- Your library has been using Sierra for years. - You are the new Sierra administrator. - You've always done it this way, but what were the other ways you could do it? - All of the above!
The Sierra Academy offers a day long refresher course focused on 3 key areas of Sierra administration and use:
1. Technical Services Workflows 2. System Administration 3. Understanding and using the Sierra API (SAPI)
With ransomware and cyber attacks on the rise, a review of how Clarivate handles system security. It includes a look at the security built into our software, the security of our hosting services, and how we review security with third-party partners.
We're not going to lie to you: An ILS migration is messy, complicated, and rarely goes according to plan. Maybe the databases are incompatible. Maybe one ILS is Linux based and the other runs on Windows Server. MARC is a standard format until you try and move it between two different ILS products. Don't forget about staff training and those who will tell you that you can pry the old ILS out of their cold, dead hands. Join us for a panel and forum discussion about ILS migrations that can help you prepare for the pitfalls and navigate the insanity. Carrie Gehrer, Wes Osborn, and Daniel Messer have migrated multiple ILS systems over to Polaris including Polaris to Polaris migrations, which you might think are easier. (Spoiler alert: They're not.) So bring your questions, concerns, and comments and, at the very least, we'll commiserate on the process while trying to help you out. Even if you're not migrating to Polaris, we can likely help you along on your journey.
Andrew McDonald is the lead software developer at SILS. He will explain why SILS chose custom software solutions for its member library websites and consortial mobile apps. This choice comes with clear benefits, but also tradeoffs and risks which will be outline throughout the presentation.
SILS uses Kibana to present Polaris data in a way that's easy to understand, encourages staff engagement, and helps our libraries make informed decisions. This presentation will give an overview of the Kibana tools that bring library data to life with visualizations and dashboards. It will cover why dashboarding has become an integral component of our reporting toolset, why we chose Kibana over alternative products, how we use Elastic with Polaris and other data sources, and the challenges we've encountered along the way.
Whether you're a systems administrator leading a team or a lone librarian in multiple roles, the steps to create effective cybersecurity are available to you. Using ISO27001 as the underlying framework and emphasizing a proactive, 20/80 approach (20% effort for 80% results), this session will cover the fundamental knowledge for ensuring a more secure IT environment.
We will begin with a discussion of recent library ransomware attacks starting with the biggest: the London Public Library. What happened? How did the attacker get in? Exactly what systems were compromised and what could have been done to prevent it?
This will pivot to a more general topic: what does it mean to be hacked? What is access? This will lead to the first action point: the principle of least access. Least access means that all users only get the access they need to do specific tasks, i.e. administrator access should only be provided in a limited way. Had this been followed by the IT staff at the London Public Library, the attack would not have occurred.
From here the discussion will move to the ways in which Identity and access can be stolen and how that can be prevented. What does it mean to have your identity stolen? How does this happen and how do malicious actors obtain stolen identities? I'll talk briefly about the dark web only to make participants aware that large packages of stolen identities can be bought and sold. Knowing this make it easier to recognize common patterns of attacks (such as FIRSTNAME+LASTNAME+NUMBER@GMAIL.com as the sender in email).
By introducing this concept to participants, what I'm trying to point out is that most hacks occur through staff. Most of those are phishing attacks. What is phishing? I'll then point out a few basic phishing attacks--the generic one ('phishing') and the targeted ('whaling'). So, how can you prevent phishing? I'll introduce a few methods and provide supporting documentation: regular staff awareness training and emails, and anti-phishing plugins for email clients.
After this, I will briefly discuss password security. I'll bring up the recent revision to NIST 800-63-3B which attempts to wrangle many of the myths about password security by providing best practices. I'll also mention other practices such as using unique passwords for each service and secure, free ways to store passwords. I'll also introduce a few password generators such as Last Pass.
The remaining portion of the session will discuss more higher-level activities beginning with Data Security. What is data security? What is a good backup? How often does one take backups? And of what? I'll bring up the usefulness of Amazon S3 for this purpose, since it is effective and cheap but will provide other cloud solutions they may already have access to.
To begin a Data Security program, participants will need to conduct an Audit. Because there is so much data, it's important to sit down with various stakeholders in your institution and find out what data is truly essential to their activities. I'll show a simple worksheet to help manage this discussion with stakeholders and help rank which data and services are essential. I will also give participants a very simple email template they can send to their vendors to ask them what steps are being taken to secure their data. These responses from vendors can be used to fill in the worksheet.
The last topic is the Disaster Response planning meeting: a simple sitdown meeting with various stakeholders to discuss possible responses. I will use the worksheet from the previous section to show how participants can guide this discussion and get a useful outcome.
You know Sierra and have your API key: now what? Join Ray and Jeremy as they showcase real-world projects you can implement right away at your library. Learn how to harvest and export large data sets, perform batch updates that Global Update can't handle, and streamline your workflows. This session is beginner-friendly and will walk you step by step through tapping into Sierra's REST APIs with Python.
