What is Phishing? Phishing is a form of cyber-attack where the criminal uses emails through fraudulent claims of being a known vendor, client, associate, affiliate, or officer to obtain confidential information.

What does a phishing email look like? Typically, the criminal uses the fraudulent account to demand urgent action. These demands or requests for action come in many forms, such as the following:

• Click the attachment to act now (most used in CEO fraud or vendor fraud)
• Linking a Word document with a request to enable macros
• Update a password or make changes to security questions associated with the account
• Respond to a social media request
• Suggestions to use a new Wi-Fi hotspot

Through requests like those mentioned above, the criminal can access social security numbers, phone numbers, credit card details, addresses, passwords and password security information, dates of birth, and other sensitive information to your employees and clients.  

How can I reduce the vulnerability of my business? Use the acronym “M.I.C.E”

• Monitor through phishing simulations.
• Incorporate cyber security awareness into employee training.
• Communicate consistently and provide additional information about cyber security.
• Encourage all users to report any suspicious emails, even when they appear to be from a credible source.

¹https://www.csoonline.com/article/3153707/top-cybersecurity-facts-figures-and-statistics.html

The post What is Phishing? first appeared on Capstone Brokerage.

Under these new protocols, certain businesses will have to move from 50% capacity to 25% capacity limits. This includes bars, restaurants, gaming establishments, libraries, and gyms. These directives take effect at 12:00am on Tuesday November 24, 2020 and will last for a minimum of three weeks, when the Governor will revisit whether to continue with the restrictions, increase restrictions, or loosen restrictions.

Below are links to guidance regarding the new COVID-19 directives

• Statewide Pause Guidance Summary
• Statewide Restriction Matrix

The post Governor Announces New COVID-19 Directives Amid Spike first appeared on Capstone Brokerage.

The SBA awarded Capstone’s own Alicia Marasco an award for Lifetime Impact in the small business community. Additionally, the SBA for the State of Nevada awarded her the Nevada Small Business Advocate of the Year award.

At Capstone, we strive to help companies of all sizes meet the needs of their business by providing risk management, bonding, and benefit services. We are proud to support the small business community and wish congratulations to Alicia for her hard work and dedication.

Please follow the links below for more information about the SBA and how it can help your small business:

United States Small Business Administration

Nevada District Office Small Business Administration

The post Small Business Administration Awards for Capstone Brokerage first appeared on Capstone Brokerage.

Newsom, a Democrat, signed the laws over the objections of business groups, who have said they are “unworkable.”

One of the laws makes people who have the coronavirus eligible for workers compensation benefits. It takes effect immediately and applies to all workers in the state, but it treats first responders and health care workers differently than other employees.

Police officers, firefighters and health care workers – including janitors who are in contact with COVID-19 patients – are eligible if they get infected while on the job.

All other workers are eligible only if their workplaces experience an outbreak. For companies with between five and 100 employees, the law defines an outbreak as four or more infected workers who work at the same location within a two-week period.

For companies with more than 100 employees, outbreaks are defined as at least 4% of workers working in the same location being infected during a two week period.

The rules for first responders and health care workers are permanent. The rules for everyone else expire on Jan. 1, 2023.

Workers don’t have to prove they were infected on the job to get benefits because the law assumes they got it while working. Instead, employers must prove that their workers did not get the virus while on the job to deny coverage.

In a letter to the state Legislature last month, business groups said they supported that for first responders and other groups at high risk of contracting the disease. But they said it wasn’t fair to do that for other occupations with a lower risk of infection. They called the law “unworkable for employers.”

Newsom signed the law, authored by Democratic state Sen. Jerry Hill, during a Zoom call with supporters, including labor union leaders and members.

Monique Hernandez, a nurse, said nine of her fellow nurses were infected, though she works in an area called a “clean unit” where she does not have contact with coronavirus patients.

“There is no such thing as a clean unit when it comes to COVID-19,” she said. “I took that very personal.”

The second law that Newsom signed mandates that companies tell employees if they have been exposed to someone who has either tested positive, been ordered to isolate or died because of the virus. That law, authored by Democratic Assemblywoman Eloise Gomez Reyes, takes effect Jan. 1.

Companies must do so within one business day of learning of the exposures or they can face fines issued by the Division of Occupational Safety and Health.

Business groups, including the California Chamber of Commerce, opposed the bill because they said the law is vague and will be difficult for businesses to comply with, resulting in “good employers” facing hefty fines.

Newsom countered that the two laws “prioritize our workforce,” including front line workers he said politicians “pay a lot of lip service to, but often we don’t back up.”

The post California Governor Signs Workers’ Comp Law Protecting Workers from Virus first appeared on Capstone Brokerage.

Globally and locally, we are all currently being affected by Coronavirus (COVID-19).  As individuals, families, businesses, and governments attempt to handle this unprecedented pandemic event, many questions are arising over insurance coverages, business interruption protocols, and claim processing procedures.  Capstone has compiled some quick facts for reference and some locations you can receive more in depth information that may be more applicable for you and your business.  We will keep you up to date as we receive more information and will do our best to answer your questions.  Despite these trying times, you can be certain Capstone will remain your risk management advocate. 

Coverage-Specific Information

• Workers’ Compensation:
  • While most workers’ compensation policies do not cover claims over communicable diseases such as COVID-19, there may be exceptions due to the extenuating circumstances and the prevalence of this situation across all industries.  These claims will be examined on a case-by-case basis dependent on your insurance carrier.
  • Workers’ compensation carriers are also working with employers on payroll reporting to control insurance premium costs.  Those that do monthly reporting will be able to lower premiums based on lowered payrolls if employees are not working or business operations are paused.  Those that have auditable policies will be able to report more accurate payroll numbers at the end of their policy term. 
• Environmental Liability
  • All environmental liability policies are different, and therefore you will need to examine your particular policy to see if there is coverage for bodily injury, property damage, or cleanup liability resulting from a virus or bacteria.  Some things to consider when reviewing your policy:
    • Specific wording referencing viruses, bacteria, and microbial matters
    • When coverage begins i.e., when the virus is discovered to have been present, when a governmental agency identifies the presence of bacteria leading to the spread of the virus, etc.
    • Any exclusions regarding human-to-human transmission of communicable diseases
  • Due to this unprecedented event, we will see insurance carriers limit their future policies with such coverages.

• Business Interruption
  • Arguably one of the most significant coverages to have during this time, it is important to first identify whether the disruption in business has been caused directly or indirectly. 
    • Direct coverage is usually triggered with the physical loss or damage of business or personal property, dependent on your specific policy wording.
    • Indirect coverage is tied to anything else that would cause the potential loss of income.  A majority of claims from this situation will be indirect and caused by civil authorities or supply chain interruptions.
  • Coverage will be examined once again on a case-by-case basis, dependent on policy endorsements and wording.  If you are going to file a claim, have the following information ready to submit:
    • Outline all exact losses as specifically as possible
    • Any direct damage losses
    • Civil actions that have affected you or the area your business is located in
    • Any knowledge you may have about the direct or indirect losses of your suppliers
  • There are predicted to be certain exclusions for coverage such as:
    • If there was an introduction or spread of the virus with malice intent
    • Losses attributable to fear of contracting the virus
    • Fines and penalties brought against you for insubordination with a civil authority
  • Insurance carriers do their best not to speculate about such claims and will need concrete information to best handle the application of policy coverages to each particular situation.
• Cyber Liability
  • Many businesses, including Capstone, have switched a majority if not all operations to virtual/online capacities to accommodate for employee safety.  Cyber liability coverages could be triggered if there is the release of any protected information regarding your business or your employees.
  • Cyberattacks via emails about coronavirus target the fearful.  Clicking unfamiliar attachments or emails could result in the loss of information or the delivery of harmful software to employee computers.  Many cyber liability policies deal directly with these types of losses. 

Links to Resources

• U.S. Chamber of Commerce Foundation Coronavirus Resource Page
• Nevada Health Response
• Nevada Association of Employers Responding to the Coronavirus
• U.S. Small Business Administration Disaster Assistance Response to the Coronavirus
• Coronavirus Coverage Tied to Physical Damage Definition
• Surge in Working From Home Raises Cyber Exposure Issues
• Coronavirus Unlikely to Trigger Interruption Policies
• Clark County Coronavirus Newsletter
• Department of Labor Notice- Paid Sick Leave and Expanded Family and Medical Leave Act Under the Families First Coronavirus Response Act
• Ten Tips to Stay Cyber-Safe When Working Remotely
• COVID-19 Response, Relief, and Recovery Task Force of Nevada
• NAIC Statement on Congressional Action Relating to COVID-19
• Ten Steps All Workplaces Can Take to Reduce Risk of Exposure to Corona
• World Wide Safety
• Las Vegas Nonprofits Currently Seeking Donations
• Coronavirus Themed Cyber Attacks Rise
• Nevada Health Response Daily Situation Reports
• Nobody Goes Hungry Las Vegas GoFundMe
• California COVID-19 Additional Paid Sick Leave for Food Sector Workers Law Poster (500+ employees)
• Southern Nevada Health District Guide to Reopen Businesses and Permitted Facilities
• Bringing Select Workers Back Carries Litigation Risks
• Support Our Client, Carson Kitchen, via ItsOnMe Gifts
• Olive Crest COVID-19 Response
• City of Las Vegas Business Preparedness Grant
• City of North Las Vegas COVID-19 Relief Programs
• Commercial Rental Assistance Grant Program from the Nevada Office of Economic Development
• Division of Insurance Reminds Consumers Health Insurance Covers the Cost of Testing in Nevada

The post Coronavirus (COVID-19) first appeared on Capstone Brokerage.

End-user education addresses the most vulnerable access point to a cyber security program, the user. Employees are completely unpredictable and just as Amazon could not predict the actions of Paige Thompson, no small business owner can completely predict the actions of all employees. Although malicious and intentional breaches performed by employees cannot be predicted, we can offer education and information to avoid accidental breaches. Teaching users to delete suspicious email attachments, not plug in unidentified USB drives, alert management when a payment has been requested from an unknown entity, report all suspicious or repeating invoices and various other important lessons are vital for the security of any organization.

It seems cybercriminals have always been aware of the vulnerability that lies within the employee base. They have continuously utilized this source to attack many businesses, large and small. Unfortunately, they are most often successful when utilizing this weak point. As their attacks become more sophisticated and deceptive, end-user education becomes more necessary.

Many employers are aware of the most common threat malware, or malicious software which is commonly introduced to a cyber network through a phishing scam, when cybercriminals target the victim’s emails with an email that appears to be from a legitimate company. Typically, these emails request sensitive information and often are used to trick users into handing over credit card data and other personal information. Although phishing scams are most common, there are many other ways that cybercriminals can use your employees to introduce malware to your cyber network. It is best that we educate our users on each type of malware to aid them in identifying any attempts they may encounter. Here is a list of other common types of malware. As we progress, we will define these more in-depth.

Common Types of Malware

Virus – A self-replicating program which attaches itself to clean files and spreads throughout a computer system. Its purpose is to infect pertinent files with malicious code.

Trojans – A type of malware disguised as legitimate software for uploading, used by cybercriminals to cause damage or collect data.

Spyware – A program that secretly records user activity and is commonly used to obtain credit card information from employees often taking payments.

Ransomware – Cybercriminals lockdown a user’s files and data, threatening to erase it unless a ransom is paid.

Adware – Advertising software used to spread malware through various ads, also known as “pop-ups”.  

Botnets – Multiple networks of malware infected computers are used to perform online tasks without the user’s knowledge or consent.

The post Employee End-User first appeared on Capstone Brokerage.

If business has been interrupted and there are no employees currently working, do we still get to keep our group health plan?

• Yes, HPN and SHL have suspended the “Active at Work” provision for their policies so that group health plans can stay in place while there are no active employees working temporarily
• This provision will end on July 24, 2020

If business has been interrupted and there are no employees currently working, what are my options as an employer with a group health plan?

• There are several options for this scenario:
  • Pay whole monthly premiums as is until employees return to work
  • Pay whole monthly premiums as is until employees return to work and deduct the previous premiums from paychecks once employees start getting paid again
  • Term employees coverages and process COBRA if your group currently processes COBRA
  • Term employees and have them apply for individual insurance or Medicaid

Links for Nevada Individual Marketplace & Nevada Medicaid

• Nevada Health Link- Individual Insurance
• Nevada Medicaid

If my employees term from the group plan, can they come back onto the plan after they begin working again?

• Yes, with the following qualifications:
  • If a person is rehired within 31 days, they will be reinstated back to the date of loss
  • If a person is rehired in 32-92 days, they will not be subject to a probationary period and will be effective on the date of rehire or first of the month following the rehire date, depending on the policy
  • If a person is rehire after 92 days, the standard probationary period will apply
  • This provision ends July 24, 2020

What is the Special Enrollment Opportunity?

• This is a special opportunity for employees to enroll in coverage who may have previously waived it
• Employees who are already on the plan may also add spouses and children at this time as well
• You are not required to offer this opportunity to your employees.  It is at employer discretion
• This period will last from March 23 to April 6, 2020

HPN/SHL Frequently Asked Questions

Do I need to have health insurance to get a COVID-19 Test?

• No, most test operators or distributors do not require health insurance and most are free of charge
• If you would like to get a test through HPN/SHL insurance, download the NowClinic app on your phone, and you will be able to have a virtual visit to set up a test appointment via Southwest Medical

Other Coverages and Information

My employees are offered voluntary Aflac products.  Can they use these benefits in relation to Coronavirus?

• Dependent on the coverages they have elected, Aflac will be accepting claims for telemedicine appointments or COVID-19 testing.  Please reach out to your Aflac representative for more details. 

Links to Resources for Employers

• 10 Things Employers Need to Know Now About Leave Law and Coronavirus
• Insights in ACA during the Pandemic

The post Coronavirus (COVID-19): Benefits Facts & Frequently Asked Questions first appeared on Capstone Brokerage.

For a small business owner, the cost of a data breach averages $200,000. Yet, there are usually very small limits available for a cyber liability endorsement, most often not exceeding $100,000. Unfortunately, the lack of coverage can leave the businessowner with substantial debt. Insurance carrier Hiscox, reported that 60% of small businesses victimized by cyberattacks go out of business within 6 months.²

Cyber liability endorsements are often obtained at a relatively low cost, making them more attractive to many. They usually do not require any additional underwriting and are normally included within a quote for other lines of coverage. Although the implementation of evolving technology increases vulnerabilities within business operations, most businessowners are unaware of the effect cyber threats truly have on small businesses. CNBC reported that over 43% of cyberattacks are aimed at small businesses. Yet, only an estimated 14% are prepared to defend themselves.¹

When considering a cyber liability endorsement over a full cyber liability policy, here are a few common policy differences to consider:

• Extortion – Cyber criminals demand payment through the threat of compromised data or denial of service. Many cyber endorsements will not cover extortion.
• Limits and Sub limits – Cyber liability policy limits typically begin at a $1 million.
• Communications & Media Liability – Coverage for plagiarism and infringement or unauthorized use of a copyright or trademark, is most often not included in a cyber or data endorsement.
• Unencrypted Data – The term applies to claims arising from a loss associated with unencrypted data, typically involving an unencrypted portable device. Claims usually do not trigger on most endorsements.
• Social Engineering – Otherwise known as fraud and most commonly practiced by phishing scams, coverage is typically limited to $100,000 with an actual loss average of $150,000.

¹ https://www.cnbc.com/2019/10/13/cyberattacks-cost-small-companies-200k-putting-many-out-of-business.html

² https://www.hiscox.com/documents/2018-Hiscox-Small-Business-Cyber-Risk-Report.pdf

The post Cyber Liability Policy vs. Cyber Endorsement first appeared on Capstone Brokerage.

Wearing a Mask to Protect Others

          It has now been shown that coronavirus travels via respiratory droplets and is mainly an airborne illness.  When it’s not possible to stay the recommended six feet or more away from other people that are not members of your household, wearing a mask is the best way to prevent the transmission of coronavirus.  Certain facemasks such as the N95 mask protect the person wearing it from the environment whereas all facemasks, including homemade cloth coverings protect the environment from the person.  This is why it is critical to wear one at work as you interact with clients, employees, and customers.  While it can be uncomfortable and irritating, it can potentially save a life, including your own. 

Wearing a Mask and Protecting Yourself

          Even though the CDC guidelines recommend wearing a mask to slow the transmission of coronavirus, wearing a face covering daily for hours on end, especially for those who are not used to it, could result in many other potential issues.  Studies have shown that extended use of a face covering can cause problems such as anxiety, headaches, heart rate fluctuation, confusion, and fatigue.  Wearing a face covering can cause variances in breathing technique and thermoregulation which affect both body and mind.  Those that find themselves having an especially difficult time wearing a mask need to focus on their breathing patterns and following proper steps to prevent abnormally fast breathing rates or restricted breathing, both of which can lead to headaches, dizziness, lack of focus, and elevated blood pressure. 

Recommended Breathing Strategies

          There are simple protocols and procedures you can follow to alleviate the potential for harmful breathing techniques.  Steps you can take include:

• Understanding how to take a “quality breath”
  • Inhaling for 4 seconds, exhaling for 6 seconds, pausing for 2 seconds between breaths
• Take 5 quality breaths before putting a mask on
• Take 5 quality breaths immediately after putting a mask on
• Take 5 quality breaths after removing a mask
  • These breaths will set the tone for your breathing pattern and keep you from exhibiting dangerous breathing habits while wearing your mask
• Keep in mind to take longer, slower breaths and be mindful if they become short and sporadic
• When it is safe to do so, take a breathing break and practice the quality breaths to reduce any negative effects of wearing the mask for an extended period of time
• Practicing breathing and respiratory muscle training for 5 minutes in the morning and 5 minutes at night can contribute to healthy breathing while wearing a mask

Sources:

Risk and Insurance

PN Medical

The post Mask Safety first appeared on Capstone Brokerage.

Backyard Dangers

            According to the National Safety Council, on average 10 people die from drowning every day outside of boat related incidents.  While the peak for accidental drownings is among one and two-year olds, it’s important for children, teenagers, and adults to fully understand pool safety.  Knowing how to swim and never swimming alone are among the top suggestions in safe pool habits.  Additionally, knowing CPR and having a first aid kit available are even more valuable precautions to take.  And of course, keeping any kind of pool gated or fenced off can be the difference between life and death for many children and infants who happen to wander outside a parent’s watchful eye.  These precautions can also come in handy for other backyard dangers such as trampolines.  Trampolines with safety nets provide more protection for children and decrease the risk of fracture or breaking an appendage should they land on the ground or improperly on the trampoline itself.  Additionally, if getting a trampoline is something your considering, think about increasing your personal liability insurance.  If a child’s friend or neighbor gets injured, it will be the responsibility of the homeowner. 

On the Grill

            The chosen form of backyard cooking for most in the summer months, grilling cannot only create delicious food, but amazing memories.  It’s always best to be familiar with the type of grill you’re cooking on whether it be charcoal, gas, or electric.  When grilling, never leave any open flame unattended and only allow adults while cooking is going on.  All grills and even fire pits should be kept away from any structures or overhanging tree branches.  If conditions for grilling are not ideal, whether it be windy or rainy, it’s best to avoid try to light the fire, especially with any kind of accelerant.    Having that first aid kit handy will also be key if there is any need for it due to a burn or other injury. 

New Pets

            With more time being spent at home, this is the optimal time for many to adopt new members of their families.  However domesticated pets, especially dogs, present their own specific risks you may not be prepared to take on without careful consideration.  Adequate training resources or consistent training routines that will mitigate the chances of potentially very dangerous dog bites should be a part of the plan prior to.  Not only can these bites be painful, but about 1 in 5 dog bites requires medical attention and can easily spread disease.  Once again, if your dog attacks or bites another person, you will be held personally liable, with or without sufficient insurance coverage. 

Safe Summer Basics

            Unfortunately, it’s looking like this summer will still be spent in the midst of a pandemic, requiring our approach to summer safety to extend beyond the typical recommendations of drinking plenty of water, wearing plenty of sunscreen, and being careful of bug bites.  With the threat of coronavirus still looming, no matter where you are, always try to keep 6 feet between you and people outside your household.  When out and about, whether it’s the grocery store or even a trip to the beach, it’s always best to wear a face mask whenever possible to protect yourself and the people around you.  If you hold a barbecue or a get together with friends, keep the guest list to a minimum and make sure not to share any utensils, plates, or cups.  And of course, wash your hands often and bring hand sanitizer for times when washing your hands isn’t always an option. 

Sources:

National Safety Council

Red Cross

Centers for Disease Control

The post Height of the Season: Summer Risks first appeared on Capstone Brokerage.