equipment, parts, service and rentals.

Our equipment is dependable due to our thorough reconditioning and testing process by our highly skilled mechanics and technicians.

10 Security Shredding News Winter 2017-2018

Hampton, NH (603) 601-2304 www.untha-america.com

Attention

Advertisers !

Now is the time to schedule your 4-color logo/photo listing in next year’s Buyers’ Guide Issue.

For more information, contact Rick Downing at 440-257-6453.

PO Box 7224 High Point, NC 27264 (336) 861-6070 Bob Gilmore info@vecoplanllc.com www.vecoplanllc.com Vecoplan engineers, manufactures, and provides parts and service on a range of shredders and systems for processing medical waste, destroying confidential records, and recycling scrap. An integral component in turnkey waste sterilization systems, our machines are used to shred sharps, textiles, plastics, and for red bag processing. AAA NAID compliant for secure destruction of paper, film, disks, and hard drives.

See ad on pg 4

W

Waste Processing Equipment, Inc

Rainsville, AL (256) 638-6355 www.maxpakbalers.com

Waterfront Capital, Inc Fort Lauderdale, FL (954) 525-8448 www.waterfrontcapital.com

WEIMA America, Inc Fort Mill, SC (888) 440-7170 www.weimaamerica.com

The Wilson Bohannan Lock Co Marion, OH (800) 382-3639 www.padlocks.com

Wire Industries LLC

Stockbridge, GA (770) 507-5700 www.wireindustriesllc.com

Z

ZRG Inc

Carlsbad, CA (760) 438-8825 www.zrginc.com

Security Shredding News

U.S. Senators Propose National Breach Notification Law

W

ashington, D.C. – A U.S. senate bill introduced in November would give companies a maximum of 30 days to notify victims and authorities after they discover a data breach and make it a crime - punishable by up to five years in prison - to knowingly conceal a breach, reports GovInfoSecurity.com.

Sen. Bill Nelson of Florida, along with Sen. Richard Blumenthal of Connecticut and Tammy Baldwin of Wisconsin introduced Data Security and Breach Notification Act in November. All three legislators are members of the Senate Commerce, Science and Transportation Committee.

Sen. Nelson says the federal measure is needed to hold companies accountable for failing to safeguard data or inform consumers when that information has been stolen by hackers. He introduced a similar bill in 2015, which did not make it out of committee. The newly proposed legislation may have more bite as it follows several high-profile breaches affection millions of Americans.

At the state level, California passed breach notification legislation in 2003. Since then, 47 other states as well as the District of Columbia, Guam, Puerto Rico and the Virgin Islands have passed some type of breach notification law. Only Alabama and South Dakota lack data breach notification laws.

If passed, the Nelson bill would not supersede HIPAA’s breach notification rule for the healthcare sector or the cybersecurity requirements of the Gramm-Leach-Bliley Act for the financial sector.

Maryland’s Updated Breach Law Takes Effect in January

M

aryland’s updated data breach notification law includes information covered under HIPAA in its definition of personal information, reports HealthITSecurity.com.

The new provisions under the Maryland Personal Information Protection Act (HB 974) that take effect on January 1, 2018 include personal information such as an individual’s first name or first initial and last name combined with any of the following: • Social Security number • Driver’s license number • Financial account number, including a credit or debit card number that, in combination with any required security code, access code, or password, would permit access to an individual’s financial account • Individual taxpayer identification number The law also covers health information and health insurance information, biometric data, passport numbers, state identification card numbers, and user name or email address in combination with a password or security question and answer to gain account access.

Victims must be contacted within 45 days (extended from the previously required 30 days) of a data breach. The law also amends Maryland’s record destruction requirement. Previously, only customer records were covered.

The changes now include employee and former employee records containing personal information.

In Fiscal Year 2016, the Office of Attorney General reported that there were 564 data breaches affecting more than 600,000 Maryland residents.

According to the report, these breaches were due to phishing, retail malware, lost or stolen laptops or other devices, unauthorized access, and inadvertent administrative error, such as mistakenly sending personal identifying information to third parties not authorized to have it.

In an effort to assist small and medium-sized enterprises that do not have the deep financial and professional cybersecurity resources of much larger organizations, the state has developed a one-stop portal housing resources and best practices to help prevent and address cybersecurity infrastructure attacks. The portal, which went “live” in the fall of 2017, can be found on the Office of Attorney General and the Maryland Cybersecurity Council websites.

Rise in Lawsuits for HIPAA Noncompliance

A

lthough the majority of private health information and personal information breaches occurring in the healthcare field are reported to the U.S. Department of Health and Human Services’ Office for Civil Rights (OCR), physicians and other healthcare providers should be aware of a trend toward litigation, reports a RenalandUrologyNews.com article.

A recent breach case involves a suit for $2.5 million brought after a hospital paid a $387,000 fine to OCR and refused to negotiate a settlement with the victim and his attorney. Where negligence can be proven, and the damages are sufficient to pursue a court case, litigators are invoking state privacy laws. Such suits may become more prevalent as attorneys hear about them and verdicts favor patients. Aware of published decisions, judges are less likely to dismiss cases involving unauthorized release of PHI. In the case of negligence, such as when medical records are sent somewhere incorrectly, healthcare providers should contact their legal counsel and liability insurer as soon as they find out. Clear and reassuring communications with the patient and/or their family are important, according to one attorney interviewed by Renal and Urology News. Offering a reasonable settlement or compensation may satisfy the patient and end the risk of a possible case.

Aside from lawsuits and filing with OCR, patients can also file complaints with the state agency where a physician is licensed. If a physician is found at fault, he or she might be subject to administrative disciplinary sanctions. License suspension or revocation and fines are possible in the worst-case scenario.

The door may be opening to the filing of federal lawsuits for HIPAA violations. In August of 2017, a federal class-action lawsuit was filed against Aetna claiming the company sent letters to about 12,000 patients with information regarding prescription HIV drug orders visible through the envelope’s window.

China’s Purity Standards Throw Recycling Market into a Spin

P

amplinMedia.com reports that China’s stricter standards for imported recyclables is sending deep shock waves throughout the industry here.

As China deals with its environmental pollution issues, the Communist Party has vowed to step up enforcement of standards for imported recyclables. Starting in January, the National Sword standard enacted last summer will restrict the level of contaminants in plastic and paper recyclables to no more than 0.3 percent by weight. Until recently, the official level was 1.5 percent by weight.

The country’s public health concerns are hitting new highs, forcing the party to get tough. If the Chinese expand purity standards to mixed paper or metals, the multi-billion-dollar recycling market could plummet. In 2016, the United States shipped $5.6 billion worth of recyclables to China, according to the Institute of Scrap Recycling Industries, making it our sixth-largest export there.

Portland, Oregon, a city that has made a big commitment to recycling, is grappling with uncertainty about the impact of the latest trade restrictions.

While government officials try to gauge whether this fall’s historic drop in paper and plastic prices signals a pause or the coming end of municipal recycling programs, businesses are taking action.

Portland’s Far West Recycling stopped accepting Styrofoam and other harder-to-recycle plastics labeled No. 3 through No. 7. New Seasons grocery stores stopped accepting all plastics, including small produce bags. Municipal authorities outside the Portland area, including Hood River and The Dalles, have sought state approval for sending some recyclables to landfill.

The Oregon Department of Environmental Quality is convening industry leaders to find solutions, such as finding alternate buyers for plastics and mixed paper. In the meantime, Portland officials are encouraging residents to continue filling their bins with recyclables.

Security Shredding News Winter 2017-2018 11

Security Shredding News

Information Security Forum Forecasts 2018 Global Security Threat Outlook

T

Crime-as-a-Service, Privacy Regulations and Unmet Board Expectations Top List of Key Threats to Businesses

he Information Security Forum (ISF), a global, independent information security body considered the world’s leading authority on cyber security and information risk management, has announced the organization’s outlook for the top five global security threats that businesses will face in 2018. Key threats for the coming year include: • Crime-As-A-Service (CaaS) Expands Tools and Services • The Internet of Things (IoT) Adds Unmanaged Risks • Supply Chain Remains the Weakest Link in Risk Management • Regulation Adds to Complexity of Critical Asset Management • Unmet Board Expectations Exposed by Major Incidents In the coming year, the number of data breaches will grow along with the volume of compromised records, becoming far more expensive for organizations of all sizes. Costs will come from traditional areas, such as network clean-up and customer notification, as well as newer areas such as litigation involving a growing number of parties. Angry customers will pressure governments to introduce tighter data protection legislation, bringing new and unforeseen costs. The resulting mess of international regulations will create new compliance headaches for organizations while doing little to deter attackers. Not only will the number of data breaches grow, the scale of data breaches will also grow and individuals around the world will wearily expect their personal data to be compromised. In some cases, sophisticated defenses will be circumvented by persistent criminal organizations that swiftly exploit stolen data. The significant cost of the resulting cyber-crimes will rise steeply.

“The scope and pace of information security threats is jeopardizing the veracity and reputation of today’s most reliable organizations. In 2018, we will see increased sophistication in the threat landscape with threats being personalized to their target’s weak spots or metamorphosing to take account of defenses that have already been put in place,” said Steve Durbin, Managing Director of the ISF. “These days, the stakes are higher than ever before. High level corporate secrets and critical infrastructure are regularly under attack and organizations of all sizes need to be aware of the significant trends that we forecast in the year to come.”

The top five threats identified by the ISF for 2018 are not mutually exclusive and can combine to create even greater threat profiles. The most prevalent threats include:

Crime-As-A-Service (CaaS) Expands Tools & Services

C

riminal organizations will continue their ongoing development and become increasingly more sophisticated. The complex hierarchies, partnerships and collaborations that mimic large private sector organizations will facilitate their diversification into new markets and the commoditization of their activities at a global level. Some organizations will have roots in existing criminal structures, while others will emerge focused purely on cybercrime. Organizations will struggle to keep pace with this increased sophistication and the impact will extend worldwide, with cryptoware in particular becoming the leading malware of choice for its threat and impact value. The resulting cyber incidents in the coming year will be more persistent and damaging than organizations have experienced previously, leading to business disruption and loss of trust in existing security controls.

The Internet of Things (IoT) Adds Unmanaged Risks

O

rganizations will adopt IoT devices with enthusiasm, not realizing that these devices are often insecure by design and therefore offer many opportunities for attackers. In addition, there will be an increasing lack of transparency in the rapidly-evolving IoT ecosystem, with vague

12 Security Shredding News Winter 2017-2018

terms and conditions that allow organizations to use personal data in ways customers did not intend. It will be problematic for organizations to know what information is leaving their networks or what data is being secretly captured and transmitted by devices such as smartphones and smart TVs. When breaches occur, or transparency violations are revealed, organizations will be held liable by regulators and customers for inadequate data protection. In a worst-case scenario, when IoT devices are embedded in industrial control systems, security compromises could result in harm to individuals or even loss of life.

Supply Chain Remains the Weakest Link in Risk Management

S

upply chains are a vital component of every organization’s global business operations and the backbone of today’s global economy.

However, security chiefs everywhere are concerned about how open they are to an abundance of risk factors. A range of valuable and sensitive information is often shared with suppliers and, when that information is shared, direct control is lost. This leads to an increased risk of its confidentiality, integrity or availability being compromised. In the coming year, organizations must focus on the weakest spots in their supply chains.

Not every security compromise can be prevented beforehand, but being proactive now means that you— and your suppliers—will be better able to react quickly and intelligently when something does happen. To address information risk in the supply chain, organizations should adopt strong, scalable and repeatable processes — obtaining assurance proportionate to the risk faced. Supply chain information risk management should be embedded within existing procurement and vendor management processes.

This readiness may determine competitiveness, financial health, share price, or even business survival in the aftermath of a breach.

Regulation Adds to Complexity of Critical Asset Management

N

ew regulations, such as the European Union General Data Protection Regulation (GDPR), will add another layer of complexity to the issue of critical information asset management that many organizations are already struggling with. The GDPR aims to establish the same data protection levels for all EU residents and will focus on how organizations handle personal data. Businesses face several challenges in preparing for the reform, including a widespread lack of awareness among internal stakeholders. The additional resources required to address the obligations are likely to increase compliance and data management costs while pulling attention and investment away from other important initiatives. In the longer term, organizations will benefit from the uniformity introduced by the reform. But it is not just in the area of privacy where legislation will bite. The increasing burden of compliance and legislative variances across jurisdictions will increase the burden for multi-nationals and those businesses targeting international trade.

Unmet Board Expectations Exposed

by Major Incidents

B

oards will expect that their approval of increased information security budgets will have enabled the Chief Information Security Officer (CISO) and the information security function to produce immediate results.

However, a fully secure organization is an unattainable goal, and many boards are unaware that making substantial improvements to information security will take time – even when the organization has the correct skills and capabilities. Consequently, the expectations of boards will quickly

Continued on next page

Security Shredding News Continued from previous page accelerate beyond their information security functions’ ability to deliver.

Misalignment between a board’s expectations and the reality of the security function’s ability to deliver will be most cruelly exposed when a major incident occurs. Not only will the organization face substantial impact, the repercussions will also reflect badly on the individuals and collective reputations of the board members.

ISF Threat Horizon Reports

T

he threats outlined above are included in the annual ISF Threat Horizon series of reports, aimed at both senior business executives and information security professionals. These reports are designed to help organizations take a proactive stance to security risks by highlighting challenges in the threat landscape and identifying how the confidentiality, integrity and availability of information may be compromised in the future.

For more information, please visit the ISF website and register for Mr. Durbin’s presentation detailing these threats via this link.

About the Information Security Forum

F

ounded in 1989, the Information Security Forum (ISF) is an independent, not-for-profit association of leading organizations from around the world.

The organization is dedicated to investigating, clarifying and resolving key issues in cyber, information security and risk management and developing best practice methodologies, processes and solutions that meet the business needs of its Members.

Veolia Opens State-of-the-Art Electronics Recycling Facility in Ontario

Iron Mountain to Buy IO Data Center, LLC

R

eston, VA – In a diversification move, document shredding and data management company Iron Mountain Inc. plans to buy IO Data Center LLC’s U.S. business for $1.3 billion, the company announced in December.

IO Data Centers LLC is a leading data center services provider based in Phoenix, Arizona. The company has four state-of-the-art colocation data centers in the U.S., which serve about 550 U.S. customers across the aerospace, financial services, federal government and technology industries.

With the transaction, Boston-based Iron Mountain will acquire the land and buildings associated with IO’s four data centers located in Phoenix and Scottsdale, Arizona; Edison, New Jersey; and Columbus, Ohio. The total space is 728,000 square feet, providing 62 megawatts (MW) of capacity with expansion potential of an additional 77 MW in Arizona and New Jersey.

Along with other data center acquisitions in 2017, this business pivot strengthens Iron Mountain’s foothold in the facilities colocation market.

The company is well positioned to meet the strong demand by the largest cloud providers and others who need dedicated services, cooling, power, bandwidth and physical security – all offered under one roof.

In a statement, Iron Mountain President and CEO William L. Meaney says he expects the company’s data center business to make up about 10 percent of its earnings before interest, taxes, depreciation, and amortization by 2020.

The IO purchase includes an additional $60 million based on future performance (subject to customary adjustments).

Other Iron Mountain data center acquisitions include a 210,000-squarefoot facility from Denver-based Fortrust. The company also is in the process of buying two data centers from the financial services firm Credit Suisse Group in London and Singapore.

V

eolia is expanding its electronics and lamp recycling capabilities in Canada with a new, 5,000 square foot, state-of-the-art recycling facility located in Pickering, Ontario (Greater Toronto Area).

While the plant’s primary purpose is to provide lamp-recycling services for customers across Ontario and other Canadian provinces, other electronics and mercury-bearing wastes can also be handled for customers out of this facility as appropriate. Veolia currently provides industrial cleaning and hazardous materials management services from this location.

As industry, commercial business, communities and residents of Ontario prepare to comply with provincial regulations banning lamps from landfill disposal by 2020, Veolia’s new lamp recycling facility provides a more sustainable, circular economy solution to responsibly manage these wastes within Canada.

“Our investment in this facility represents our commitment to finding better solutions for lighting and electronic waste as well as ways to minimize the impact of waste on our environment,” said Veolia North America president and CEO William J. “Bill” DiCroce. “As technology improves, we’re able to break down and reclaim even more materials, especially hazardous materials, and prevent them from entering the waste stream.”

Veolia has already been supporting the lamp recycling needs of Ontario as an approved processor for the Recycling Council of Ontario’s Take Back the Light program. “Our Port Washington, Wis., facility earned approved processor status in 2013,” stated Bob Cappadona, president and COO of Veolia North America Environmental Solutions and Services and Industrial Canada. “For the past four years, spent lamps gathered in Ontario have been transported to our recycling facility in Port Washington for disassembly, mercury recycling and glass and metal recovery.”

With the new Pickering facility, spent lamps will be processed in Ontario. Veolia has invested in state-of-the-art equipment to crush and separate expired mercury-bearing lamps like compact fluorescents into three components: metal, glass, and phosphor powder. Ninety-nine percent of the glass and metal wastes will be recycled locally by Veolia.

The mercury-bearing phosphor powder will be transported to Veolia’s Port Washington facility for retorting and recycling.

www.bomaccarts.com

sales@bomaccarts.com

Security Shredding News Winter 2017-2018 13

Security Shredding News

UK Recycling Firms Make “First Trade” for Paper Bales Using Bitcoin

K

ent, England – The British waste consultancy and management firm, Prismm Environmental, announced in December that it had bought several bales of recyclable paper using the cryptocurrency Bitcoin.

Prismm’s purchase from Parry & Evans in North Wales marks the first such recycling transaction in the UK, a practice which Prismm Environmental managing director Mike Jackson hopes to continue.

“Using Bitcoin worked for both us and Parry & Evans as there was no transaction fee to pay, and they received instant and secure payment. It also shows the intention of both companies to collaborate on technology in future,” Jackson said in a statement.

Parry & Evans, which has been in the business of recycling paper and cardboard for more than 50 years, was pleased with the virtual transaction. Knowing payment was secure, and receiving it instantly were advantages, according to a company spokesperson.

HIPAA Enforcement 2018: Are You Ready?

I

n its enforcement of HIPAA, the Office of Civil Rights is likely to continue focusing on data breaches, audit controls, risk management and business associate agreements, HealthItSecurity.com reports.

Attorneys interviewed for the HealthITSecurity article point out that OCR’s oversight is likely to stay on that track under the leadership of Director Roger Severino, at least for the near term.

In addition, these areas are ripe for greater scrutiny and rulemaking: • Risk management, including procedures, backups and overall system structure integrity in the midst of a natural disasters • The increasing interconnection between devices and access to private health information through various applications • State and federal jurisdiction over PHI • A national data breach notification standard By the end of 2017, nine large HIPAA settlements totaled nearly $15 million.

Survey: More Funding Needed to Shield Against Cyber Threats

A

ccording to EY’s 20th Global Information Security Survey, U.S. companies report that their information security needs are not being met at all and only 11 percent of global companies believe their information security function fully meets their needs.

The survey reveals that while 70 percent of organizations continue to increase their spending on cybersecurity, they indicated funding falls short. Only 12 percent said they expected to receive a funding increase of over 25 percent.

Of the nearly 1,200 organizations that participated in the survey, just 12 percent said it was very likely that they’d be able to detect a sophisticated attack.

The biggest threat to company security? Employee negligence.

Carelessness and weak user education and skills training were cited as major factors in breaches, but a majority of respondents (76 percent) agreed that damaging data breaches are the ones that typically bring the attention, dollars and skilled resources IT operations need for optimum cybersecurity.

While organizations may feel more confident about confronting the types of attack that have become familiar in recent years, they lack the capability to deal with more advanced, targeted assaults, according to EY’s survey report.

“They may not even be aware of attack methods that are emerging.

To be cyber resilient, however, organizations must increase their understanding rapidly - it is likely that they will face all of these categories of attack at one time or another, and possibly simultaneously,” the report notes.

IT’s role in an organization is critical to cybersecurity. The function is considered a part of IT for 63 percent of respondents; however, 48 percent said they don’t have a security operation center, and 57 percent don’t have a formal threat intelligence program, according to the survey.

What’s more, only 32 percent have cybersecurity expertise that could help them oversee such risks.

Close to half the respondents said either that they have made changes to their strategies and plans to take account of the risks posed by cyber threats, or that they are about to review strategy in that context.

To access the Global Information Security Survey (GISS) go to: http://www.ey.com/Publication/vwLUAssets/ey-cybersecurity-regainedpreparing-to-face-cyber-attacks/$FILE/ey-cybersecurity-regainedpreparing-to-face-cyber-attacks.pdf.

14 Security Shredding News Winter 2017-2018

®

Specialist in Mobile Shred Truck Financing • LOW INITIAL INVESTMENT • LEASE OR LOAN FINANCING • FINANCING NEW OR PRE-OWNED EQUIPMENT

• SIMPLE APPLICATION PROCESS • SERVING THE U.S. & CANADA • COMPETITIVE RATE STRUCTURE

We Provide a Convenient and Cost-Effective Solution!

Financing The World Of Transportation For a Quote or More Information Contact: Eastern States Western States Terry Lee Cassie Bergo Direct: 303-301-7651 | Cell: 937-620-9400 Direct: 303-301-7685 | Cell: 303-324-8340 tlee@transleaseinc.com cbergo@transleaseinc.com

www.transleaseinc.com WWW.TRANSLEASEINC.COM Security Shredding News Winter 2017-2018 15

PRSRT STD U.S. Postage

PAID

Cleveland, OH Permit #1737

6075 Hopkins Rd • Mentor, OH 44060 • Ph: 440-257-6453 • Fx: 440-257-6459 • Email: downassoc2@oh.rr.com

Inside This Issue

VOL. 14 NO. 4

WINTER 2017-2018

Special

buyers’ guide issue

Secure Destruction Outlook: Stability & Opportunity Amid Challenges PAGE 1 Office Paper Remains Stable During Year of Scrap Pandemonium PAGE 6 Information Security Forum Forecasts 2018 Global Security Threat Outlook PAGE 12 HIPAA Enforcement 2018: Are You Ready?

PAGE 14

NAS M O

ILLE HV

LIVE FR

April 13-15, 2018

Sound Practices for a Sound Future With the secure destruction industry constantly changing, industry professionals need new skills, new information, new tactics and new strategies to grow and succeed.

Invest in yourself and your company by attending NAID 2018.

Register before Dec. 31 and Save $200 www.NAIDconf.org

#NAID2018

All attendees also have access to the 2018 Medical Waste Conference. Take the opportunity to learn more about the medical waste management industry. *Discount is based off of full registration rate. Discount will already be applied for online registration. © 2017, the National Association for Information Destruction (NAID). All rights reserved.

*