GraVoc Team Wins Softball Championship

Congratulations to the GraVoc Associates girls’ softball team (pictured above).  Last week, the GraVoc team reached the league championship for the second consecutive year.  The GraVoc ladies went undefeated throughout the playoff run, so they had two chances to clinch the title.  It only took one game, and the team was crowned champions of the 13-16 year old division of the Peabody Youth Girls Softball League.

Their sponsors at GraVoc Associates are proud of the team’s accomplishments all season long.

Massachusetts Data Protection Law: Encryption Standards

As the deadline for compliance with the Massachusetts Data Protection Law (MGL 93H & 201 CMR 17.00) rapidly approaches, many companies will be looking for information on what they have to do in order to achieve compliance with the regulations that are more aggressive than the “game-chang[ing]” law passed in Nevada.

The part of the law that has garnered the most attention is its emphasis on encrypting personal information.  For the sake of reference, the encryption-related requirements are printed below:

• “To the extent technically feasible, encryption of all transmitted records and files containing personal information that will travel across public networks, and encryption of all data containing personal information to be transmitted wirelessly.”
• “Encryption of all personal information stored on laptops or other portable devices.”

Source:  Mass.gov

Simply stated, encryption is a technical provision that makes it very difficult for an unauthorized individual to access electronic information.  Encryption is especially important with email transmission (in the case that the email is intercepted over a public network) and with portable devices such as laptops, PDAs, and flash drives (which are easily lost or stolen).

Peabody, MA-based GraVoc Associates, celebrating fifteen years of business in Greater Boston, New England, and beyond, understands that the encryption standard especially is an unusual burden for businesses that don’t typically have to concern themselves with detailed information security governance.  GraVoc’s information security personnel have been following the evolution of the Massachusetts Data Protection Law for several months, demonstrating their commitment to help both new and existing clients comply with this challenging law with appropriate procedures and products.  For more information about MGL-93H services, as well as more information about GraVoc’s services in their other practices of information systems and financial and professional consulting, please visit GraVoc.com.

Mass. Data Protection Deadline: Less than Six Months Away

The Massachusetts Data Protection Law, sometimes referred to as Massachusetts General Law 93H & I or 201 CMR 17.00, goes into effect on January 1, 2010, and the general consensus is that the effective date is NOT going to be delayed for a third time. This law requires all companies with “personal information” pertaining to a Massachusetts resident to have a comprehensive written information security policy. It also requires companies with any personal information to undergo reasonably-daunting efforts to protect both paper and electronic files to prevent a data breach.

“Personal information” is defined as a person’s name or first initial and last name in conjunction with a social security number, a government issued ID number, a driver’s license number, or a financial account number (including credit and debit card number). This covers both customer information and employee information, so virtually every business in the state will have to comply with this law.

The many provisions required by this aggressive law include procedural controls, physical controls, and technological controls. Among the more challenging measures to be mandated under this law are the following:

• A comprehensive, written information security policy regarding the protection of information both in physical and electronic forms.
• A vendor management program that ensures that all vendors, service providers, and contractors with access to personal information are also taking adequate measures to curb identity theft and data breaches and to become compliant with this law.
• Higher levels of physical information protection, such as the use of locked containers and the employment of locked facilities.
• Challenging standards for electronic data protection, including the encryption of hard drives and portable devices like laptops, PDAs, and flash drives that contain personal information.

As this law sets very high standards and expectations and threatens to levy strict fines against noncompliant businesses, small and midsized businesses may not know where to turn. GraVoc’s information security team has been monitoring the law’s provisions and its evolution over the past year.  GraVoc is committed to helping clients comply with this law and proactively quell the risk of data breaches and identity theft.

GraVoc Associates, Inc, a full-service consulting firm based in Peabody, MA, is celebrating 15 years of business in Greater Boston and throughout New England. GraVoc offers a wide range of services in the fields of information security, information systems, and technology and financial services, including Massachusetts Data Protection Law compliance services. For more information on GraVoc’s information security work in the highly-regulated financial industry or more information about 93H compliance services, please visit GraVoc.com.

Jason Vlacich Celebrates 10 Years at GraVoc

GraVoc Associates is pleased to announce a significant milestone for Director of Information Systems Jason Vlacich.  This month, Jason will be celebrating ten years with the company.  The former controller of Netsuite Development Corporation, Jason has brought knowledge in both the fields of information systems and finance to catalyze GraVoc’s rapid growth in the market of ERP system implementation as well as the growth of the GraVoc Software branch of the company.

““From the time he joined GraVoc in 1999, Jason has been the ‘go to’ guy for most of our new projects and new information systems,” said David Gravel, President and CEO of GraVoc Associates.  “Jason truly sets the bar for commitment to both our customers and the company – I am proud to have him as both an employee and a friend.”

Thanks to the efforts of Jason and the rest of the GraVoc staff, the company has climbed from fifteenth to second in New England in terms of Microsoft Business Solutions resellers in New England, and the GraVoc Software branch has produced a vast line of products available, including the robust GraVoc Field Service application.  For more information about the company, which is celebrating fifteen years of business in Greater Boston in the fields of information systems, information security, and technology and financial consulting, please visit GraVoc.com.

Cathy Gravel Receives Rotary Honors

GraVoc vice president Cathy Gravel knew going into last week’s Rotary banquet that she would be named the club’s president for 2009-2010.  What she did not know is that she would be named the club’s Rotarian of the Year, as well as awarded the prestigious Paul Harris Fellow distinction.

Cathy received this award undoubtedly as a result of her tremendous efforts on several of the Peabody Rotary’s project committees.  Cathy served as the chairperson of the scholarship committee, which awarded $11,000 of scholarships to Peabody students.  She also served as chairperson and grant writer of the Safe 2 Pedal Day program, which organized an event encouraging health and bicycle safety.  During her one-year term as president, she will now oversee all of the club’s community involvement projects. 

Rotary International’s slogan is “Service Above Self,” and they are recognized worldwide as an organization that undertakes local projects as well as international efforts, such as funding surgery for children with facial deformities in the third world and eradicating polio worldwide.  Locally, the Peabody Rotary Club has received recognition for programs such as the Y It Matters program, which provides extended-day school activities for elementary school students.

The Paul Harris Fellow distinction is perhaps the highest distinction awarded to a Rotary member, as it rewards the recipient for “outstanding contributions to the ideals of Rotary.”  The award also typically involves a contribution to the international Rotary Foundation in honor of the award recipient.

The entire GraVoc organization is proud of Cathy and her contributions to the community and her embodiment of Service Above Self.