Newsletters

The 5 Most Overlooked Risks and Costs of Public Storage

Self Storage HeroGrandma’s dining room table, the fake Christmas tree, motorcycle parts, and all of the clothes we hope to fit back into—these are all great things to store in a Public Storage unit. Despite the convenient 24/7 access, the free first month, and the friends you can meet at the units, your firm’s confidential information should not be there. Information, especially paper records, deserve special attention. There are also some risks associated with this storage method that don’t include privacy breaches.

1. Identity Thefts and Accidental Privacy/Confidentiality Breach

In today’s world, a unit full of medical records or boxes of tax forms are more valuable to the bad guys than pallets of flat screen TVs and fur coats. The bad guys know that these files are golden on the open market and your lock will hardly slow them down. Some units have common, open ceilings. They may share an access door, or are merely located behind a fence. Many of us are on the hook to report or notify clients/patients when a potential breach occurs just as much as actual violations. Resolution of these issues has been known to cost firms up to $200 per incident.

2. Environmental Risk – Neighbors, Fire/Sprinklers, Floods

You can pick your friends, but you can’t pick your neighbors. The same goes for self-storage units. It has been reported in the news across the country that many units are used for meth labs, makeshift apartments, gambling, and/or party hangouts. Other neighbors may be upstanding citizens or business operators; yet, still expose your information to unnecessary risk, such as landscapers with gas tools. Still more, some units are built in unacceptable areas such as flood plains, grandfathered in contrary to modern fire codes and may either share or not even have sprinklers.

3. Unproductive Organization and Retrieval Process

With very few remarkable (and expensive) exceptions, a storage unit simply can’t be used to effectively manage information at the file level. Full boxes stand a chance of being found, and re-found after use, but files hardly ever make it back to their home cartons. If you think they are where they are supposed to be, but haven’t inspected lately, you may be in for a surprise.
Without extensive shelving, planned growth, labels, etc… it can be a nightmare to organize in this manner.

4. Costly Workers Comp Injuries

The average banker box weighs 35 pounds and tends to get crushed after 4 to 5 of them are piled on top of each other. In order to maximize the value of the rent for a unit, people tend to pile them “high and tight”. Extracting a file or box from this Jenga setup can be extraordinarily dangerous to anyone—let alone an inexperienced office worker. Even worse, if the staff members responsible for “fetching” records are not covered by health insurance or workers comp, like volunteers or interns, you may be opening yourself up to all sorts of expensive claims. This risk alone is enough to justify transferring from a public storage unit to a professional records management facility.

5. Detours that Cause Lost Productivity

In the process of discussing the risks of using a public storage unit, it is quite common to hear that staff members tasked with the responsibility of “fetching” records are not happy about it. And, since there is little supervision and a lack of other volunteers/victims, the folks heading to the unit give themselves a nice little break in the day to go shopping, meet friends for coffee, schedule quick doctor appointments and more—in exchange for their efforts. Admittedly, others are willing to do this work on their way home or into work. But, these good boys and girls are the exception.

Biased Summary

Corodata has made a living for over two decades rescuing firms from storage units based on the cost to store the material alone, but these factors push the value we provide into outer space. We know that many of you chose a storage unit because you didn’t know about our industry, and we accept the blame for that. It is never too late to make this right, and we’ll get you out of there without so much as you lifting a finger after unlocking the garage door. We look forward to helping you like we have so many before!

Is Scanning Archives Really More Green Than Keeping Paper?

We have been peppered with messages about paper wiping the earth of its trees for years, and trained to feel guilty about keeping paper around. However, there is a lesser-publicized point of view—where back scanning of archived paper is actually much harder on the environment. Read on for a great green debate on the topic of keeping your paper archives versus scanning them.

 

Corodata offers both Paper and Digital storage, so this message is delivered with no intended bias as a discussion featuring a lesser publicized view of the topic as it directly relates to our industry. Facts in this area are hard to verify given how politicized and commercialized the argument is on so many fronts.

 

The Case for Paper

Without getting romantic about the feel of a book or making jokes at the expense of computer challenged friends—for many reasons—paper is still a very important material for most commercial enterprises.

Some people still like to use it, others still have to

Whether it is invoices, QC records, employee applications, medical visit notes, purchase orders, contracts or just receipts for expense reports, paper is used each and every day by all of us. Of course there is an electronic alternative to all of these uses, but we are not all ready or equipped to pull this off, so we have to make due for now. Recognizing this reality, the question becomes what to do with after its primary use is absorbed – namely, how do we store and potentially access later for review, audits and the like?

Paper mills are more responsible than ever

Lastly, paper mills are not simply ripping through forests until they meet water. They are responsibly replanting and continuously harvesting this land, as a crop more than a resource. Certainly, there is energy used to do this and must be factored into the debate.

The paper has already been printed

To be blunt, the damage to the tree has already been done. Scanning at this point wastes energy and resources, such as coal, electricity to power up scanners, pc and server usage plus all the parts, materials and deliveries used to manufacturer these machines, and lots of money. Scanning can run up to 10 times more than the lifecycle costs to add, store, and destroy a carton, and is paid up front hurting cash flow.

The Case for Scanning

Limiting Scanning to simply the Green debate may arbitrarily diminish the other values that scanning brings to an organization. There are a handful of exceptions to this stance that may apply to your firm.

Information is instantly available

Our experience tells us that organizations require access to information on an incredibly shrinking scale over time. The highest, yet still not very high, retrieval rates are in the first twelve months, with rates plummeting thereafter until the retention period has lapsed. The argument that scanning keeps vehicles off the road, saving gas, simply doesn’t hold water (or gas) in this case.

Anywhere in the world

Easy access and redundancy are great reasons to scan. Real time conversion of paper to digital for workflow purposes can lead to some great efficiencies and productivity as well. This component of scanning is not to be ignored, but pretty weak as part of any green initiative given that the paper is required to start and always printed.

Recycling only works if paper is recycled

Once paper is created, it begins its defined lifecycle: it becomes printed material, and then sits—in a pile, file, or box–until it is needed. Paper can only give back to the earth again when it is no longer needed, and it is shred and recycled. It’s the perfect lifecycle if you will.

The long and short of it: the choice is yours

  • Scanning can be a great solution and Corodata is here to help
  • If scanning isn’t right for you, there is a great chance our traditional records management solution is a great fit.
  • Scan on Demand retrieval makes a great hybrid tool for many as well.
  • Tell us where you stand on this great debate

‘Tis the (Identity Stealing) Season – Watch Out!

Riding shotgun alongside the huge increase in shopping (both online and in stores), the crazy schedules many keep, and the increased communication between friends and family is one major hassle that no one deserves – to have your identity stolen.

The identity thieves are keenly aware of how our behavior changes, when our guard is down, and when to strike. They prey on our good mood, our giving nature, and the massive avalanche of commerce and communication taking place that no one seems to be able to manage.

A great article from Identity Guard highlights the methods used by thieves, some ways to avoid these Grinches, and offers some scary statistics. In just the much sung about twelve days before Christmas, nearly a quarter million Americans will suffer from identity theft.

Just a few of the horrible tricks that you should watch out for:

  • 1. Trojan Horse viruses in eCards
    Evildoers can send out the nicest eCards, but all the while embed them with malware that may hurt you minutes or even months later. They recommend sending links from trusted sites, not attachments.
  • 2. Great deals on Must Have Gifts
    That iPad2 for $99 or other “must have” gifts for far less than other stores just may be too good to be true and a lure to gain your identity. A common trick is to take you all the way to the order screen, get your credit card and shipping info, but then display an out of stock message – after they collect your info!
  • 3. Checks from Grandma in the Mail
    The opportunity to steal checking account details, signatures, etc… skyrocket when our mailboxes are stuffed with thoughtful checks from loved ones. On top of just stealing or altering the check itself, the bad guys now know a lot and can pull other scams with greater effectiveness – like fake calls from the bank using your account number for validity.
  • 4. Charity Scams
    Spoofing the great causes that rely on holiday spirit is a favorite and easily done via the phone but increasingly by email too. Give to those you trust and know.
  • 5. Data on Replaced Technology
    After you unwrap that new laptop, don’t discard your old PC without a proper “scrub” from professional services or software. Erasing files is not enough – the article mentions MIT students who found more than 5,000 credit card numbers on only 158 used hard drives.
    Corodata hopes that you are prepared personally and professionally, ready to defend confidential and proprietary information and stands ready to help via secure shredding and professional off-site storage of paper and media.

Read our 4 Things You Can Do at Work to Prevent ID Theft guide.

Proper Retention Scheduling Is Required by Law but, What / Where are the Rules?

Perhaps no topic is more discussed in the information management world these days than Retention Scheduling. Digital data is being created at an exponential rate and the costs to store, manage, and maintain it are growing even faster in some cases. Hard copy inventories need just as much, if not more, attention. With the exception of a few legislated industries, people everywhere are asking, “When can we destroy this material without getting into trouble? How do we establish the right schedule? HOW and WHO will execute our plan?”

Timely (so as to avoid excess storage costs), proper (for privacy and security reasons) and legally defensible retention scheduling, whether for paper or electronic data, is a challenge for organizations regardless of firm size. Making matters worse, most of us are left to our best judgment and hope that the decisions made will hold up in court, in practice, and most importantly- in business with clients and prospects. If you ask yourself, “What would a negative news story cost our firm in terms of new business?” – the size of this issue explodes.

How do we establish the right schedule

Before you Execute the Plan

The most logical, yet sometimes most problematic place to start a retention process is at the beginning of the information’s lifecycle. Only if you have a great record of what type of information is in your inventory, can you expect to make sound, lasting decisions regarding its lifecycle. If you are lacking this critical detail about items in storage already, you will want to ask for help. Vendors, such as Corodata, can help in many ways regardless of the location of the information. A database, rather than a simple log, of details that includes robust query features makes this portion far more manageable.

Once you have your plan in place, complete with inventory details, a legitimate retention plan is on its way. Implementation is now a realistic, annual goal.

The Challenges of Creating a Proper Plan

  • 1. There are many places to look for answers
    There are several places a person charged with the creation and on-going implementation of a retention schedule can look for answers. With the exception of a very small number of highly regulated industries, you will have to develop your schedule from scratch and then verify it several ways. In website postings, you will find guidelines with some differing advice and each will include directions to consult your lawyer or CPA. Your lawyer or CPA will come up short on definite regulations and be left with conclusions drawn from other sources, such as the IRS regulations and their own experience. In almost all cases, you are left with recommendations at best, but it is better than nothing.
  • 2. There are many audiences to consider
    Because auditors (hired by you or assigned by others) are among the biggest audiences for archived data, they get the most attention during the development of a retention schedule. But many other audiences deserve consideration such as your clients, current or potential lawsuit adversaries, investors, product or public safety agencies, and many, many more. You must ask yourself – “Who could come looking for this?” and then address each type of request in the most strategic manner available. Note that not everyone has the right to request or review information, and your goals may be better met with a denial of a request.
  • 3. Beware of a Spoliation Charge
    If someone suspects you have destroyed information primarily to avoid the consequences of its release as part of a lawsuit or investigation, they will allege that spoliation has occurred (think Enron). The power bestowed on judges and courts for this type of bad behavior has serious consequences and should be avoided at all cost. Please seek legal advice prior to destruction of requested evidence and act responsibly.
  • 4. Control and Embrace the Hoarder
    Every company has that dedicated person that feels the need to have their “own” set of files just in case. If you can’t eliminate this potentially risky practice, you must insist that they follow the retention guidelines that best fit the company. These individuals could be a great “devil’s advocate” for a longer schedule and could be great additions to discussion.

The Answer: Make Your Own Rules & Stick To It

The only truly defensible retention policy is one that is written, practiced regularly, developed from sound (if not 100% accurate) advice, and part of a firm’s regular common practice. Records of training, an audit trail of performance, and destruction being done in a timely manner according to the schedule are all parts of a sound defense. Your adversaries are going to look for inconsistent, “convenient” failures as a way to back you into a corner.

Avoid injury, lost productivity, and save your group money and risks.

Corodata is ready to help you with this process:
Sign up for a free consultation today »

Wake up—HIPAA enforcement is (really) happening.

It’s no secret that HIPAA compliance enforcement has always been soft. The Office of Civil Rights (OCR) has pretty much allowed covered entities to be self-policing, reporting breaches voluntarily. But that’s about to change in a major way, with major consequences for your organization.

9,100 red flags

Last year the OCR expected to receive from healthcare entities around 100 voluntary reports of healthcare information breaches involving more than 500 individuals. But when more than 9,100 reports came in covering just 2010, it was time for pro-active enforcement.

9.2 million reasons why you should care

The OCR has granted KPMG a $9.2 million contract to conduct audits of selected covered entities for compliance with the HIPAA legislation before December 31, 2012 This huge budget should tell you that these will be in-depth audits.

But what isn’t known is which entities will be audited and how deep within the group will the audits dig. Policies, practices and employee training will be under the microscope, as well as patient records, HR files, vendor contracts and employment applications related to the audited entities. In other words, these audits may affect organizations like yours.

What should you do?

It’s now more likely than ever that non-compliance in your organization will be caught and penalized with hefty fines, corrective action plans, media notification and ongoing monitoring. That means it’s time to review and test your policies and practices—honestly and objectively—to assess how well they meet the requirements of the applicable privacy laws. If they fall short, bring them into compliance immediately—and be able to prove it to auditors.

See the opportunity to improve.

There is a silver lining. The desire to preserve the status quo is one of the most powerful forces known to man, but sometimes forced change can drive great improvement. Depending on your current information management protocols, you may be able to save time and money—and above all, mitigate your risk exposure—through outsourced solutions with trusted, reputable firms. You also may need a partner to help develop training materials and implement a formal program. To find out more about what you need do to protect yourself, request a free, in-office consultation with us.

How Can We Help You?

  • This field is for validation purposes and should be left unchanged.

Copyright 2011 corodata Corodata serves all of California including San Diego, San Francisco, San Jose, Orange County and Los Angeles