TRIBALNET MAGAZINE | SPRING 2020 innovative mindset? We don’t settle for the norm and always try to improve upon what’s standard by enhancing the system through our ability with custom development. Our team is built on the foundation to take risks and look for opportunities. We’ve found diamonds in the rough in some of our staff, we’ve capitalized on innovative spirits and when you have a team that is excited about new things instead of scared of it, it creates a culture of innovation. What advice or thoughts to share with your peers can you tell us? One thing I’ve learned in my career is that you can never assume people think the same way you do. The moment you believe they do is the moment you will fail. You have to know the right questions to ask to ensure your message is being conveyed. Communication is critical and it’s very easy to assume someone is on the same page as you because they are in the same department, are in the same organization, work in the same industry or have had some exposure to it. But that isn’t always the case. True leadership and effective communications relies on figuring out how to ask the right questions and in the right way. Since this magazine edition is much about “the future” what would you want to know if you could time travel ahead? I’d want to see the evolution of sports betting and e-sports. I am a big gamer myself and would love to see the growth of e-sports. We’ve hosted free play and gaming night tournaments at the casinos and it’s fun to see the crowd it brings in and the different level of excitement. We have a lot to look forward to in the future of the gaming and hospitality industry. I’m happy to be a part of it. We’d like to thank Ralph for meeting with us for this interview. He welcomes your questions and comments and can be reached at: rkato@fusionrs.com Key Technology Gaming: IGT Hospitality: Oracle/Opera POS: Agilysys Tribal Enrollment: Progeny Accounting/Back Office: Oracle/PeopleSoft Associate Members of TribalHub are invested in the Native American technology industry Take a look at some of our members and contact us if you'd like to be connected! Accent Card Services, Inc. Agilysys Aprima Medical Software Arctic IT BMC Software, Inc Casino Journal Carahsoft Curvature Dasher Technologies Digital Supply International Eaglesun Systems, Inc. Engaged Nation Gaming Hospitality Solutions Gaming Laboratories Intl LLC Gartner Graybar Handel Information Technologies, Inc. Hewlett Packard Enterprises Info-Tech Research Group Insight Public Sector intelligentTag Inc. IT Response Team, LLC Ivanti Link Technologies Maestro PMS Mainline Information Systems MiCamp Solutions Midax, Inc Minokaw Technologies Native Network Naviant, Inc. NetApp Nutanix Omnico Group Panasonic Power & Tel Proofpoint, Inc. Software Simplified Solutions II Spectrum Reach Splunk Technologent Rainmaker, a Cendyn Company USBookmaking Virtual Procurement Services THANK YOU TO OUR 2019 ASSOCIATE MEMBERS tribalnetonline.com | 1 THE INNOVATIVE MINDSET FOR THE T ech| tribalnetonline.com 2 THE INNOVATIVE MINDSET FOR THE T ech | tribalnetonline.com 2 P. 6 ANOTHER DAY, ANOTHER DATA BREACH: HOW CONSTANT NEWS CAN RESULT IN "DATA BREACH FATIGUE" by Shannon Wilkinson, Tego Cyber Inc Copyright © 2020 TribalHub® All rights reserved. TribalHub is the parent company of the organizations: TribalNet™, TribalWise™, TribalValue™ and TribalFocus™. No part of this publication may be reproduced, distributed, or transmitted in any form or by any means, including photocopying, recording, or other electronic or mechanical methods, without the prior written permission of the publisher, except in the case of brief quotations embodied in critical reviews and certain other noncommercial uses permitted by copyright law. Although the author and publisher have made every effort to ensure that the information in this publication was correct at press time, the editor, authors and publisher do not assume and hereby disclaim any liability to any party for any loss, damage, or disruption caused by errors or omissions, whether such errors or omissions result from negligence, accident, or any other cause. E: INFO@TRIBALNETONLINE.COM P: 269-459-9890 F: 269-459-9889 TRIBALNETONLINE.COM TribalNeTmagazine SPRING 2020 WELCOME TO TRIBALNET’S MAGAZINE The Innovative Mindset for the next TECHade... What does it really mean to “be innovative”? Depending on your organization, innovation may mean big, big things. Game- changers, industry disruption. But the results of innovation don’t always have to be mind blowing. It instead might mean simply being creative and imaginative to do more with less or solving small problems with inventive and original thinking. An IT department of five is facing different challenges and obstacles than an IT department of 45. But does that mean they can’t both be innovative? We’ve seen some of our speakers through the years at TribalNet challenged to deliver a solid presentation that’s meaningful for ALL size tribes because let’s face it, security best practices aren’t going to be the same across the board everywhere, even if we want them to be. One thing that does transcend the gap of department size, or how much capital you have or where you are in the country is the focus of the Spring issue...mindset. Everyone, should already be taking 2020 head on with an innovative mindset. Although an innovative mindset may mean something very different to your team than it does to your neighboring tribes, the importance of it is certainly equal. We want to know what you are doing to be innovative. If you need a kick start, take a look through our spring issue and get ready for the next “TECHade”. We’ll be by your side for the ride! Shannon Bouschor TribalHub, Director of Operations shannonb@tribalhub.com FROM SHANNON BOUSCHOR TRIBALHUB’S DIRECTOR OF OPERATIONS SPRING 2020 AD INDEX 4 NATRC 11 Jabra 18 Handel IT 25 Arctic IT 29 Green House Data 31 Darktrace 35 OIGA 41 IntelligentTag 43 RSM 45 IBM 47 Cognitec 47 National Food Group P. 16 INNOVATE WITH OPEN SOURCE by Ram Patrachari, Viejas Enterprises3 TRIBALNET MAGAZINE | SPRING 2020 P. 19 THE IMPORTANCE OF AN INVENTORY FOR SECURING PATIENT DATA by Wendy Andrews and Nathan "Nate" Jones, CISSP, CAP, Indian Health Service (IHS) FEATURES 5 AS NATURE INTENDED by D.J. Vanas 6 ANOTHER DAY, ANOTHER DATA BREACH: HOW CONSTANT NEWS CAN RESULT IN "DATA BREACH FATIGUE" by Shannon Wilkinson 10 WOULD YOU LIKE AI/ML WITH THAT? THINKING ABOUT ARTIFICIAL INTELLIGENCE IN THE ENTERPRISE by Craig Lewis 15 ARE YOU TRIBAL ELECTIONS SECURE? by Andrew Dolan 16 INNOVATE WITH OPEN SOURCE by Ram Patrachari 19 THE IMPORTANCE OF AN INVENTORY FOR SECURING PATIENT DATA by Wendy Andrews and Nathan "Nate" Jones, CISSP, CAP 24 DRIVING CORVETTES ON GRAVEL ROADS: THE IMPORTANCE OF MODERNIZING YOUR IT PROCESSES by Ryan Glenn 28 TECHNOLOGY TRANSFORMATION: LEADERSHIP RESOLUTIONS AND VISION FOR 2020 by Izella M. Dornell 30 THE FUTURE OF CYBERSECURITY IS HYBRID: HOW ARTIFICIAL INTELLIGENCE AUGMENTS HUMAN TEAMS by Marcus Fowler 32 ARE YOUR EMPLOYEES EQUIPPED TO ADAPT IN A CHANGING MARKET? by Fred Brown and Trent Champlin 37 WHERE IS MY COMPLIANCE COURSE? by Sheila Mansolillo 38 CHANGING THE LEADERSHIP DEVELOPMENT PATH by Jennifer Mackin 40 WHY IS DATA LINEAGE IMPORTANT FOR ADDRESSING PRIVACY? by Joe Stefaniak 43 CONSIDER A CYBERSECURITY STEERING COMMITTEE by Anthony Catalano 44 CONTINUOUS IMPROVEMENT by Renita DiStefano 46 THE AV AND IT CONNECTION IN THE NEXT PHASE by Fletcher Hickey 48 COMMUNITY HEALTH: ONE TRIBE'S JOURNEY by Lisa M. Yawakia AGENCY UPDATES 14 DHS: Department of Homeland Security, CISA: Cybersecurtiy and Infrastructure Security Agency 20 IHS: Indian Health Service 36 FIRSTNET 42 FCC: Federal Communications Commission 49 NTIA: National Telecommunications and Information IT LEADER INTERVIEWS 8 Ho-Chunk Nation IT Director and Computer Programmer 22 Soboba Casino Resort Chief Information Officer 34 Cherokee Nation Health Chief Information Officer TRIBALHUB HAPPENINGS 7 TribalFocus IR Simulation 9 TribalHub LinkedIn 12 TribalHub Membership Benefits 21 TribalNet Industry Award Winners 23 TribalValue Program 26 TribalNet 2018 Conference Highlights 33 TribalWise Offerings 39 TribalHub Regional Events 39 TribalHub Member Thanks 50 TribalNet Advisory Board Members 51 Why TribalFocus P. 30 THE FUTURE OF CYBERSECURITY IS HYBRID: HOW ARTIFICIAL INTELLIGENCE AUGMENTS HUMAN TEAMS by Marcus Fowler, Darktrace P. 28 TECHNOLOGY TRANSFORMATION: LEADERSHIP RESOLUTIONS AND VISION FOR 2020 by Izella M. Dornell, Gartner P. 15 ARE YOUR TRIBAL ELECTIONS SECURE? by Andrew Dolan, The Multi-State Information Sharing and Analysis Center (MS-ISAC) tribalnetonline.com | TRIBALNET MAGAZINE | SPRING 2020As Nature Intended Our elders have always taught (and still do) that nature is our best classroom and will teach us all we need to be successful in every aspect of life — including business — if we just observe. One critical lesson nature reminds us of constantly is growth. We are meant to grow and continue to grow until we die — that is what nature intended. We should not plateau, settle for good enough or backslide into obscurity once we’ve peaked. When we stop growing, we actually violate the laws of nature. Trees demonstrate another powerful lesson. Once planted, trees cannot move and are dependent on the resources available — weather, nutrients, water, etc. — in only that small area. A planted tree will completely maximize the resources available, dropping its roots as deep as possible, reaching its branches as high as possible, and growing as many fruits, seeds, leaves or needles as it can with what is available. Humans have it much easier than trees since we can move, explore, and gather what we need to grow and develop in ways that we choose. And yet, we still limit ourselves and hinder growth when we “play small,” stop learning or cease incorporating new ideas. As business professionals and leaders, school is never out for us and part of our job is to keep improving. After all, we are leading by example and sending a loud and clear message about our attitude toward growth based on what we’re doing. Here are some tips to continue on your journey of growth: CHECK YOUR HEAD Often, when thinking about growth, we tend to focus on opportunities, resources, support, etc, but more than anything else, growth is a mindset. We must believe that we can improve things (team, service, health, etc.). We can make different choices and get different results. If we don’t see that truth, no other resources matter. As Henry Ford famously said, “If you think you can do a thing or think you can’t do a thing… you’re right.” THINK TRIBAL-CENTRICALLY Tribal communities are masters at leveraging readily available resources to create success. Historically, my tribe used birch bark for canoes, shelters and containers. Other tribes used their local mud to make adobe homes that were warm in winter and cool in summer. The Plains Tribes used every single part of the buffalo to provide food, tools, clothing and shelter. What resources do you have access to right now that could help you grow and improve? GO ON A MENTAL DIET We are what we eat and I don’t mean as a carnivore, herbivore or omnivore. Today, we’re all “informavores,” consuming information constantly. Be vigilant with your information diet. Are you filling up on junk food (negative, empty or fear- based ideas) or superfood, packed with nutrients (ideas that are positive, solution- oriented and motivating)? What we consume as leaders will directly affect our organizations, and our results will reflect what we’re consuming, so choose wisely. CONSCIOUSLY CLAN UP Elders say we’re more like bees and ants than we are like eagles. We’re social beings by design and peer pressure can serve us well if we’re with the right people. Be selective with whom you surround yourself and share your dreams and plans, and who you seek out for support. When we choose to clan up with people who have positive attitudes, a sense of humor, a solution- oriented mindset, or self-discipline, we start to exhibit these traits as well because that is what is expected in our clan. So choose your clan consciously. Keep gathering and growing to avoid violating the laws of nature. Improving our skills and becoming wiser and more capable as we continue on our journey is exactly as nature intended! PERSONAL DEVELOPMENT | FEATURE D.J. Eagle Bear Vanas (Odawa) is a celebrated speaker, business owner and best-selling author of The Tiny Warrior and his newest, Spirit on the Run. D.J. shows people and organizations how to apply warrior spirit principles to create clarity, lead with courage and serve at their best regardless of circumstances and has done so with groups such as Intel, Subaru, P&G, NASA, Costco, U.S. Army, Mayo Clinic and 500 tribal nations. He was recently featured in the PBS documentary The Warrior Tradition which aired nationwide and he can be reached at (619) 271-2113 or at http://www.nativediscovery.com. ABOUT THE AUTHOR BY D.J. VANAS PRESIDENT, NATIVE DISCOVERY INC. tribalnetonline.com | 5FEATURE | CYBERSECURITY | tribalnetonline.com 6 Depending on what information is stolen, in addition to private information from email accounts being exposed, data breaches can lead to identity theft as well as misappropriation from bank and securities accounts. While fraud protection on credit cards can protect you if the card number is stolen, theft of a debit card number is another story entirely. You can face financial hardship as you go through the process of filing fraud reports and trying to get back money that was taken directly from your bank account. There is the time and effort to be considered when fighting identity theft: speaking to bill collectors, filing police reports, and submitting reports to credit monitoring agencies. None of that is fast, easy or fun. Even if only your name and email address are stolen, you may start receiving specially crafted phishing emails that could lead to financial losses or account compromise, both personally and for your organization. If your organizational credentials are compromised, it could result in a data breach of the organization’s information, leading to compliance and regulatory issues. There are several things you can do to protect yourself and your organization from the impacts of data breaches: 1. If you have an account with a compromised website or company, immediately change your password. 2. Use unique passwords for each account – having a different password for each website or online account will help if one of those accounts is compromised, because then only one account is affected. Instead of recycling and reusing passwords, consider a trusted password manager such as KeePass or LastPass, helping you easily track and manage your passwords. According to Privacy Rights Clearinghouse, there have been more than 9,000 data breaches since 2005, which equals about 1.77 data breaches per day, and those are just the ones reported in the United States. Some of these affected millions of people. The constant news about our personal information being stolen has led to a phenomenon dubbed “data breach fatigue.” In simple terms, data breach fatigue means that consumers have become so accustomed to hearing about data breaches that they inured to the effects and are less motivated to do anything to protect themselves. It has gotten to the point where people just accept that their information is not safe, and have stopped expecting that companies they entrust with their data will keep it safe. Data breach fatigue has become so pervasive that 35% of people who have had their information compromised in a data breach do not bother to change their passwords following the breach. A review by the Microsoft identity threat research team last year found that 44 million of their clients were using compromised credentials on Microsoft’s platforms. The rush to get tax documents out to employees and contractors creates opportunities for identity theft. In recent years, tricking companies into revealing W-2 information has become a favored activity of cyber-criminals and an easy way for them to file fraudulent tax returns and steal refunds. Organizations need to take care when transmitting sensitive employee information and make sure that the information has truly been requested by an authorized person and that it is sent in a secure manner. Individually, we wonder, “If my data is stolen what’s the worst that can happen?” Another Day, Another Data Breach HOW CONSTANT NEWS CAN RESULT IN “DATA BREACH FATIGUE” 3. Use credit monitoring services – if your information has been compromised, you are probably eligible to receive up to two (2) years of credit monitoring services free-of-charge. Even after the initial free period, plans are inexpensive, many ranging less than $20 per month for the entire family. How much is your peace of mind worth? 4. On websites, provide only information that is required – when asked for optional information such as address or phone numbers, don’t feel obligated to provide them unless you want the company or its partners to contact you, 5. Consider a credit-freeze – if you are not actively opening credit card or loan accounts, it can be wise to put a freeze on new credit applications. This will prevent fraudsters from being able to open accounts in your name and will alert you if there are attempts to open accounts. You can easily remove the freeze if you need to apply for a new line of credit. 6. To protect yourself against phishing attacks, never provide your personal information after following a link from an email. Instead, go directly to the website of the bank or company that allegedly sent you the email. Shannon Wilkinson is CEO and President of Tego Cyber Inc. Shannon earned her bachelor’s and master’s degrees in management information systems from the University of Nevada, Las Vegas and University of Phoenix. Shannon spent 12 years with the United Nations as part of the Kosovo mission and is happily married with three daughters. ABOUT THE AUTHOR BY SHANNON WILKINSON CEO | PRESIDENT, TEGO CYBER INC Have you put your Incident Response Plan to the test? Be prepared when a physical or cyber disaster hits TribalFocus o ers a 3-day, onsite Mock Incident Response Challenge. Starting at $7,500 We bring the simulated incident and create a real-world response environment for your team, engaging top executives in the entire process. Don't wait until it's too late. Contact us today. WEB: TribalFocus.com EMAIL: contactus@TribalFocus.com PHONE: 269-459-9890 | tribalnetonline.com 8 Q&A WITH HO-CHUNK NATION IT DEPARTMENT QUESTION + ANSWER | HO-CHUNK NATION'S IT DEPARTMENT The Ho-Chunk Nation is not located on one continuous land base, such as a reservation, but has scattered communities and acreage. There are currently 6,563 Ho-Chunk tribal members (as of 9/21/10) and they are the largest employer in both Sauk and Jackson County employing roughly 3,100 people. BOBBY BIRD IT DIRECTOR, HO-CHUNK NATION (pictured right) SHANE STEINDORF COMPUTER PROGRAMMER, HO-CHUNK NATION (pictured left) The Ho-Chunk Nation’s IT Department was one of the 2019 recipients of TribalNet’s Industry Award. After receiving their award at the TribalNet 2019 conference in Nashville, TN, Bobby Bird, IT Director, and Shane Steindorf, computer programmer, sat down and talked with TribalHub about their most recent projects, upcoming plans and how the team is delivering and maintaining a high level of excellence. First off, congratulations on winning the TribalNet Industry Award! Before we get into the details of your latest project, tell us a little bit about your IT Department and your tribal service area in general. Thank you so much, it was really a team effort and we are very honored to receive the award. So, Ho-Chunk Nation’s IT Department employs 65 IT professionals and we cover service in seven counties and ten city offices throughout Wisconsin, Illinois and Minnesota, along with providing assistance to the Nations’ Health Department, Tribal Government programs and departments, as well as the Nation’s six gaming facilities. That is a huge coverage area! Yes, it really is. But we tackle it with teamwork and pride. One of the most recent projects you and your team addressed enables the tribe’s language division to modernize the details of bringing their language program into the schools. Tell us a little about this project. Technology is an ever-changing, living, almost breathing structure of a beast; our department is equivalent to the warriors that battle the beast. And in this case, the beast that the team tackled was an outdated school tracking program. The overall goal of this project was to streamline the grading and student tracking progress of the Nation’s language program and at the same time, assist in preserving our tribal language. That’s a huge task to tackle — but with a huge reward! Do all of the schools teach the traditional Ho-Chunk language? The school systems in the counties we service teach our language and are integrating it into the students’ academics to keep our language alive. But the language division needed a new and more efficient way to keep track of not only students and assignments, but also language levels, grades and attendance. Before we implemented the new program, teachers were using paper and pen to track the students’ progress and were not able to share that information with the language department who were placing them in the various classes. We needed to do something to connect everyone’s information together in a usable, sharable format.TRIBALNET MAGAZINE | SPRING 2020 tribalnetonline.com | 9 LinkedIn.com/company/TribalHub Follow us on our other social platforms too! page. Join the conversation • Find news unique to tribes and technology on the • Continue to engage with valuable peer-to-peer connections • Make smart connections with our trusted vendor partners • Get a rst look at news and o ers from all of our divisions Find us at Shane, you worked specifically on this project from beginning to end. Walk us through the process of what you found and how you came up with a solution. Well, we went in, listened to what they needed, and created a program that was easy and efficient for them to use. We basically digitized the entire process they use for the language program, from the time the students walk into the room, to when they turn in their homework, to their final grade and placement. What was the biggest challenge you faced with this project? STEINDORF: I think the biggest hurdle we helped get them over was the coordinating that it took between employees, teachers and language managers that all work in different areas but with the same students. Each of them had information that the others required and needed a better way to share it. The new program we developed allows the language department to enroll students into different programs and also allows the teachers to track student fluency levels, grade their work and take their attendance. BIRD: After the success of this program within the language department, a similar application was created for other areas of the tribe including the tribal workforce development. We would like to thank Bobby and Shane for their time meeting with us and congratulations to them again on being a recipient of one of this year’s TribalNet Industry Awards. STEINDORF: Yes, there came a need for a comparable program with our job training and placement program. So we again digitized the entire process for them — from the members’ applications to the employment forms. It sounds like this application is something that can be used within the tribe in multiple divisions. This type of case management system will eventually evolve into something that many of the tribe’s divisions, including labor, social services and tribal elders divisions, will use. We are also working on a case management and tracking program for energy subsidies and transportation requests, which we think will evolve to include case management for all tribal supportive services. It’s so rewarding to see an IT Department be so involved in preserving the culture of a tribe. Many people think IT and think wires, computers and systems. Knowing that the programs we are working on benefit tribal members and help the departments is very rewarding for all of us! Next >