BRPA - In The Loop

 

Vol. 2, No. 3, June, 2009

 

 

 

 

 

 

 

 

 

Welcome

 

 

 

 

Jason Merante (Accenture) – BRPA Secretary

 

 

Welcome back to another exciting, content rich edition of BRPA – In The Loop.  You may have noticed last time that we are working on modifications to the format and delivery of this newsletter.  To recap the changes:

  • The newsletter that you receive by email is now a digest version
  • The full version newsletter is posted on the BRPA website
  • We made a few minor formatting changes

 

As always, please email us with your thoughts on the new format or any other comments you have about the newsletter.  Happy reading.

 

 

 

[Return to Top]

 

A Word From our President

 

 

 

Tom Dziurgot (Grainger) – BRPA President

 

 

How many of you have had to hold yourself back from saying “I told you so!” when H1N1 hit the world? I know you all took the high road. It has been a real opportunity to review our pandemic plans. We have made several changes to our plans but mostly we have had nice visibility that we need to prepare for things some of our plan writers would never dream would actually happen. I would like to put together a list of Lessons Learned during this H1N1 event and report them out in the next Newsletter. If you have any "Lessons Learned" you can pass along please send them to me. I can keep your Learning anonymous or give you a by-line. It’s up to you.

 

2009 for the Business Resumption Planners Association (BRPA) has been all we could hope. We had a fast start with great meetings in January and March, terrific "Spring Training" in April, and the first combined ACP BRPA meeting, with over a hundred attendees in May. The rest of the year looks to be even better, if that is possible! We have our 20th Anniversary meeting on September 20th at the Chicago OEMC, an even grander August Golf outing than last year, and a spectacular Holiday Party to top it all off (See our website for all the details).

 

We have a new Board Member David Pomerantz, Director of Special Events who has really hit the ground running. Please say hello to David at the next BRPA meeting.

 

 

 

[Return to Top]

 

Summary of Last Meeting

 

 

 

Dan Johnson (Bank of America) – BRPA Program Director

 

 

The May meeting at IBM in Schaumburg was a HUGE success! This meeting was the first ever combined meeting with the Association of Contingency Planners (ACP) Northern Illinois chapter. Our two organizations collaborated for the first time ever, allowing a great networking opportunity for all who attended. There were over 100 members in attendance and they were not disappointed. Great prizes were raffled off, the networking opportunities were the best we’ve ever had, and IBM was a fantastic host, providing breakfast and lunch to all who attended. They also hosted demonstrations and gave site tours of their facility. What a great day!

 

The theme of the meeting was ‘Energize Your BC/DR Career’. There were four presentations for this meeting. The first presentation featured Cheyene Haase from BC Management, Inc. who educated everyone on the skill sets needed to advance our BC careers and compensation. The second presentation featured John Orlando from Norwich University who presented ‘Education Opportunities for Business Continuity Professionals’. The third session featured Ann Pickren who informed all attendees on the benefits of BC certification. The last session was a panel discussion moderated by John Stagl from Belfor, Inc. All three speakers from this session resided on the panel to answer questions from the audience and Mr. Stagl. The speakers shared their professional opinions based on their BC/DR experiences and offered advice on how members can improve their BC careers through certifications, degrees and other education.

 

All of the meeting presentations can be found on the BRPA web site:  http://www.brpa-chicago.org/

 

 

 

 

[Return to Top]

 

Preview of Next Meeting

 

 

 

Dan Johnson (Bank of America) – BRPA Program Director

 

 

Next Meeting Logistics and Description:

 

The next BRPA meeting will be held on July 21, 2009, 9:30 a.m. – 12:30 p.m.  Registration begins at 9:00 a.m.  This meeting will be held on the 9th floor of the Secret Service Office in downtown Chicago:  525 W. Van Buren.

 

The theme of the meeting is ‘Are you Secure?’ There will be three presentations for this meeting which will involve personal and professional Security. The first presentation will feature personnel from the Secret Service who will discuss the secret service task force and electronic crimes. The second presentation will feature Jason Witty, Senior Vice President & Information Protection Consulting Executive from Bank of America who will present ‘State of the Internet:  Emerging Cyber Threats for Consideration’. The third session will feature Jim Satterfield, President/Chief Continuity Officer, Co-Founder – Firestorm Solutions, LLC who will present ‘The New Norm: Workplace Violence’.

 

BRPA 2009 Program Calendar:

 

July 21          Secret Service Office, downtown Chicago (1/2 day session)

Aug 18          Special Event – BRPA Golf Outing

Sept 22         BRPA 20th Anniversary - Office of Emergency Mgmt. - Chicago

Nov 17          RSM McGladrey, Schaumburg (1/2 day session)

Dec 8            Special Event – Holiday Luncheon

 

2009 – Supporting BRPA / Speakers

 

If you are interested in supporting BRPA, you may sponsor a breakfast or lunch at a meeting this year. Also, if you would like to present at one of our bi-monthly meetings or know someone who would be interested in presenting, please contact dan.johnson@brpa-chicago.org.

 

 

 

 

[Return to Top]

 

Guest Column

 

 

 

 

Lowell Smith (RSM McGladrey, Inc.)

 

 

Ensuring Data Security During Downsizing

 

The severe economic downturn threatens the economic well-being of all organizations.  What makes an economic downturn different than other threats to an organization’s success?  The key differences are that the impact will be longer than most other threats and that the recovery will be more dependent on external factors, such as consumer confidence, global economic stability and the viability of clients.  The length and severity of the downturn can severely impact the demand for products and services, leading to major revenue declines for all organizations. 

 

In light of this external focus, many internal functions of an organization are often ignored.  One of the more important activities, ensuring the integrity of data resources, may become lost in the turmoil. 

 

A common response to business shortfall is downsizing staff.  If this happens in the technical support area, technical management must be prepared to provide the same level and scope of business support with fewer resources.  Finding ways to manage the technical infrastructure to optimize the efforts of the remaining support staff becomes necessary.  Of the many support functions provided by technical teams, a key goal must be to continually and properly secure data and infrastructure resources.  By maintaining this security for the duration of the downturn, a viable technical platform is available for an organization to land on when the economy rebounds.

 

This article concentrates on the data security and integrity issues that occur as a result of a reduction in force.  Specific risks and control activities are described.  Many of these risks and controls are familiar to technical management during periods of normal business activity.  However, in a downsizing environment, these specific risks are magnified and controls must be effectively executed to ensure data is properly protected. 

 

The risks

Downsizing during an economic downturn could result in:

  • Fewer personnel available to protect information resources, maintain security controls and monitor critical systems
  • Fewer development and testing staff available (Typically, the pace of development is not reduced.  Consequently, the resulting applications may be more error prone and less capable of meeting user requirements, which negatively affects data confidentiality and integrity.) 
  • Reduction of operational and business staff (This reduces time for quality assurance procedures for reports and databases and thereby compromises data integrity.)
  • Possible segregation of duties issues through merging of roles and assignment of single members of staff to several roles, allowing a single user to defraud the organization
  • Increased possibility of actions by disgruntled or former employees
  • Greater possibility of an increase in crime (most importantly cyber crime) due to personal economic crises 
  • Loss of vendor support from those who are unable to withstand the economic slowdown
  • Increase in data and information systems vulnerabilities as a result of all other risks mentioned here

 

Risks pose a threat to many functions and assets, including data resources.  Consider the following major technical resources at greatest risk and what that means:

  • Proprietary applications or infrastructure becoming unreliable due to inadequate testing and developers making unauthorized changes in production or the theft and sale to business competitors
  • Protection of intellectual property lost through inadequate access control to core servers, resulting in the theft of unsecured trade secrets
  • Physical hardware and software lost due to theft or piracy (Private and personal ID data on stolen portable computers could become public.)
  • Vendor-supported infrastructure not kept current due to vendor staff reduction or an organization’s efforts to reduce support costs 
  • Client contact information becoming compromised through unintentional errors or the intentional destruction when proper access controls are no longer maintained and enforced or through the theft of improperly secured databases and the sale to business competitors
  • Firewalls and Web server security layers not kept up to date, causing an organization Web site and Internet business to become severely compromised by threats such as denial of service attacks
  • Compromises to server access that can lead to the corruption of key databases through backdoor attacks or by simple mistakes made by untrained staff reassigned to key data maintenance tasks
  • Termination information not quickly communicated to technical support staff due to poor training or overloading of human resources staff members, causing access to not be removed quickly enough (For example, if e-mail access remains enabled, disgruntled employees could send damaging e-mails from the organization’s e-mail server.)

 

Addressing risks related to downsizing

A proactive approach is needed to protect an organization from these serious risks.  In times of uncertainty and disruption, successful companies present an image of confidence and control and reassure customers and stakeholders that the organization has properly prepared for downsizing and has a plan for the sustainability of business.

 

When reviewing current vulnerabilities and implementing security solutions, address these eight areas:

 

1.      Logical Security of In-House Network and Information Security Systems

 

Logical security is central to any information security plan; the first and often the second and third lines of defense for technical infrastructure rely it.  The first challenge is network authentication.  The second challenge is server authentication and the third is application or database-level access control.  If access to organizational resources is immediately removed at the time downsizing actions occur, the temptation for abuse by individuals being let go is removed. 

 

For internal users, client users and business partners, primary logical security is an interactive authentication system, i.e., most commonly a user ID and a password challenge.  Passkeys and confidential security questions may also be used.  The most significant password management issue is to notify security administrators of all terminated individuals for immediate removal from local and remote access methods.  Secondly, password parameters and password administration, e.g., password complexity and length, expiration period and limiting use of previous passwords should be made as strong as possible.  Password authentication and user profile restrictions can be enforced at the network, server, application and database levels.

 

Terminated users, if disgruntled, can become an external threat.  With unauthorized remote access, the user may use hacking, denial of service, hijacking and spoofing methods to attack the network.  To reduce this risk, present interfaces to the outside world that are as secure (hardened) as possible.  Evaluate and further strengthen these security solutions:

 

·         Firewalls and routers

·         Data transmission tunneling and encryption

·         VPN solutions for working remotely

·         Antiviral software for all servers and user systems

·         Hardening of outward-facing servers by restriction of available ports and services

 

Administration of these logical security controls must continue during and after downsizing.  When controls are properly designed and enforcement procedures are implemented, the effects of downsizing are minimized.  Review staffing assignments to ensure sufficient administrative coverage continues and make sure staff is trained to enable, disable and monitor access to all critical systems.

 

2.      Physical Security of the Environment Surrounding Technology Infrastructure

 

As an additional first line of defense, closely review security measures of the facilities that house technical resources and business locations that house users.  Reviews of current holders of keys and keycards, visitor policies and an evaluation and strengthening of procedures to retrieve keys from departing staff members must be undertaken. 

 

3.      Data Integrity and Confidentiality

 

Attacks and errors, either intentional or accidental, may destroy or corrupt critical client and organization resources.  A key risk in downsizing is losing knowledge of data integrity procedures and checks.

 

Undertake these activities to address threats to data integrity and confidentiality: 

 

·         Update documentation of operational procedures.

·         Adopt enhanced encryption methods and procedures during data transmission and for data at rest, as well as require similar commitments from business partners.

·         Reinforce, limit access to and further automate data transmission procedures.

·         Partition data storage where user access is restricted on a need-to-know basis.

·         Add data validation procedures to ensure data is not manipulated during processing.

·         Limit administrative access to systems and data as much as possible and log all activities for critical systems, ensuring that logs are reviewed for any suspicious activity.

·         Develop recovery programs for all critical data that provide rollback capabilities to meet business needs.

 

4.      Segregation of Duties

 

Downsizing poses a problem for upper management and departmental structures that help ensure proper checks and balances are in place to address fraud and collusion.  Downsizing decisions should be predicated to ensure segregation of duties is not compromised.  Work efforts must continue to be understood and carefully monitored and after the reassignment of responsibilities, checks and balances must remain.  Tools to help in this process include:

 

·         Current process flows including roles and responsibilities

·         Updated segregation of duties matrices for all critical business and support functions (Management meets prior to downsizing to reassign roles and tasks and then reviews revised matrices for any conflict of duties.)

·         Mitigating manual and system controls to provide improved management oversight of activities 

 

5.      Monitoring of Activity

 

Often downsizing includes a significant reduction in management at various levels.  If departing managers had significant roles in the oversight of operational, business and financial processes, the risk of losing supervisory control is high.  Supervisory control is often a mitigating control and, if lost, primary controls may need to be reinforced by remediation to properly address the risk.  If downsizing affects the network administration staff, the monitoring of network and systems access and usage could suffer. 

 

Monitoring internal users is important to ensure they are not accessing resources they are not authorized to access.  Similarly, monitoring client usage helps verify that client users are only accessing their data, not other client data or internal network resources.  The primary value of monitoring is detecting suspicious activity from unusual sources or from users no longer authorized for access, including departed employees.

 

To address the risk of inadequate manual monitoring and oversight, review and strengthen the following automated controls where possible:

 

·         Enhance electronic network monitoring with management alerts activated.

·         Activate database logging and implement alerts for excessive activity.

·         Develop electronic dashboards with alerts and install on management desktops so that monitoring can proceed with greater efficiency and less direct contact.

 

In addition, logical access solutions already discussed can serve as preventative controls against unauthorized access.

 

6.      Change Management

 

Risks to change management include the loss of staff to the degree that independence of development, testing, acceptance and implementation is compromised.  This can lead to segregation of duties issues between development, testing and installation functions of software and can degrade the integrity of resulting software.  If the software is compromised, an organization is subject to a plethora of risks, including data manipulation, trojan/backdoor software, key loggers, logic bombs, data integrity, data confidentiality, business continuity, loss of intellectual property, fraud and potential extortion.

 

Consider these software development life cycle adjustments:

 

·         Extend development periods.

·         Reassign roles to remaining staff that have the necessary skills. 

·         Outsource the entire development cycle or offshore portions of the development cycle such as testing.  One cautionary note about outsourcing:  it cannot be delegated and then ignored.  The software owner is ultimately responsible for the functionality and integrity of the end product and several organizations have found offshoring takes significantly more effort than expected to ensure the product met an organization’s standards.

 

7.      Vendor and Patch Management

 

Maintaining hardware and software can be more difficult in a downsized environment.  Security patch frequency may actually increase due to more desperate hacking activity.  An organization may experience decreasing support from vendors who have downsized themselves.  Select secondary vendors for all critical technical resources so that support can continue if the primary vendor is unable to provide adequate support.

 

There are several money-saving steps, including reducing seat license levels in software contracts and negotiating service contracts more vigorously to receive reduced rates from vendors that do not want to completely lose your business.  Economic pullbacks can be an ideal time to upgrade hardware at much reduced costs with the added advantage of newer technology providing greater efficiency and security with less effort.

 

If costs need to be reduced further, evaluate the possibility of pursuing vendor support of servers to replace in-house system administrators, but ensure that vendor access is restricted as much as possible.  Take advantage of automated options for installing patches, as well as updates in firewalls and antivirus software to reduce manual tasks.  Consider purchasing firewall appliances that have automated update features to reduce maintenance overhead.

  

8.      Training and Documentation

 

The departure of knowledgeable staff may expose a very significant deficiency in management activities.  It may become obvious how little documentation of key business and operational processes exist and that an organization has functioned largely on the memory of a few long-term employees.

 

Prior to downsizing activities, gather and evaluate all existing documentation.  Where it exists, update usable documentation to represent current requirements, procedures and dependencies.  Close all remaining documentation gaps with a concerted effort to describe all critical business and operational functions including inputs, outputs, dependencies and verification mechanisms.  Identify critical functions through an analysis of the value provided and the criticality of other procedures dependent on it.  As documentation is created, organize training sessions to inform all responsible staff and walk through the procedures described.  Walk-throughs serve to improve documentation, but also to uncover possible enhancements to procedures that may improve efficiency and security.  

 

 

 

 

[Return to Top]

 

Member Benefits

 

 

 

 

John Mantsch (RJ O’Brien) – BRPA Vice President

 

 

Vendor Tables

 

Over the past year, the vendor table has become more prominent in each subsequent meeting.  The vendor table was set up to allow our vendor members to bring in their sales materials and, in a very unobtrusive manner, offer their services to our members.

 

Since more vendors are using the table to promote their services, we decided that we needed to put some structure around how the vendor table should be used.  So based on this requirement, we developed the following format:

 

  1. Prior to each meeting, any vendor who intends utilizing the vendor table is being asked to contact John Mantsch and give him an update on how they plan on using it (flyers only, give-a-ways, etc.). 
  2. Vendor table will be separate from the registration table and it will be marked with a banner indicating that it is the vendor table.
  3. Vendor materials will not be allowed on the registration table.
  4. Vendors are not required to stand by the vendor table but they should not position themselves at the registration table.
  5. Prior the start of any meeting, the BRPA Vice President will determine when the drawings will be held as well as the order of the drawings. 
  6. If a vendor has a drawing for a raffle prize we will follow this format:
    1. Each vendor with a give away will be introduced.
    2. The vendor can introduce himself, his company and say a few words about his company’s product(s).
    3. If additional support is needed, someone from the BRPA board will be available for assistance (pulling a ticket, holding the hat, holding the raffle item, etc.).

 

Please contact John Mantsch at 312-373-5447 f you have any questions or concerns about this format or if you have any suggestions for improvements.

 

Free CampIT Passes

 

I would like remind everyone of our partnership with CAMPITDan Horwich, the Principal for CAMP IT has been very gracious in continuing to offer our members a limited number of free passes to the CampIT conferences.

 

This is a great offer to our members. Not only can you gain knowledge at a CAMP IT conference but it is also a great opportunity to network and learn from your peers.  

 

At every CAMP IT Conference, speakers include professionals from IT departments sharing their experiences and lessons learned.

 

Whenever we receive the latest bunch of passes from CampIT, Alane Watkins, the Communications Director for BRPA will broadcast the offer to all of our members.  The first 7 members to respond and who meet both BRPA and CampIT requirements will be given a free CampIT pass.

 

A full list of requirements are listed on the flyer that contains information on the upcoming conference.

 

This is a great offer that CAMP IT is offering our members. Each conference pass is listed at $219 so winning just once will more then double the return on your annual BRPA dues. Each conference pass includes access to all sessions, the vendor area, breakfast, lunch, and the networking opportunity at the end of the conference.

 

Please contact me, JMantsch@rjobrien.com, if you’re looking for any additional information concerning our relationship with CampIT.

 

Technology Executive Club – Special Membership Rate

 

The BRPA Board wants our members to know about another great offer being made to our members and that is a special discount being offered by the Technology Executive Club.  Through a partnering relationship between BRPA and the Technology Executive Club, the Technology Executive Club is now offering BRPA members discounts on attending their seminar’s.

 

The cost for a non-member to attend a Technology Executive Club seminar is $295 but due to the partnering relationship between the Technology Executive Club and BRPA, they are now offering their member rates to all current BRPA members (anyone who has paid their 2009 dues are considered as being members in good standing).  So through this partnering relationship, BRPA members can now attend a Technology Executive Club seminar at the member rate of $175 instead of the non-member rate of $295, a savings of $120.  This is a great deal for our members.

 

To obtain this discounted rate, you’ll need to enter the discount code which can be found in the member’s only section.

 

Use the following link to access the BRPA website:  www.BRPA-Chicago.org

 

If you forgot your user ID and password or if you want to join BRPA to obtain this great rate, you’ll need to contact Chris Sarcletti, BRPA’s Membership Director at: Christopher.Sarcletti@cmegroup.com.

 

It should also be noted that the Technology Executive Club also holds a number of webinars.  There is no cost for attending a webinar and even those who are current BRPA members can attend.  A listing of webinars can be found in the Technology Executive Club membership website :  http://www.technologyexecutivesclub.com/.


Discount on Seminar Registration – Included  below is the title of the latest event that is coming up.  To obtain more information about this event, or future seminars you should click on the link under “More Upcoming Events”.  If you want to see what webinars are being offered, you can obtain that list under “Upcoming Webinars”. 

 

June 18 -- Seminar
Meet the Speakers Golf Outing

When: Thursday, July 16, 2009  
Where:  White Deer Run Golf Club, Vernon Hills, IL
Link:  http://www.technologyexecutivesclub.com/Events/2009/0709golf.php

 

Remember, if you want to take advantage of the discount being offered to active BRPA members, then you’ll need to go to the members’ only section listed in the BRPA website to obtain the discount code.

 

More Upcoming Events  http://www.technologyexecutivesclub.com/eventcalendars.php
6/18/09  Cost Savings Strategies: Virtualization, Green It & Beyond

Upcoming Webinars http://www.technologyexecutivesclub.com/webinars/currentcalendar.php

 

 

 

[Return to Top]

 

Other Announcements

 

 

 

Alane Waktins (Kraft Foods) – BRPA Communications Director

 

 

BRPA event information is now sent using regular email with registration via the BRPA website.  We will no longer use Evite.  This new process greatly streamlines our administrative efforts for each session and helps us keep current date with your contact information.

 

Feel free to pass along BRPA emails to other companies or DR/BCP professionals.  BRPA sessions cover a broad range of topics that are of interest to those who work in related fields such as audit, compliance, security, IT, and risk management.  We always welcome new guests!

 

Upcoming Events of Interest:

 
  1. CAMP IT hosts ‘IT Leadership Strategies: ‘Preparing for the Recovery’ – July 16th, Rosemont, IL
    http://www.targetedconferences.com/events/2009/leadership.htm

     
  2. CAMP IT will also host ‘Disaster Recovery/Business Continuity/High Availability/Resilient Infrastructure – September 10th, Rosemont, IL.  Be a panel speaker!  http://www.targetedconferences.com/events/2009/disaster2.htm
     
  3. ICOR University is offering BCM/DR courses throughout the summer and fall.  BRPA Members receive a 10% discount on ICOR Courses.  Use Voucher #BRPA-09010 when registering.  Also check out ICOR’s Career Center:  www.theICOR.org
     
  4. DRJ Fall World 2008 September 13th-16th in San Diego.              http://www.drj.com/index.php?option=com_content&task=view&id=2480&Itemid=810
     
  5. ITEC Chicago will host ‘Disaster Management 101’.                           http://city.goitec.com/chi/
     
  6. CPM East October 28-30th in Orlando.
    http://www.contingencyplanning.com/
     
  7. ContinuityLink is offering two courses: ‘Comprehensive BIA Process – Methodology’ - November 16-17th & ‘Auditing a Business Continuity Program’ - November 18-20th – both in Chicago http://www.continuitylink.com/
     
  8. Technology Executives Club of Chicago, July 1st Webinar Track – ‘Disaster Recovery Strategies & Trends’.   Hear from sponsors such as Marathon, Laurus Technologies and IBM on disaster recovery trends.  Webinars are lunchtime 12:00 Noon - 1:00 pm on the following dates -  7/1/2009, 8/5/2009, 9/22/2009                    http://www.technologyexecutivesclub.com/webinars/disasterrecovery.php
     
  9. Latisys will feature a Disaster Recovery presentation at an Open House Event that will also showcase the recent additions and enhancements to the data center and overall service offering - July 16, Oak Brook, IL
    http://www.latisys.com/events-and-news/chicago_open_house.html?trans_id=10002

If you have questions, comments, or suggestions, please contact BRPA’s Communications Director, Alane Watkins, at awatkins@kraft.com or 847-833-7531.

 

 

 

[Return to Top]

 

Member Highlights

 

 

 

 

Chris Sarcletti (CME Group) – BRPA Membership Director

 

 

Highlighting the BRPA Individual Membership

There are currently 3 types of memberships that are available to meet our members needs (vendor, corporate and individual).  We have vendor and corporate membership benefits listed on the BRPA website.  However, the benefits associated with an individual membership are not listed on the BRPA website.

 

If you are interested in an individual membership, please contact BRPA Membership Director Chris Sarcletti at Christopher.Sarcletti@cmegroup.com.

 

The individual membership option offers the following benefits:

 

  • Attendance to 7 BRPA meetings per year
  • Attendance to our annual April training class
  • Attendance to our 20th anniversary meeting in September (this is a 2009 only event)
  • Ability to earn points to keep your CBCP certification current
  • Excellent opportunities to network with our member base
  • Access to the BRPA-Chicago website
  • Access to BRPA – In the Loop, our bi-monthly newsletter
  • Chances to win free passes to BC and DR industry related events like CampIT and DRJ

 

For more information, please contact Chris Sarcletti.

 

 

 

[Return to Top]

 

Special Events

 

 

 

 

David Pomerantz (Latisys) – BRPA Special Events Director &

John Mantsch (RJ O’Brien) – BRPA Vice President

 

 

David Pomerantz, a native of Chicago, has recently joined the BRPA board in the capacity of Special Events Director, David is a sales executive with Latisys, a data center-centric company.

David has 25 plus years of High-Tech Business Continuity experience, his visionary, yet pragmatic business approach, has led to positive growth throughout his career where he encourages an environment of collaboration while setting a high standard for performance within the organizations he is and has been involved with.

 

2009 Annual BRPA Golf Outing

 

Remember, the Annual BRPA golf outing is being held on August 18, at the Chevy Chase C.C. in Wheeling, IL.  Here is their website: www.chevychasecountryclub.com

 

Come on out and enjoy one of the best networking opportunities of the year along with a chance to win some great prizes.

 

This golf outing will be based on a scramble format. This is where each foursome will play the best ball from the tee box to holing out. The foursome with the lowest score for the round will be awarded trophies. Awards will also be given for longest drive and closest to the pin (men’s and women’s).

 

The $90 registration fee will include; green’s fee, golf cart, continental breakfast, lunch and entry into the raffle. You can sign up as a foursome, or, if you don’t have 4 players, sign up as an individual and the golf committee will fill out your foursome for you. This event is open to all BRPA members, ACP, other associations, co-workers, friends, and customers.

 

Since we initially issued our first notice on the golf outing, we’ve secured some great prizes that we will be giving away during the outing.  This year we will again be raffling off some great prizes as well as an opportunity to win a prize from the silent auction table.

 

Conference passes to some of the largest continuity conferences will be offered again this year.  Additional details will be issued on the conferences in the next few weeks.

 

Last year a few of our members expressed an interest in the networking opportunity that lunch provides but they don’t play golf, so we created a lunch only option. This was a success in 2008 so we’re continuing this offering in 2009.  The lunch only option will be $25 and the BRPA website has already been set up to accept this option.

 

So if you want to play, be a hole sponsor or just join us for lunch, you can do all of that through our website: http://www.brpa-chicago.org/golfreg.html.  The website has been set up to accept payment through PayPal.

 

Yes, we are still looking for sponsors for this year’s event. Sponsors will be recognized by having the sponsor’s name displayed on the golf course, golf notices, at the registration table and in the country club banquet room. You will be given the opportunity to give a handout to each golfer and your company will be recognized at the luncheon.

 

There are three options for sponsorship:

 

1.                  Hole Sponsor: Only $150. Your company name will be displayed on one of the 18 holes, golf notices, registration table and the banquet room.

2.                  Hole Sponsor & Foursome: Only $490. All hole sponsor benefits plus a foursome for golf. (Save $20)

3.                  Hole Sponsor & Lunch: Only $175. All hole sponsor benefits.

 

Raffle for Sponsors Only:  (This is new for this year.)  Any company or person who becomes a hole sponsor will also be entered into a special raffle.  This raffle is being setup to offer the winner of the Sponsor Raffle a $15,000 marketing plan.  This offer is being made by DRJ in support of our outing.

 

DRJ’s marketing plan will be given to one lucky sponsor and it can be customized to meet the winner’s marketing needs covering; Print, Online, Email, Shows, etc.  This is a great offer being made by DRJ for one of our sponsors.

 

Raffle tickets for this special prize will be distributed based on the number of holes that a sponsor buys.  One hole, one ticket, 2 holes, 2 tickets, etc.

 

Special: Golf and half price Membership dues for new members

This offer is targeting anyone who is not yet a member of BRPA but would like to join. Yearly dues for BRPA are $100, but, for anyone who pays for a round of golf, they will have the option of joining BRPA for the rest of 2009 at a 50% discount. For your $50 membership, you will receive invitations to the BRPA meetings being held in September and November as well as the holiday luncheon being held in December.   Please contact Chris Sarcletti at 312 930-3240 if you would like to join BRPA under this option.

 

Registration:

You can register for this event on our web site via PayPal: http://www.brpa-chicago.org/golfreg.html

 

If You Have Questions:

If you have questions about this event, contact David Pomerantz at 630-452-8247 or John Mantsch at 312-373-5447.

 

 

 

[Return to Top]

 

Closing Thoughts

 

 

 

 

Thanks again for being a test subject for our ever changing newsletter.  We welcome your feedback, as we continue to update this newsletter based on the needs and suggestions of our BRPA members.  As always, we are only an email away: newsletter@brpa-chicago.org.

 

 

 

[Return to Top]

 

Copyright © 2009 www.brpa-chicago.org