text:
Is Your Child Sick?
Medical Library
What is acute otitis media?
What causes acute otitis media?
How does it cause disease?
How common is acute otitis media?
Who gets an ear infection?
Is an ear infection contagious?
How do you know if your child has an ear infection?
What does the eardrum look like when it is infected?
How is an ear infection treated?
What are the complications?
How can an ear infection be prevented?
What research is being done?
by Stan L. Block, M.D.
Associate Clinical Professor of Pediatrics
University of Louisville and University of Kentucky
Acute otitis media is an infection of the middle ear, generally caused by bacteria. In acute otitis media (i.e., an ear infection or an infection of the middle ear), pus and infected fluid accumulate in the middle ear space.
The tympanic membrane (eardrum) appears inflamed, reddened, and often protrudes outward. Usually, an ear infection begins after the eustachian tube (a small tube connecting the back of the nose to the middle ear space) has become swollen, congested, and closed, most commonly resulting from an ongoing viral respiratory infection.
Acute otitis media should not be confused with: 1) external otitis ("swimmer's ear")-a painful bacterial infection of the superficial skin of the ear canal, or 2) otitis media with effusion (secretory otitis or "fluid ears")-an accumulation of non-inflamed fluid behind the eardrum. Otitis media with effusion is not considered infected, and most doctors do not treat it with antibiotics. This uninfected fluid in the middle ear is a remnant in 50% to 60% of resolved ear infections. It is frequently a mild complication of colds, respiratory illnesses, or nasal allergies.
Acute otitis media usually is caused by one of four bacteria:
The pneumococcus bacteria is now the most difficult to treat. Some strains have become very resistant to antibiotics by using their unique ability to transform their genes and cell wall into a bacterial form, which is resistant to most of the antibiotics that commonly are used to treat ear infections. These resistant strains frequently are cultured from children who do not respond to several courses of antibiotics. When a child has an ear infection that does not respond to antibiotics, resistant pneumococcus bacteria may cause it.
Pneumococcus has 90 different types, which are all genetically related; however, 7 types account for the majority of ear infections in childhood and nearly all of the antibiotic resistant strains. In addition, pneumococcus is the leading cause of meningitis, bloodstream infections, and serious pneumonia in children, sometimes as a result of a preceding ear infection.
Up to half of Haemophilus and nearly all Moraxella bacteria produce an enzyme (beta-lactamase), which makes these bacteria resistant to some of the commonly used antibiotics. This enzyme may destroy many antibiotics when they come in contact with the bacteria. Nonetheless, several available antibiotics are still quite effective against these strains.
Viruses play a critical role in the development of acute otitis media by enabling the bacteria to travel into the middle ear (see below). By themselves, though, viruses account for only 6% to 10% of ear infections.
As long as air entering from the back of the nose is able to reach the middle ear space via the eustachian tube, the middle ear rarely becomes infected. The eustachian tube in younger children is flimsy and easily collapses. As the child grows, the cartilage tissue surrounding the eustachian tube becomes stiffer, longer, and more angulated inside the skull.
Pneumococcus, Haemophilus, and Moraxella commonly reside in the back of the nose, and do not infect the child. Once a child becomes infected with a respiratory virus, it not only causes congestion of the nose and the lungs, but also of the eustachian tube. When this tube becomes clogged, the cells in the middle ear space produce a fluid-like substance, which allows bacteria to grow and infect the middle ear space. A virus infection precedes up to 90% of cases of acute otitis media.
Respiratory virus infections also trigger ear infections by upsetting the body's normal defenses in the nose and the eustachian tube, and allowing certain normal bacteria that reside in the nose to "stick" better to the lining of the nose and the eustachian tube. Certain viruses, such as the flu (influenza) and RSV (a respiratory syncytial virus, or the "bronchiolitis bug"), are more frequently associated with ear infections. Occasionally, the child's nose becomes colonized by a new aggressive strain of bacteria, which rapidly invades the middle ear. Unfortunately, more exposures (e.g., via daycare attendance) to viruses and new strains of bacteria increase the likelihood of ear infections.
Acute otitis media is predominantly an infection of young children, primarily occurring in the first three years of life. Children in the 1990s experience 30% more episodes of acute otitis media as compared with children in the 1970s, probably as a consequence of high rates of day care. Currently, acute otitis media accounts for one-fourth of all pediatric office visits in the first three years.
Nearly 94% of children will experience at least one ear infection in the first three years of life, with an average of about three episodes in the first and second years, and one and one-half episodes in the third year. As many as 5% to 8% of children will undergo the placement of ventilating tubes in their first 24 months of life. Much of this is related to the high rate of daycare attendance in the United States, with increased exposure to infectious agents.
At the highest risk for ear infections include those children who:
Children with a cleft palate or HIV have particularly severe problems with recurrent ear infections.
Age affects the rate of acute otitis media, with a dramatic decline in frequency in children older than three years. However, some children with a history of ventilating tubes or frequent recurrent otitis media, severe allergies, or large adenoids may still be plagued with ear problems.
To some degree, the bacteria that cause ear infections are contagious because they may colonize, or set up residence, in the nose of children or close contacts. However, only a small proportion of children colonized with a new strain of bacteria will develop an ear infection. For example, in the case of pneumococcus, only about 15% of children colonized in the nose with a new strain of it will develop an ear infection, and usually only within the first month. Also, some bacterial strains appear more aggressive than others and will directly invade the middle ear.
What may be even more important than new bacterial colonization is the spread of respiratory viruses, particularly among children in daycare and pre-schools. Respiratory viruses are very contagious in close quarters. They frequently make a child more susceptible to an ear infection by upsetting the normal balance between the child's local nose immunity and the co-inhabitant bacteria. When the child's defenses are down, or the eustachian tube becomes clogged, the bacteria tend to infect the middle ear.
Children with an ear infection display a wide range of symptoms, from none at all, to a high fever, to a screaming earache. Many infants and toddlers with an ear infection show less obvious symptoms, such as sleeplessness, irritability, decreased feeding, or a fever. Ear pain and ear tugging are helpful clues, but are fairly unreliable. Even in older children with a respiratory illness, mild to moderate ear complaints and earaches frequently occur in children with normal ears. In these children, a sore throat often causes the ear complaints. Fever occurs in only one-fourth of ear infections, and it does not signify an ear infection.
One of the more reliable indicators of an ear infection in younger children is when a child, who has had a cold and a runny nose for three to seven days, suddenly develops sleeplessness and inconsolability during the night, along with increasing fussiness throughout the day. Children with a persistent ear infection who have recently received antibiotics often show few symptoms.
Antibiotics should not be prescribed over the phone for a presumed ear infection, without an examination by a physician. Only a careful examination of the eardrum by a doctor can determine whether the ear is truly infected. Often, when the child is brought into the office in the early phase of a cold or a mild respiratory infection, the eardrum will be normal, only to become infected several days after the office visit. If the child has only a mild cough and a runny nose, it is best to wait at least five to seven days into the illness before making an office visit.
The new EarCheckTM (acoustic reflectometry instrument) may help parents to determine whether a young child is getting an ear infection. If a previously healthy child, who now has an illness, develops an abnormal reading on the instrument, parents can assume a 70% chance of fluid behind the eardrum. It will not distinguish between infected or uninfected fluid. More importantly, if the readings are normal and the child's symptoms are mild, parents can assume that it is very unlikely that the child has an ear infection, and an office visit may be avoided.
When a doctor examines the eardrum through the otoscope instrument, the eardrum normally appears as a thin gray, translucent membrane (like wax paper). When infected, it will look opacified (cloudy), very reddened, and yellowish. Sometimes, it shows a small layer of pus-like material. During an infection, the eardrum usually becomes rigid because of the accumulation of fluid, and it will not wiggle when the doctor puffs a small amount of air against the eardrum with an otoscope. Use of tympanometry or acoustic reflectometry (i.e., the EarCheck instrument) may help to determine if there is fluid behind the eardrum. Neither instrument distinguishes between infected or uninfected fluid.
From the appearance of the eardrum, the doctor cannot determine the type of bacteria, or whether bacteria or viruses are causing the infection. The eardrum in children with otitis media with effusion appears as an orangish or dull, straw-colored fluid, and it also does not move when air is applied to it.
The intense ear pain of acute otitis media can be partially relieved by adequate doses of ibuprofen or acetaminophen. For more severe earaches, some doctors may prescribe codeine. Numbing eardrops provide minimal relief, and only for a short time. A warm washcloth or sweet oil (olive oil) directly instilled in the ear canal may temporarily distract from the child's ear pain.
Nearly all doctors in the United States believe that acute otitis media should be treated with antibiotics by mouth, particularly if the child has symptoms. Antibiotics generally provide prompt and dramatic relief of the ear pain. Oral antibiotics for acute otitis media are safe and effective, with exceedingly rare serious side effects.
In a few European countries, ear infections are not treated in children older than two years, unless symptoms persist for more than 48 hours. A few U.S. physicians recommend this same tactic.
Most experts in the United States are concerned about the tendency for pneumococcus in an ear infection to cause more serious infections. When pneumococcus causes an ear infection, if left untreated, it will persist in the ear of 80% of children for up to a week. However, most episodes of acute otitis media will resolve on their own from 3 to 10 days. Yet, non-treatment may be dangerous, not only because of the risk of serious pneumococcus infections, but also because of the possibility of other serious complications. Furthermore, few parents are willing to watch a child suffer with an earache, a fever, and crying for several days.
Amoxicillin (the "pink ink") is the drug of choice for initial ear infections, except in the penicillin allergic child. In an attempt to enhance the effectiveness of this inexpensive and safe antibiotic, many doctors are now prescribing amoxicillin twice a day and in double the daily standard dose. Effectiveness for initial therapy with most antibiotics approaches 70% to 80%. There are other antibiotics to treat children who do not respond to amoxicillin or who never seem to respond to initial amoxicillin therapy.
Children who do not respond after two or more standard courses of antibiotics can be expected to respond to another antibiotic only about 50% to 60% of the time. Most children who fail antibiotic therapy are younger than 24 months, have poor eustachian tube function, and tend to be infected with more resistant bacteria. At this point, the easy-to-treat bacteria usually have been eliminated. The persistent bacteria are the most resistant strains of the three most common ear bacteria. The emergence of more resistant strains is outpacing the development of new effective drugs. A child's doctor should be relied upon to select the most effective second-line antibiotic choices.
The new "one-shot" (ceftriaxone) for acute otitis media also is effective for simple cases of acute otitis media. However, "the shot" should only be used in select children, such as those with vomiting and diarrhea, very cantankerous toddlers, or children with an associated moderately serious illness. Three daily doses of ceftriaxone also may be very effective in children who have failed three to four consecutive courses of antibiotics, and are destined for tube placement.
The Centers for Disease Control (CDC) has convincingly pointed out that antibiotic overuse is one of the major culprits for the increasing antibiotic resistance problem. Parents should not insist on an antibiotic prescription for fevers, minor colds, and respiratory illnesses.
Physicians almost never know which bacteria they are treating. Thus, the CDC and other otitis experts advocate the use of tympanocentesis (lancing the ear or ear tap) for children who have failed antibiotic therapy.
relieves instantly the pain of the child with a crying earache; enables the physician to culture the bacteria and to select the best antibiotic for the infection; and allows the ear infection (like an abscess) to drain, which may improve the healing process.
The procedure can be performed nearly pain free. Only physicians who have been trained in the procedure perform it.
No medication is currently available to treat viruses that precipitate ear infections, either before or during the illness. An exception is the flu virus. Anti-flu medications and the flu vaccine could help prevent some wintertime ear infections, but only for the small number of children with ear infections related to the flu.
The most serious complications secondary to ear infections are mastoiditis (infection of the skull bone behind the ear) and meningitis (infection of the lining of the brain). Both are extremely rare.
Chronic draining ears and chronic perforations (holes in the eardrum) are uncommon, but occur more frequently as a result of resistant pneumococcus. However, these complications are commonly seen in developing countries where antibiotics are not readily available. Permanent hearing loss from very severe recurrent infections is a major concern, but is still rarely observed with effective antibiotic therapy. Children with an ear infection (even ones that rupture and drain) suffer only some temporary, low grade hearing loss. As the fluid resolves, which may take months, the hearing returns to baseline levels.
Your child's doctor may work with an ear-nose-and-throat doctor to help treat the more severely afflicted child, or one who has suspected chronic hearing loss. Children with chronic fluid persisting for more than four months, or with more than five or six ear infections in a year, may require the insertion of "tubes." This is most important during the first two years of life when hearing is critical for speech and language development. Chronic ear infections may aggravate learning and later school problems, but cause and effect on this issue remains speculative.
Severe complications from ear infections nearly have been eliminated, and there is an array of antibiotics to treat them; however, the rate of highly resistant bacteria infecting children has increased. Physicians cannot continue to wastefully prescribe antibiotics, and parents should not demand them to treat everyday colds and viral infections. Although the new Prevnar vaccine may prevent many strains of highly resistant pneumococcus, with continual antibiotic misuse, microbiologic history will repeat itself in other pneumococcal strains or in other bacteria.
The simplest preventive measures include the following:
More controversial preventive measures include the following:
Ineffective measures include the following:
The most important recent development to potentially reduce the frequency of ear infections is a new pneumococcal conjugate vaccine. A study from Northern California suggests that this vaccine could prevent about 7% of overall episodes of ear infections, and up to 23% of recurrent ear infections.
The new pneumococcal vaccine contains 7 of 90 types of pneumococcus, which are the most common and the most resistant bacteria. Elimination of these resistant types could have an impact on the number of antibiotic failures in children. This also could mean a reduction in the placement of tubes, possibly by one-fourth, as observed in the California study.
This vaccine is administered to infants at 2, 4, 6, and 12 months of age. Side effects have been minimal, and it has been a very safe vaccine. It uses the same technology as the universally administered HIB vaccine.
ome new antibiotics are about to undergo testing in children with acute otitis media. In preliminary testing, these drugs appear to work against the resistant pneumococcus.
In the future, there may be alternate ways of treating or preventing ear infections. A new antibiotic may be able to penetrate the eardrum directly by instilling eardrops. A nasal spray squirted in the nose of infants a few times a day may prevent the common bacteria of acute otitis media from gaining access to the nose. Some Scandinavian investigators have shown slight reduction in the number of ear infections in children who regularly used an experimental sugar called xylitol.
About the Author
Dr. Block is a full-time practicing pediatrician in rural Bardstown, Kentucky who serves on the clinical faculties at both the University of Kentucky and the University of Louisville as an Associate Clinical Professor of Pediatrics.
His pediatric practice is one of the leading pediatric research groups in the United States and, in fact, Dr. Block was awarded the American Academy of Pediatrics 1998 Practitioner Research Award.
He has authored and published over 20 articles and 40 abstracts on pediatric infectious diseases. He has also lectured on Otitis Media extensively to pediatricians and other physicians throughout the U.S. and Canada.
Copyright 2012 Stan L. Block, M.D., All Rights Reserved
The information contained in these topics is not intended nor implied to be a substitute for professional medical advice, it is provided for educational purposes only. You assume full responsibility for how you choose to use this information.
Always seek the advice of your physician or other qualified healthcare provider before starting any new treatment or discontinuing an existing treatment. Talk with your healthcare provider about any questions you may have regarding a medical condition. Nothing contained in these topics is intended to be used for medical diagnosis or treatment.
By using this website, you accept the information provided herein "AS IS." Neither RemedyConnect nor the providers of the information contained herein will have any liability to you arising out of your use of the information contained herein or make any express or implied warranty regarding the accuracy, content, completeness, reliability, or efficacy of the information contained within this website.
RemedyConnect, Inc. has created this privacy statement in order to demonstrate our firm commitment to your privacy. The following discloses our information gathering and dissemination practices for this website: http://www.remedyconnect.com.
We do not acquire any more information about website visitors than is required by law or is otherwise necessary to provide a high level of service efficiently and securely. Our site's registration form requires users to give us contact information (e.g., their name and e-mail address) and demographic information (e.g., children's birth months, but not birth dates). We use customer contact information from the registration form to (1) send the user pertinent medical and parenting information and (2) allow your local health provider lists of who is registering on that provider's site as a parent/guardian, staff member, doctor, or visitor. Users may opt-out of receiving future mailings; see the choice/opt-out section below.
We use your IP address to help diagnose problems with our server and to administer our Website. Your IP address is used to help identify you and to gather broad demographic information.
Demographic and profile data is also collected at our site. We may use this data to tailor the visitor's experience at our site, showing them content that we think they might be interested in, and displaying the content according to their preferences.
Our site may use order forms to allow users to request information, products, and services.
We will respect your doctor's right to privacy. A doctor typically does not give his/her e-mail address to the parents/guardians of patients. We will not provide the e-mail addresses of doctor(s) in the local practice to users of their site without the doctor(s)' permission. Their site is restricted to use by whomever they wish, and they may deny access to their site to one or more prior users. In unusual cases, doctors may change their private site's access code and arrange for us to e-mail the new access code to approved users.
We use cookies to deliver content specific to your interests and to save your doctor's access code so you don't have to re-enter it each time you visit your doctor's site on http://www.remedyconnect.com.
This site contains links to other sites. RemedyConnect.com is not responsible for the privacy practices or the content of such Websites. See Disclaimers.
We will provide individually-identifiable information about website users to third parties only if we are compelled to do so by order of a duly-empowered governmental authority, we have the express permission of the visitor, or it is necessary to process transactions and provide you services from our affiliates: Live Agent Answering Service, Digital Answering Service, Medical Answering Service and Pediatric Answering Service.
When we make our technology or services available to business partners, we will not share with them any more consumer information than is necessary, and we will make every reasonable effort to assure, by contract or otherwise, that they use our technology and services in a manner that is consistent with this Privacy Policy.
This site may make chat rooms, forums, message boards, and/or news groups available to its users. Please remember that any information that is disclosed in these areas becomes public information and you should exercise caution when deciding to disclose your personal information.
This site has security measures in place to protect the loss, misuse and alteration of the information under our control. For further information regarding our security, please contact us at firstname.lastname@example.com. If you have any concerns regarding the security of information, please do not provide any information to RemedyConnect, Inc. until you are comfortable with our security measures.
You may correct or update your User Registration information at any time, by visiting the User Registration section and providing your personal password that you set at registration. If need be, please email us at email@example.com.
Our site provides users the opportunity to opt-out of receiving e-mail communications from our partners or us, except communications approved by your doctor's practice office. To so opt-out, please email us at firstname.lastname@example.com. To be removed as a user, please email us at the same address. If need be, you may mail requests to us at RemedyConnect, Inc.
If you have any questions about this privacy statement, the practices of this site, or your dealings with this Website, you can contact us by email at firstname.lastname@example.com or by mail at our address above.
Copyright © Healthy Starts Pediatrics, PC


text:
Website Registration
Please join us. Register for benefit, program inclusion and to share with others. Choose the Type of membership that best suits you. No Credit Card required.
Vacation Rental Guest
For Vacation Rental Guests. See great rentals, offers and discounts.
Free to Browse
Vacation Rental Owner
Check Out Our Services
Free to Browse
Member of the Press
Learn more. Access everything. Ask us to help.
Free to Browse
NOTE: Membership is a priviledge and complimentary. Please do not give out your logon/password. We reserve the right to limit access if the website is mis-used.

subset: commoncrawl


text:
After successful exhibitions in 2007 and 2008, Jazoon'09 drew a record 1,100 participants from 37 countries. Now, we're currently seeking sponsors and exhibitors to take part in Jazoon'10.
Starting today the clock is running towards the submission deadline for the Jazoon'10 Call for Papers. Java and Open Source Experts from all over the world are called upon to actively participate in the steering of the program of Jazoon'10.
Proposals for short (20 minutes) and long talks (50 minutes) can be submitted within the scope of the technical sessions until 3 February 2010. Presentations can be held individually or together with a co-speaker. Speakers profit from preferential terms – details to be found here. Proposals for Jazoon Rookie (20 minutes) can be submitted until 4 April 2010. Participating criteria and benefits can be found here.
Other News
I am making a comeback on this blog with this post, hope to continue doing, what I love doing..


text:
A new web ad from Mitt Romney's presidential campaign is causing a buzz in California political circles. That's because, almost two decades after Gov. Jerry Brown's last run for the presidency, his name and image are being used in that Romney spot.
And it's not flattering.
The commercial compares Brown to Texas Gov. Rick Perry, asking, "Where did liberals in California get all their bad ideas?"
U.S. & World
More on the Romney Campaign Ad:
Who Knew? We Californians Get Our Bad Ideas From Rick Perry
The ad suggests that California's laws allowing in-state college tuition fees were modeled on similar legislation approved in Texas. It's an attempt to paint Perry, who was fundraising in California this week, as too tolerant of programs benefiting undocumented immigrants.
Brown has been conspicuously absent from presidential politics this year, having skipped meeting with President Obama during several recent visits.
By contrast, the governor's national ambitions were on full display during his first two terms in office, when he ran for the presidency in 1976 and 1980. He ran a final time in 1992, but lost the nomination to Bill Clinton.
During a campaign appearance last fall, Brown was asked about any further presidential ambitions. He jokingly replied, if not for his age, "Hell, you know I'd be running again."
Let us know what you think. Comment below, send us your thoughts via Twitter @PropZero or add your comment to our Facebook page.


text:
Free bet today
Free tips are not 100% safe and sure, this are analysed matches. If you're new to betting, one of the first things you should do is learn how betting odds work. It's critically important because it allows you to understand how likely an event is to happen, and what your potential winnings will be.
Betting Info 365 can help you start figuring out on which teams to bet on by sharing some prediction in order to take some of the guesswork. Predictions can be a great way to get a feel for the direction a game may go. We, can not guarantee results according to our predictions. Free bet today
Free Tip – 18/05/2019
League: FRANCE: Ligue 1 – Round 37
Match: Paris SG – Dijon
Time: 21:00 Pick: 1 Odd: 1.40
Result: 4:0
League: FRANCE: Ligue 1 – Round 37
Match: Monaco – Amiens
Time: 21:00 Pick: 1 Odd: 1.61
Result: 2:0
As a result of our team's hard work we suggest you to play this matches for today. Firstly, dont get this predictions as 100% sure. Secondly and most importantly the bets that are sure and have high winning rate are in the offers before. Furthermore, we focus on football exclusively. Since football betting can be complicated and overwhelming process, with all the different online betting sites, leagues, games, and types of betting, we opened BettingInfo365 to be your place for information, statistics, predictions and. So for 100% safe fixed matches, sure betting picks, reliable informations and sure odds please contact us on email, whatsapp or telegram. We have online support avaliable 24/7. Be sure to check the website at these times if you want to follow our football tips.
Leave a Reply
BettingInfo365 does not take any responsibilites for the upcoming matches. Gambling is your free will and it's recommended that this service is being used solely, as a tool for picking right bets.
These are ours assumptions. It is strictly prohibited persons under the age of 18 to bet on those games.With respect BettingInfo365.com


text: For hundreds of years, Africa has existed in a state of despair. Famine, civil wars and rampant disease have left the continent without hope, but for the efforts of Western do-gooders. At first, they arrived with food, bibles and the magic of penicillin; more recently they have hosted rock concerts and sent plane loads of grain. And in the last decade of the 20th century they arrived and took babies home with them. First there was Angelina, then Madonna, and now...Pauly Shore! The film builds its comedy foundation on the international interest in Celebrity Adoptions, and the debate that surrounds these transactions on both sides of the Atlantic. Sometimes politically incorrect and never scared to tread on manicured toes.


text:
Login Required
You need to have a Pokémon Trainer Club account to save your Favorite Pokémon!Log In Sign Up No Thanks
Corphish catches prey with its sharp claws. It has no likes or dislikes when it comes to food—it will eat anything. This Pokémon has no trouble living in filthy water.
Corphish were originally foreign Pokémon that were imported as pets. They eventually turned up in the wild. This Pokémon is very hardy and has greatly increased its population.
Protects the Pokémon from critical hits.
Prevents other Pokémon from lowering its Attack stat.
The Pokémon Company International is not responsible for the content of any linked website that is not operated by The Pokémon Company International. Please note that these websites' privacy policies and security practices may differ from The Pokémon Company International's standards.
Pokemon.com administrators have been notified and will review the screen name for compliance with the Terms of Use.
Your request could not be completed. Please try again. If the problem persists, please contact Customer Support.


text:
Ok well i got this idea from Voldemort's Granddaughter,...
Random Things!245349
- by Sugar Arellano & BellaRose0324
- Rating:
- Published: 23 Mar 2014
- Updated: 28 Dec 2014
- Status: In Progress
Random Shit! Face our random shit and post stories of your own! Nobody cares, this is a very open book! Excuse the Pun! :D :D :D :D :D :D :D :D
Join MovellasFind out what all the buzz is about. Join now to start sharing your creativity and passion
Loading ...


text:
Using IAM tools to improve compliance
Provisioning and password management tools can ease complexity, reduce help desk calls and save money. But they also have an added benefit: They can help ease enterprise compliance woes. This webcast offers strategic advice on:
- State of the art and current offerings in the password management and provisioning space
- How provisioning tools can help with regulatory audits
- Gap analysis: Plugging "holes" in your regulatory strategies
- Mapping IAM technologies and business processes: How technology can help
About the speaker:
Tom Bowers is managing director of consulting firm Security Constructs.
Read the full text transcript from this video below. Please note the full transcript is for reference only and may include limited inaccuracies. To suggest a transcript correction, contact firstname.lastname@example.com.
Using IAM tools to improve compliance
Eric Parizo: Hello and welcome to using IAM Tools to Improve Compliance with
guest speaker Tom Bowers. My name is Eric Parizo and I'm your host today.
Provisioning and password management tools can ease complexity, reduce help
desk calls, and save money but they also have an added benefit, they can
ease your company's compliance calendars as well. In today's presentation,
Tom will discuss the current landscape of the provisioning and password
management market. Specifically, he'll touch on current and state of the
art product offerings, how provisioning tools can help with regulatory
audits, staff analysis and plugging holes in your regulatory strategies,
and how technology can help with mapping AIM technology and business
processes. Our speaker today, Tom Bowers, holds the CISST, CNT, and
Certified Ethical Hacker Certification. He is the managing director of
Independent Thinktank and security industry analyst group Security
Construct LLC. Tom's areas of expertise include aligning business needs
with security architecture, risk assessment, and product management, on a
global scale. Tom is a technical editor for Information Security magazine
and a regular speaker at events like Information Security Decisions. Thank
you for joining us today Tom.
Tom Bowers: My pleasure to be with you again.
Eric Parizo: And now we're ready for your presentation. So here's Tom Bowers.
Tom, take it away.
Tom Bowers: Great. Thanks Eric. Today we're going to talk about using identity and
access management tools to improve compliance. It's probably the major
driver currently in the market. Companies are struggling to see a return on
investments purely from an ROI standpoint but compliance has really driven
this market and there's a major growth here in this market, so we're going
to begin to take a strong look at this. In today's presentation we're going
to take a look at some of the current offerings. What some of the new
visions coming out of this marketplace are. We're going to look at how to
maximize identity access management, deployment success and this is really
a crucial part of the presentation: we're going to look at what assistance
these product suites offer for audits and auditing and the holes in your
regulatory compliance architecture and how identity access management can
help out. Then we're going to take a look at probably the greatest piece
of failure, and/or the greatest successes in most of these projects, and
that is the business process. Then we'll wrap things up and take a few
Identity and access management solves two main problems. First is user
account management. That's pretty obvious. Identity and access
management. So, user account assignment and management and enforcement of
privileges. These are critical. It also focuses on the usage and the
regulatory and compliance space. And as I said, we're going to look at a
number of areas within this. Some of the new state of the art feature that
are, in my estimation, very exciting are things such as virtual directory
support. Many corporations have grabbed a hold of the LVAP architecture
and/or active directory architecture. Many corporations have several large
directories operating. Identity and access management:, the newest
versions allow us to create a virtual directory. So it can pull user IDs
and passwords and user attributes from multiple sources into a virtual
directory and then use that virtual directory as the main directory for the
identity and access management product and project itself.
The next major feature that I see a real improve in is web access
management. Think about you organization and all the web portals you have,
all the web enabled applications you have, all the enterprise applications
that you have that are web-based. Web access management is a relatively
new add-on here to the identity and access management function, that allows
you to control those applications as well as the standard network log-on
type of applications and certainly there have been some dramatic
improvements in auditing. As the auditors continue to refine what they're
looking for, and corporations begin to understand what the compliance
regulations are asking for, these identity and access management tools are
also beginning to get more refined. Therefore the auditing reports, the
types of things that can be seen and drawn out of this are becoming much
more sophisticated and easier to use at the same time.
So, what do I see here in the future? Probably the biggest failure point
of a technology right now is the identity and access management
implementation change. These are major projects, folks. You need to know
going into this that for a large organization of let's say 30,000 people on
a global scale with multiple offices, identity and access management may
take you three years to implement to a full degree. This is not a short
term project. Certainly you may start with one or two groups and then
build out the architecture from there. The challenge is right now that
it's not easy. What we're seeing now from the vendors, however, is a real
focus on this. They're beginning to get much smarter about making the
implementation, the deployment of their products much easier, and changing
them. So that once you've implemented let's say for an SAP or an Oracle
implementation, and you need to change that architecture a year down the
line, the change in identity access management process will also become
much easier.
The other true business scenario that I see real improvement coming, not
here yet however, is the whole idea of business process change management.
Most people tend to forget that one of the greatest successes, and I've
already mentioned it briefly, one of the greatest success and/or failures
will be business process and how identity and access management can either
help, or hinder it. You must always remember that security is a business
risk function, and we're here to enable the business. If this product
and/or project is going to succeed in your enterprise, you have to be
always aware of business process change management. What's happening is
that the vendors are getting smarter about this, they're professional
services are getting smarter, their technologies and interfaces are getting
smarter; and they're beginning to make it easier for you to have a real
success in helping your business become better at what they do.
So, what are some of the basic features here? As I was developing this
presentation I realized that we hadn't really talked about identity and
access management, so here's probably the four major areas of identity and
access management and what it is that it's trying to do for us. Identity
management, certainly, is the first function here, we're looking for a
single user identifier. I've seen a number of instances where projects
have stumbled, simply because they had multiple user IDs for the same
person. So one of the things, it's almost a prerequisite as you're coming
into this, you're going to have to settle on a standard user ID, and
central policy control point. This is another key area of improvement for
your architecture.
It leads right into provisioning. How easy is it to provision and how easy
is it to de-provision? Probably the greatest failure of the companies that
I have worked for personally, has been de-provisioning. There have been
users that have left the enterprise, they've been gone for years, but the
user ID is still there. And in some cases I'm aware of, those users have
come back in as consultants later on, and all they had to do was re-enable
the user Id because it was never disposed of properly. So how easy is it
to create the user ID? How easy is it to de-provision that user ID? And
what type of documentation controls are there? Think about Sarbanes-Oxley,
Gramm-Leach-Bliley, HIPAA requirements, FERPA requirements for education,
they're all very similar and a big cornerstone of these things like FFIEC
is all about documenting your controls and keeping a control on that
The next obvious example here is authentication. We're looking for every
user has a separate user ID, no generic accounts and I, like all of you,
have struggled like that because there are some cases, let's use training
as a great example: you have a training room where you don't want people to
log-in with their own user ID, simply because if they do it will push down
all their applications to the training computer and the training computer
will have to be re-imaged. So the only way to get around that is to create
training IDs that are somewhat generic. So how do you deal with that
situation? The next obvious thing is single-sign-on. All of us in large
enterprises have multiple applications that we're trying to get into
multiple platforms. Whether it be AS400, S390, Novel networks, Windows
networks, Linux networks: there's a number of places we need to log-in to
get to information to be able to do our business. Single user sign-on is a
critical success factor, and this is a very large public relations piece
for your project team out to the business. Being able to achieve this
single sign-on, or at least being able to reduce sign-on. The other
advantage here is reduced help desk costs. You can see great savings here
with this single or reduced sign-on component of identity and access
Lastly, most identity and access managements have a strong certificate
management, which provides strong authentication. Here we're going to talk
about some of the most important features that you need to be aware of for
your product, and therefore your project. First of all, when you review
identity and access management products you need to look to ensure that it
has a diverse run-time environment. What do I mean by that? I mean, does
it support J2E? Does it support LVAP and active directory? Is it
flexible, in other words? A cohesive product offering. This is a
wonderful one. A number of really good vendors out there have these
component pieces, these modules, you can think of them as building blocks
and this in and of itself it not bad; it gives you a great amount of
flexibility. But do these modules talk cohesively to one another? Is it
one large integrated product or are there several smaller ones? And if
there are several smaller ones, do they work seamlessly together? Well,
what we're beginning to see in this space is the larger companies buying up
these smaller promising vendors. And as such, their product offering are
not as cohesive as they need to be.
Work flow. Please notice that work flow here is number three on the list.
It's very, very high. What we're talking about here is automating business
processes, or support for nested work flows. So, for instance, you may,
your identity and access management may be supporting your finance
application; underneath finance you've got cost controls; underneath that
you've got vendors. And those all have work flows underneath them as well.
Will this identity and access management support those nested work flows?
Multiple connectors. This is crucial. You'll find a number of vendors
have what I'll call canned connectors to multiple platforms. And, as such,
they can talk to a few standard Windows, Linux, UNIX platforms, etc. The
question becomes, do the connectors have a graphical interface or is it
command line driven interface? Is there a programmer required? Quite
frankly the era of having the end users, us, the architects, having to do
this type of command line or graphical programming is long gone. There's no
reason with today's modern GUI interfaces to force the customers to do
this. And you're seeing some of the better vendors in this space have
graphical interfaces that are wizard driven and all the programming is done
in the background.
Certainly account management is going to be a very important feature. It's
one of the base features. Roles and groups also falls under that. And
multiple user interfaces. Typically these products will have interfaces
for users that may be outsourced, maybe you're outsourcing some of your
functions. They may not need the same interface that your internal users
need to have. What about your remote internal users? Do they need to have
the same rich feature set that your inside-of-the-firewall-users need to
have? So, are these products able to handle multiple interfaces, for
multiple clients within your organization? And lastly, however, is your
administration. Can you delegate administration, and thus have a different
user interface for different levels of administration. Self-service
capabilities. Even though it sounds like a no-brainer, it's one of those
things that for a project like this, it will really sell your project to
the end user community.
Virtual directory support, we've already talked about that briefly. This
is really just building, but there are enough products out there that you
need to be able to look at this. Aggregating user information from multiple
sources, have one logical view, and ideally the identity and access
management function houses the authoritative directory for user
information. Reporting is going to be key. What type of attestation does
it do for the logs? What types of auditing is it capable of doing? Can
you do a corporate policy audit? Can you do a regulatory audit? What
types of compliance audits can you do? And lastly, what type of change
request approval process are available to you?
So, how do we maximize deployment success? Well first I'm going to talk
about the failure points. The failure points typically are the business
process changes. You need to get your business unit heads involved in this
process at the very, very beginning. They're the ones you want to tie in
to, let's say SAP or Oracle or JD Edwards or some other large web portal
that you may have internally. Those business owners, the people whose
businesses rely upon that software package, and that you're tying into
those business processes; those are the ones that you're trying to improve
or automate. So, you have to, at the very front, create an expectation of
what the identity and access management product is going to be able to do
for you. And then ensure that you meet your actual expectations. This will
keep your business unit head, and thus, who do they report to? They report
to senior management, who report to the CEO. It's going to keep senior
management happy, because you've improved the business by doing things
Failure to communicate project goals. I've seen far too many projects as a
project manager, where the project team knew what was going on but nobody
outside knew what was going on. So, rumors started being created about
what the project was going to do, and of course once the project is
complete and it doesn't meet that rumored expectations, it's considered a
failure. So you need to communicate to management, specifically senior
management, and business units and to the end users in this case, and you
need to give them constant reminders. And by this I mean not only weekly
updates but emails to your internal end users to say, 'This is where the
project is at. This is what we've completed so far. These are the success
we've had. These are the challenges we're facing. This is when we expect
these things to be done.' So, you're giving constant communication out
there to always set that level of expectations. Just ensure that you meet
that level of expectations. Your business requirements, your architecture
deployment, if the business is not enabled through this process, this
process will fail. So don't try to implement one small piece without
having the bigger plan. I've seen a number of companies who have been
success in deploying to one small group, only to find out that they really
didn't plan out the whole enterprise and thus the whole project ultimate
failed. Simply because that one small group, they're business process was
so unique, that it couldn't scale out to the rest of the enterprise. And
if not done in this order, disaster will await. So always start with your
business process; start with your business unit heads. Then bring in the
technologies. Figure out what the expectations are going to be, and then
meet those expectations.
So what we're going to talk about here are the success builders. First of
all, I've already mentioned this briefly, but define your identity in the
enterprise. For instance, the syntax. So, is it going to be 'TBauers' or
'BauersT'? And ensure that every user has one user ID format, and one user
ID within the enterprise. Things such as your location, your division,
your management, your security level. All of those should be attributes
that should be defined before this project even starts. You need to define
attributes themselves. The required credentials. The roles. The user
rights or entitlements, and the policies or what's commonly known as
'segregation of duties'. All of these attributes must be defined. Please
notice: both of these are really done before this project even starts. Map
your attributes for the various systems. How are you going to map let's
say, the location attribute to your AS400 versus the active directory
implementations, versus the Linux or UNIX implementation or Documentum?
Does it even apply? Can it be used across all of those? So you need to
map those before you even start here.
Then define your audit requirements. Both corporate audit requirements
and regulatory. Corporate requirements are not just policy driven. Think
about data loss. Many of us have suffered from these privacy breech
notifications or Sarbanes-Oxley breach or GLBA problems. Think about it in
legal terms. So that if I've done audits and information still gets out of
the enterprise, intellectual property is what I'm talking about here,
intellectual property gets out, get's into the public domain, and you want
to press a legal case in the court systems. Those corporate audits, to
prove that not only did you have a policy, but that you audited the policy,
will come in very, very important in the court of law. So, ensure that you
have your corporate audit guidelines done, as well as your regulatory and
compliance guidelines.
And lastly, and one of the most often overlooked in many projects that I've
seen, is document your decisions and your decision process. Think about
the people that are coming three years after this is deployed. You've
moved on. You've been promoted. You've done a phenomenal job with this.
They've made a VP, but you're VP of a completely separate department now.
And the people that are in charge of running it don't have any idea why you
setup the user ID construct the way you did. So not only document that
decision, but how you got to that decision. What were the limiting
factors? What were the constraints? What were the success factors for
making that decision? So document both your decisions and your decision
process. So, how does the identity and access management product suite
help you with your audits? Well certainly we have the regulations, and I
list them here; everybody is familiar with them. Sarbanes-Oxley section
404; FFIEC for the financial industry; FERPA for, this is really the same
as FFIEC for financial except it's for education.
So, Sarbanes-Oxley section 404 recommends things such as the COSO or COBIT
audit controls, FFIEC, it is very specific control recommendations, FERPA
is very similar to FFIEC except education versus financial. And we start
at, we create an identity control cycle here. This identity control cycle
is where the audit assistance really starts to come in. We start at number
one, which is at the very top here, defining your control objectives. What
it is you're trying to control. Access to a particular hard drive or data
on a particular hard drive,access to a particular portion of an Oracle
database. Next you have to document the required control activities. How
is it that you are going to control access to that particular section of
the Oracle database? Then you're going to determine metrics. What metrics
are you going to use to measure to ensure that you're meeting those
controls? Then you're going to implement those controls. Put the controls
in place. And lastly, you'll audit the controls. And so those controls,
now, you've created an audit here, and you go all the way back up there to
ensure that, well, was my definition even correct? Well, you begin to see
automatically, just based on this identity control cycle, you begin to see
how identity and access management can really play a large role here.
Because identity and access management, what does it do? User Ids,
control, segregation of duties, auditing and reporting. So, it provides
the real technological framework to be able to create this control cycle
here. So, I can define the control object, control access to an Oracle
database; I can document those required controls, as we've already talked
about documentation. I can determine the metrics so I can measure using
identity and access management tool, I can actually measure log-ons, log-on
attempts, incorrect log-on attempts, attempts to hack into the system, I
can see all those thing. I implement the controls here using intensity and
access management and then I use the internal tools in the identity and
access management product suite to audit the controls and give me very
detailed reports. I can then turn those reports around and give them to
the regulators, to prove that I've met regulatory guidelines.
So, identity and access management, obviously, covers at least items 2-5.
Although in many ways as part of the project, you're going to define number
one. So, you're going to come up with a user identification, you're going
to create user attestation and assurance, you're going to ensure,
basically, that the user is who they say they are. And you're going to be
assured that it is they who are logging on to the system. Then you're
going to create a user authorization process by assigning rights, roles,
and responsibilities. Basically, segregation of duties, to that particular
Then lastly, you will generate historical data for auditing compliance
reporting. This is really, as I mentioned at the very beginning, probably
the most critical reason for growth in this particular segment of the
information security marketplace. Is that this historical data is now
available in a very easy way to give to the auditors, to prove that you're
complying with regulatory requirements. So, where are the holes, both in
your organization, how can the technology help? The first thing you need
to look for is what the risks are in your current system. Basically, you
need to do an audit of your current system, whether it's an internal audit
or a third-party audit. You need to find out where the risks are, and this
is not just technological, this is business process as well. So think of
things such as bar code systems from a warehouse. Is it using RFID tags?
How far away can those RFID tag be read? What I'm trying to do is get you
to think outside the box here. This is not just technology, this is
business process as well. So you need to identify business risks, as well
technological risks.
Let's say SAP has its own security infrastructure. Well, what holes are
there in the SAP system? Well, what holes are in the business process
embedded in the SAP system? Do you know right know who has access to what
systems? Can you definitively, right know, go put your hands on every user
that has access to particular systems? My guess is that you'd be hard
pressed to figure it out; and maybe one of the reasons that you're looking
to do identity and access management. Do you know who has access to what
information? Now we're getting a lot dicier. I know in my previous
employers that this was the number one area that we had difficulty with.
When you have a standard networking environment, whether it be a Linux,
whether it be Novel, or Windows, you've got these servers that most people
can get in to. Well, who has what information that's there, number one,
and who has access to the information, and how is that information flowing?
This becomes very, very important for regulatory compliance. Because
regulatory compliance, things like the FFIEC, FERPA, etc., they are very
precise about controlling who has access to data. FFIEC talks about who
has access to particular systems, but it also has specific guidance about
who has access to specific information. So you need to figure out who has
access to what information, how that information is flowing, and thus how
will identity and access management control that situation, or how do you
expect that it will control the situation. What are you current
authoritative user repositories? Do you have all LVAP? If so, how many
versions of LVAP do you have? Do you have active directory? Do you have
more than one tree? Do you have a Novel e-directory? So, how many
directories do you have there that are holding users?
Well, how many enterprise applications is SAP, for instance, part of the
LVAP infrastructure, or is it maintaining its own user ID base? What about
Oracle systems? Does it have its own Oracle ID base? I could go on and
name a number of different enterprise systems, but you begin to get the
idea. Where are those users located, and which ones do you consider
authoritative, and which ones you're going to have to change? So let's
assume that you have an LVAP that you've settled on, it's in your
enterprise, you may also have active directory. So you've got both, but
you're using LVAP as the main directory. But, there are some research
organizations in your company that have large enterprise based applications
that have their own user ID base, and their own passwords and their own
security, and they're not using any of the LVAP or active directory
functions. So they've got their own. Well, are you going to force them
through the identity and access management project to change, to become
LVAP compliant so that identity and access management can take better
control? That's really what you should be doing, but you can begin to see
now that unless you have that business owner in charge of that particular
research application, unless you have that business owner on board, and
being one of your champions, it becomes one of those areas of heartache,
and also potential area of failure. Because now you'll have this large
identity and access management infrastructures and they aren't plugged into
it and they still have additional help desk costs and senior management
says "it didn't work; we didn't improve the process, it didn't improve
So what are the points of human error in your current processes? And here
I'm talking about the business processes themselves where humans are
involved, that could be assisted by identity access management project.
Things such as creating user IDs or de-provisioning user IDs. Most
organizations without this IAM infrastructure have a very manual de-
provisioning process. So there are many mistakes. And as I've already
shared, I'm personally aware of organizations that have user IDs that have
been there for ten years, and the user has been gone for six. It's a very
manual process. Are your current identity and access management processes
documented? If not, that's got to become part of your project, and
obviously part of your cost. And you may end up having to bring in
consultants just to do that cost effectively.
Are your external partners covered in your current identity and access
management system? Many, many organizations are going to outsourcing or in-
sourcing, but they are shifting non-core business processes to some other
third party. Well, are those third parties included in your current plans?
They need to be in order to control data flow. We're talking about
information here. That's really what this is all about, is controlling
access to that information, not necessarily systems, but information. So
they need to be a part of your current system, and they need to be a part
of your current project, and you probably need to have somebody on your
team representing those third parties.
So the business processes. What happens if we don't implement this
properly? Implement identity and access management properly? We allow
open access to privileges that the user may no longer require. Think about
it. You came in to the organization, you're a network engineer, you got
promoted, you're not an enterprise; you've gone from senior to enterprise
level network engineer. But you've still got user privileges for systems
that you were responsible for when you were first hired. That's a problem.
Open accounts. Somewhere along the line someone was doing development
work, they created an account to do testing with and that account was never
done away with, it was never deprovisioned. Administrative overhead in
cleaning up the systems. How much are you spending now in creating or
overseeing those problems now? For a return when the users no longer
require them. So how do I go beyond this? How do I improve this process?
Well there are some recommendations here for mapping the process. First of
all, gain human resources buy-in. They are the people, they are the people
portion of your corporation. So, gain them, gain their support from the
very, very inception. HR employed life cycle process is key to effective
employee identity and access management. Tie in those two, the HR employee
life cycle process and the identity and access management process should be
absolutely intertwined. Simple and transparent provisioning for all
employees and make the approval provisioning process for non-employees
equally as easy.
Here I'm talking about consultants, contractors, temporary personnel.
Provide simple mechanisms for employees that change roles in the
corporations. Is there a graphical user process to be able to make those
changes, as roles change? Is it an automated system? Look at mapping the
business roles to IT processes, resources, and assets. This can be
problematic sometimes, and I'll be the first one to admit it. That the way
IT sees the world, from a system standpoint, from an architecture
standpoint, doesn't necessarily always map cleanly to business processes.
But you need to make this as close as possible.
Is it possible to change the IT process or is it possible to change the
business process so that they do come in alignment? Introduce in this
project, introduce simple roles to start. In other words, employee versus
non-employee. That's a very simple role. And then assign common
privileges to those roles. So, start there as your foundation. Don't try
to start complex first. Create an easy interface first, and then turn
around and add your layers of complexity; add your roles and groups there.
But start at the simple and become more complex.
Lastly, consider what resources may require approval. Those that don't
require approvals are built into a roll catalog. Very simply, what we're
trying to do is automate the process as much as possible. For instance,
you have a manager that needs to have access to a particular web portal.
Do you really need to have a formal HR approval process to have that
manager have access to that particular web portal? If they don't then make
it an automated process and assign it to a roll catalog. And make it a
very simple process.
In conclusion, many of the aspects of this marketplace are mature, but
certainly more polish is going to be required. These suites are not where
they need to be yet, but they are getting there. Realize that this is a
complex project, very complex for both implementation and configuration.
You will most certainly need to have professional services from your vendor
involved in this. You'll probably likely have consultants and contractors
involved, to help do some of the more mundane documentation, role
management stuff, to be able to do that cost effectively. Consolidation in
this space is happening at a very rapid pace. Vendors, large vendors are
buying smaller vendors, smaller vendors are doing the most innovation.
Larger vendors tend to be buying those and integrating them into their
suites. This whole space, however, is driving improvement in features that
will improve regulatory compliance. It will make it much easier to prove
regulatory compliance. And lastly, identity and access management provides
everything you need to meet regulatory requirements, currently. Today, they
can meet all of your requirements for identity controls. It is the right
solution. It will make it easier for you, just realize that it will be a
birthing process, a growing process to get this project deployed correctly.
Thank you.
Eric Parizo: Alright, great presentation Tom. Thank you so much. I have a few
follow up questions for you. Nobody ever likes to talk about the negative
side of things. But, how do IAM deployments fail most often? What are the
factors and/or worst case scenarios?
Tom Bowers: As a global project manager, where I see most of these projects, at
least stumble if not outright fail, is not getting their business units
involved enough. Number one: from the very beginning, going to those
business unit champions, developing champions, if you will, business unit
people. And by this I mean, people who are in the business side of the
house. Whether you're selling silicone, whether you're selling boxes or
products, those business unit people need to be involved in the process
from the very inception, number one. And they need to be involved
throughout the project. Secondly, is setting expectations. Don't tell
them you're going to deliver the moon and then only deliver them Mount
Everest. Mount Everest is impressive, but when compared to the moon, it's
not there and the project may be seen as a failure. So, set reasonable
expectation and get your business units involved from the very inception.
Those are the two most common areas I see problems with these deployments.
Eric Parizo: Following up on that real quick, regarding the business units. In
your experience, are those champions hard to find or are they always there
to be found? Will they take the time and make the effort?
Tom Bowers: Business champions typically can be very easy to find simply by
looking at the enterprise applications that you're looking to bring in as
part of identity and access management. So, I've already mentioned a few
things like SAP. Well SAP, JD Edwards, those types of applications support
things like human resources, legal, finance and accounting, production,
manufacturing, research. So, look at those applications and then look at
who those applications are supporting, then go to those business units and
talk to the business unit head and let them know what's going on with the
identity and access management project; or what your vision is. So it's
relatively easy. What you're going to find out is if you go to them and
say 'Hey, we're looking to improve the business process. Help you do thing
more efficiently here.
We have some technology that we think you'll find very helpful. Would you
be willing to invest some of your group's time in order to help make this a
success?' What I've seen personally is that most of those business units
are going to be jumping all over themselves to be jumping on the bandwagon
if they can be part of a success project. So it's relatively easy to
develop champions. What's more difficult is to keep them as champions. By
communicating, keeping them involved, letting them know what the initial
expectations were, and the expectations that you've met. So, it can be
done and I think it's a people issue; it's a soft issue, it's not a
technology issue.
Eric Parizo: OK. That sounds like a good plan. What is the most important part
of regulation that IAM addresses?
Tom Bowers: Regulations in and of themselves talk about--they either mandate or
in the case of FFIEC, strongly suggest controls that need to be put into
place. For instance, FFIEC is very strong about two factor authentication
as a minimum. Although it doesn't come out and say you must, if you don't
have it and the regulators see it, you may not be seen as meeting
regulations. So even though it's not mandatory, it's strongly suggested.
So controls are definitely a part of that documentation. You're going to
find that regulations are requiring more and more documentation. This is
where identity and access management can shine, because there's a built-in
methodology for documenting a reporting what's been done. Auditing and
reporting are the back-end of identity and access management, and they are
how you prove to regulators that you're complying with the regulations;
it's by conducting audits, frequent, regular audits, and providing the
required reports. So, identity access management, while regulations
require controlled documentation, auditing, and reporting, identity access
management can actually supply all of those things. It can supply the
controls for you; it can supply the documentation or at least assist in
creating that documentation; and then it will help you in a built in
process do auditing and reporting.
Eric Parizo: All right. Here's our final question for today. And really, this
is just to go off of all of this, if you could offer just word of advice
for IAM/compliance related projects, what would it be? What's the most
important thing to keep in mind?
Tom Bowers: Business processes. It is the foundation. Everything must build off
of your business process planning. Set your expectations; get your people
involved--the business units heads involved. It will absolutely pay huge
dividends down the road during the project, if you find out that the
identity access management doesn't have a connector for this particular
platform so you go to the particular business unit head and because they're
a champion you can get funding from them instead of having to always go to
your own funding all the time. I would say that business processes are the
starting point, the foundation point, and the success criteria for a
successful deployment.
Eric Parizo: All right. Sounds good, very good. Thank you so much for your
insights. That brings us to the end. We'd like to thank Tom Bowers of
Security Construct for joining us today. For more information on
provisioning and password management, read our companions disk via the link
on your screen. And be sure to check out our firstsecurtiy.com identity
and access management security school at firstsecurity.com/iamschool.
Thanks to all of our listens for joining us. I'm Eric Parizo. Stay safe
out there.


text:
This is my letter from AllFreeCrochet, I'm so chuffed to say that 2 of my patterns made the list!
My Witch Stitch Hat patternand my One Piece Wonder Baby Bootie pattern.
Please visit their link and show some support for one of the largest collections of free crochet and knit patterns.
I'm excited to announce that you're one of AllFreeCrochet's top bloggers of 2014! We've compiled a list of 100 of our most popular patterns of the year, and you made the cut! One of your patterns is featured on our Top 100 Patterns list, which is live on our site right now.
Here's the link to our top 100 list, if you'd like to share it with your readers:
Crochet-Monthly-Favorites/100- favorites-how-to-crochet- clothing-crochet-afghan- patterns-crochet-accessories- more
Whilst I am here writing this post, I'd like to advise my followers that 5 months ago I became a grandparent raising 2 of my grandchildren ages 9 months and 3 yrs old.
This has been the reason that I have not been active with my free pattern writing and keeping my blog up to date.
My priorities are quite clear, the children come first!
I do however miss my craft so much and will get back into it when time allows. I really do hope that I see you soon, cheers for now and all of my very best to you all!


text:
Contribute to ReadWriteThink / RSS / FAQs / Site Demonstrations / Contact Us / About Us
Find the latest in professional publications, learn new techniques and strategies, and find out how you can connect with other literacy professionals.
Home › Professional Development › Professional Library
Small-Group Reading Instruction: A Differentiated Teaching Model for Beginning and Struggling Readers
by Beverly Tyner
|April 2009
Purchase this book now from the ILA Online Store
Become an ILA member and get a discount on this book
Classroom tested and research based, the Small-Group Differentiated Teaching Model provides effective reading instruction to meet the needs of each classroom's broad range of learners. Easy-to-use lesson plans and activities support the five stages of reading growthemergent, beginning, fledgling, transitional, and independentand the accompanying CD features a wide assortment of materials that will help you implement the lessons.
In this revised and fully updated edition of her bestseller, author Beverly Tyner provides
- Revised lesson plans that include hands-on student involvement
- Assessments to monitor students' progress
- A chapter dedicated to the topic of effectively engaging the other students in independent activities as they relate to the stages of reading development
- A scope and sequence for word study for each stage of reader
- And much more!
Although intended for primary-grade teachers and reading specialists, the book also offers a solid basis for teacher training and reading intervention programs, including Response to Intervention.
Tyner, B. (2009). Small-Group Reading Instruction: A Differentiated Teaching Model for Beginning and Struggling Readers (2nd ed.). Newark, DE: International Reading Association.
Related Resources
Grades K – 2 | Lesson Plan | Standard Lesson
Word Sorts for Beginning and Struggling Readers
Students are introduced to short-vowel word families and learn to sort words alone and with a partner using the Word Family Sort activity.
Grades K – 3 | Lesson Plan | Standard Lesson
Word Study with Henry and Mudge
Henry and Mudge is used in this lesson to build students' word recognition through rereading, high-frequency word banks, word studies, and writing.


text:
Vice Mayor Paul Cunningham
City Launches Interactive Mural Map
Posted August 2, 2018
The artwork of local, national, and international muralists is on display in the City of Tucson. A new map from the City's GIS team shows the locations of the murals and explains what they mean. Throughout these works, the region's natural landscape, heritage, and resilience are prominent. Mountain vistas and desert flora set the stage for defining events in the city's cultural history, such as the All Souls Procession and the capture of John Dillinger.
Paul's Note - July 27, 2018
Posted July 27, 2018
With school out, I've had more time to do "ride alongs" with some of our social service agencies. I wrote about going out with CHRPA a couple of weeks ago. This time, I went out with Pima Council on Aging's Meals on Wheels program.
Both the City and Pima County help with funding the program in addition to $60,000 in private funding. The city distributes $50,000 from federal Community Development Block Grants to Meals on Wheels.
Back to School Events
Posted July 27, 2018
Badges and Backpacks: The Pima County Sheriff's Department and Banner|Aetna will host Badges and Backpacks tomorrow, July 28, 8 am-noon, at the Tucson Convention Center Exhibit Halls, 260 S. Church Ave. Free backpacks and school supplies will be distributed. The event includes a health fair with immunizations and screenings.
Veterans Upward Bound Program
Posted July 27, 2018
Pima Community College is using a new Veterans Upward Bound grant to provide free services to help separating military personnel and veterans to enter and succeed in post-secondary education.
The College will receive a total of $1.319 million over the next five years under a TRiO grant from the U.S. Department of Education.
Parking for Weekend Events Downtown
Posted July 27, 2018
This weekend is the 4th Anniversary of the Sun Link Streetcar along with other great happenings. Make sure you know where to park for all of the activities in Downtown and all along the Sun Link Streetcar line. We have plenty of convenient parking available, making it easy to enjoy it all!
For more information on Streetcar Anniversary activities click here.
Weekend events include:
• 4th Anniversary of Sun Link Streetcar - FREE Rides and Concerts on board and in the districts (Saturday)
Half-Staff Notification: Trooper Tyler Edenhofer
Posted July 26, 2018
Governor Doug Ducey this morning directed that flags at all state office buildings be lowered to half-staff immediately until sunset Friday, July 27, 2018, in honor of State Trooper Tyler Edenhofer who was killed in the line of duty from injuries related to a shooting.
Another State Trooper, Dalin Dorris, was critically injured during the tragic incident.
Weekly Update
Posted July 20, 2018
Paul's Note
I spent some time volunteering with an organization called Community Home Repair Projects of Arizona, better known as CHRPA. Click to read more
Other news
Paul's Note
Posted July 20, 2018
I spent some time volunteering with an organization called Community Home Repair Projects of Arizona, better known as CHRPA.
CHIRPA provides homeowners who are usually disabled or on fixed incomes with emergency and necessary home repair. The group was started by Mennonites in 1982 and quickly grew because of both the need in our community and the number of community members willing to give their services.
Smoking Prohibited at Sun Tran Transit Centers
Posted July 19, 2018
Tucson Industrial Development Authority offers homebuyer assistance
Posted July 13, 2018
The Tucson Industrial Development Authority makes purchasing a home more affordable for local residents with its down payment assistance and mortgage tax credit programs.
Buyers whose annual income does not exceed $99,169 may receive up to 5 percent of their mortgage loan to help make their down payment under the Pima Tucson Homebuyer's Solution (PTHS) program.
Since 2012, the Tucson IDA has helped more than 3,800 local families become homeowners in Pima County through the program. It helped 873 homebuyers in 2017 alone.
Weekly Update
Posted July 13, 2018
Paul's Note
I visited our new 911 call center located on South Park Avenue. As you might now, we are in the final stages of reorganizing the way 911 calls are handled. One of the first steps to doing that was having a new department, Public Safety Communications, that would handle the work that was previously done by separately by sections of the Police and Fire Departments.
Paul's Note
Posted June 25, 2018
The work continues at Jesse Owens Park. Although I have been touting the amount of public money I was able to secure from impact fees and service line warranty funds to put into the park, we had a couple of reminders that it isn't just all about the money.
Tanque Verde Road – Sabino Canyon Road to Kolb/Grant Road Repaving Project
Posted May 29, 2018
Crews from Southern Arizona Paving and Construction Co, under contract with the City of Tucson Department of Transportation (TDOT), are scheduled to begin lowering manhole covers and water valve covers on Tanque Verde Road from Sabino Canyon Road to Kolb/Grant roads on Tuesday, May 29, 2018, in preparation of an upcoming repaving project. The utility adjustments will take place from 6 a.m. to 6 p.m. and are scheduled to be complete in one day.
Arizona Symphonic Winds - Music in the Park
Posted May 9, 2018
Arizona Symphonic Winds are starting their 2018 season this week. All concerts are at 7 pm at the Lázló Veres Amphitheater at Udall Park (7200 E Tanque Verde). Admission is free. Bring a comfortable chair and a picnic dinner.
May 12 - Tchaikovsky Violin Concerto: Tucson Symphony violinist Joseph Rousos-Hammond brings this beloved concerto to the Udall stage. Overture to Martha and the Tucson March are among the other selections. Not to be missed.
Half Staff Notification - Barbara Pierce Bush
Posted April 18, 2018
In coordination with the Presidential Proclamation, Governor Ducey has ordered that flags at all state office buildings be lowered to half-staff immediately until sunset on Saturday, April 21, the day of interment, for former First Lady Barbara Bush who passed away yesterday.


text:
I wrote about AmazonFail 2009 over at Broadsheet this morning, so if you've been dying to discuss it here, check that out and come back.
One thing I didn't get to in that post (which got out-of-hand long very quickly) was this post at After Ellen, in which Sarah Warn reminds us that the problem at the bottom of all this — gayness being strictly associated with sex — is hardly anything new.
With so many media images working together to over-emphasize the sexual aspect of homosexuality and bisexuality, should we be surprised someone at Amazon.com apparently put gay and lesbian books like Heather Has Two Mommies and John Barrowman's biography Anything Goes in the "adult" (i.e. explicit sexuality) category?
Amazon.com is calling this a "glitch with our sales rank feature that is currently being fixed." Even if that turns out to be true, this kind of glitch is inevitable in a culture which relentlessly oversexualizes gay, lesbian and bisexual people.
Amazon isn't alone in making this correlation. Internet filters at schools and libraries, ISPs, even whole countries routinely block gay and lesbian sites, even when they contain no "adult" content. YouTube requires users to be over 18 to view a video of an innocuous same-sex kiss, but not an opposite-sex one.
Go read the whole post. In the meantime, I've changed the sidebar link to our book so it goes to Powell's — but, for reasons explained in the Broadsheet post, I'm really hoping not to have to write off Amazon for good. Beyond my (selfish, lazy) desire to keep buying from them, as an author, I would like to be able to recommend them in at least sorta-kinda good conscience, since they are a major fucking bookseller everyone knows. So, you know, APOLOGIZE ALREADY, GUYS. APOLOGIZE A LOT. SOON.


text:
about six years ago
Coverage of today's Cards and Pirates game can be heard on Newstalk 97.3 WTIM beginning at 6:40pm.
St. Louis, MO (SportsNetwork.com) - Kolten Wong opened the scoring with a two- run double and ended the game with a two-out homer in the bottom of the ninth to send the St. Louis Cardinals to a 5-4 win over the Pittsburgh Pirates on Tuesday at Busch Stadium. Wong belted a 3-2 pitch from Ernesto Frieri (1-1) over the wall in right field to give the Cardinals their second straight walkoff win. Matt Adams was the hero on Monday with a two-run homer in the ninth. "When I hit it, I knew it was gone," said Wong. "For a moment I forgot to run. Just excited to get home and be the guy jumping into the dog pile. It's something I'll always remember." It's the first time the Cardinals have had consecutive game-ending home runs since Albert Pujols twice beat the Chicago Cubs on June 4-5, 2011. Matt Holliday doubled home two runs for the Cardinals, who have won five of their last seven. Wong's blast made a winner of Trevor Rosenthal (1-4), who worked around a hit and a walk in the top of the ninth. Pedro Alvarez and Andrew McCutchen each hit two-run homers for Pittsburgh, which had won three straight before suffering heartbreaking defeats each of the last two nights. "It's not the first time we've had two tough losses and it probably won't be the last time," said Pirates manager Clint Hurdle. "One swing of the bat changed the game. You shower up and get ready to play tomorrow." Vance Worley started for the Pirates and surrendered four runs on nine hits with three strikeouts in five innings. Carlos Martinez went the first six innings for St. Louis and yielded four runs on eight hits with two walks and six strikeouts. The Cardinals opened the scoring in the second with a two-out rally. Worley retired the first five batters he faced, but Jhonny Peralta stroked a two-out single and went to third on a base hit by Oscar Taveras. Wong followed with a drive to the gap in right-center field for a two-run double. Pittsburgh put two on with two outs in the third, but Neil Walker flied to center. The Pirates, though, tied it in the fourth on Alvarez's 100th career homer. Ike Davis drew a walk in front of Alvarez, who drilled a pitch over the wall in right-center field for his 14th home run of the season. McCutchen gave the Pirates the lead in the fifth with his 14th homer of the year. He crushed a shot over the wall in right field that also scored Gregory Polanco, who led off the inning with his third single of the game. Walker followed McCutchen's blast with a triple, but was picked off third on a sharp throw from catcher Yadier Molina. The play was reviewed and upheld. St. Louis responded immediately with two in the bottom of the inning to tie it. Matt Carpenter and Jon Jay each singled with one out and both scored on a double to left-center by Holliday. "He was up in the zone more than in the previous outings and wasn't as sharp in the strike zone," Hurdle noted about Worley. "His overall command wasn't as sharp." The Pirates had an opportunity against Rosenthal in the ninth when Jordy Mercer singled with one out and pinch-hitter Josh Harrison followed with a walk. Polanco then flied to shallow center and Starling Marte went down swinging. Pittsburgh finished 0-for-7 with runners in scoring position after an 0-for-10 performance in Monday's 2-0 loss. "We haven't been getting them the last two nights," Hurdle said about clutch hits. "You keep sending your guys up there and grind out quality at-bats." Game Notes Carpenter finished 2-for-4 and snapped an 0-for-10 skid with a first-inning infield single ... Adams was 1-for-3 and has eight hits in last 13 at-bats. He has a six-game hitting streak ... Walker extended his hitting streak to 10 games, his second double-digit streak of the season. He hit in 11 straight from May 20-30 ... Hurdle said lefty Francisco Liriano, sidelined since June 11 with a strained oblique, is expected to make a start before the All-Star break, likely this weekend in Cincinnati ... Pittsburgh's Gerrit Cole will likely be placed on the disabled list Wednesday because of a lat injury to make room for Brandon Cumpton, who is expected to be recalled from Triple-A Indianapolis to make the start against the Cardinals.
2020 Taylorville Daily News,
Miller Media Group
Built on Envisionwise Technology. Administrator Login


text:
It Is All About BTC, LTC, ETH, ZEC mining as well as other alternative crypto currencies
The motherboard maker Biostar is apparently going to be launching soon a dedicated crypto mining motherboard or as the call it a "Professional Bitcoin Mining Machine". The product called Biostar BTC-24GH will use 64 ASIC chips on a single board that supposedly will provide 24 GH/s hashrate for mining Bitcoins (SHA-256). There is no word about release date or pricing available, but this offer already seems like a too little, too late thing with other ASIC makers going for the Terahash range already and the newtwork difficulty already way too high for just 24 GH/s to be profitable, unless it is very power efficient and very cheap, both of which do not seem very likely and you'll now in a moment why.
The specifications of the 24 GH/s SHA-256 ASIC device say 130W as power consumption per module and you can stack up modules, up to 50 together for higher hashrate. Each module will be with dimensions of 244×244 millimeters and use COM to USB connection to the computer. With 50 of these boards you could get up to 1.2 TH/s hashrate which does not sound bad at all, if the price is right, however you would need 6500W of power so in terms of performance per watt the Biostar BTC-24GH won't be interesting at all. As we've already said: too little, too late .
– For more information about the Biostar BTC-24GH Bitcoin mining ASIC devices…


text:
Here is a sample of some of the iPhone sleeves I have made, to give you a little inspiration. They were all made using my free pattern. The pattern is very easy, and you can use any yarn you choose. An experienced crocheter will whip this up in a very short time. It would also be a great first crochet project for a beginner.
Why not grab some yarn and give it a try. 🙂
View original post 190 more words


text:
Grandma Feared Grandson: Testimony of Sandra Payne Who Shot Grandson to Death (VIDEO)
Grandma Sandra Layne has said she feared her grandson as she gave testimony in her defense for shooting him to death in court on Wednesday. She is claiming self defense.
The 75 year old grandma fatally killed her teenage grandson at her suburban Detroit home by repeatedly shooting him on May 18, 2012 in West Bloomfield Township. Reports state that she even shot 17 year old Jonathan Hoffman as he was calling 911 for help.
Layne is now being charged with first degree murder in Oakland County Court.
The defendant has told the court that she "adored" the boy and still loves him despite killing him. She is said that her grandson lived with her while his parents lived in Arizona.
However, her defense lawyers have said that she feared for her life because the teenager had been acting in an erratic way and his behavior had scared her. They have also highlighted that he used synthetic marijuana.
The grandma offered her testimony to the court on Wednesday, all the time speaking in a soft timid voice.
As she took the stand she turned her chair towards jurors to face them, although she did not always maintain eye contact with them.
During the testimony she also described one incident where she had visited the teenager at a hospital where he was being treated for his drug use; revealing the extent of his drug problems.
Here is a video news report into the incident prior to the trial commencing:


text:
La Focaccia
Italian Grill is a family owned and operated classic Italian restaurant
located in San Antonio, Texas. Luigi and Dolores Ciccarelli, the
original proprietors of the former Luigi's Italian Restaurant on San
Pedro, have been delivering quality service, culinary excellence, and
value since 1972. Luigi Ciccarelli, after operating Luigi's Resturant
for twenty-four years, opened La Focaccia Italian Grill in the Historic
King William District in 1996.
family recipes and contemporary culinary expertise blend to
produce a unique Italian dining experience. La Focaccia offers an
menu featuring an appetizing array of seafood, veal, steak,
and pasta
house specialties such as Linguine Pescatora, Veal Saltimbocca
and Lingine with Clams. Enjoy La Focaccia's classic Italian style pizza
and traditional focaccia bread baked in a
wood-fired oven.
Focaccia offers a warm and inviting atmosphere for any occasion.
Whether it's a casual lunch with family, a romantic dinner for two, a
banquet, or just enjoying a drink and some appetizers at the bar with
La Focaccia Italian Grill is the place to be!
look forward to your visit to La Focaccia!


text: |TENURE TRACK POSITION IN FACULTY POSITION IN TOPOLOGY University of California, Riverside Applications and nominations are invited for one faculty position beginning July 1, 2018. Applications are welcome from those working in all areas of Topology*. This position is intended for the level of tenure track assistant professor. A PhD in Mathematics is required. Applicants are expected to have demonstrated excellent research and teaching, normally including major contributions beyond the doctoral dissertation. Responsibilities of this position include teaching undergraduate and graduate level courses and seminars, conducting scholarly research and participation in departmental and university service activities. Established criteria of the University of California will determine the salary and the level of appointment. Applicants should log on to https://www.mathjobs.org/jobs/jobs/10649 to submit a cover letter, curriculum vitae, including a list of publications, individual statements on research, teaching and diversity, a minimum of 3 letters of recommendation on research and one letter of recommendation on teaching. Evaluation of applications will begin on October 30, 2017 and will continue until the position is filled. * Mathematicians in all other subject areas are encouraged to apply for UC Riversideâs positions in pure mathematics at http://www.mathjobs.org/jobs/jobs/10622 and applied mathematics at http://www.mathjobs.org/jobs/jobs/10617. Please consult their respective advertisements. UCR is a world-class research university with an exceptionally diverse undergraduate student body. Its mission is explicitly linked to providing routes to educational success for underrepresented and first-generation college students. A commitment to this mission is a preferred qualification. Advancement through the faculty ranks at the University of California is through a series of structured, merit-based evaluations, occurring every 2-3 years, each of which includes substantial peer input. The University of California is an Equal Opportunity / Affirmative Action Employer with a strong institutional commitment to the achievement of excellence and diversity among its faculty and staff. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, protected veteran status, or any other characteristic protected by law. WWW.MATHDEPT.UCR.EDU


text:
Bulb Vase
In stock and available to ship.
Additional Information
Our Lantern Collection is defined by a ceramic skin stretched over an invisible armature, like a Japanese paper lantern. Jonathan and his team design and sculpt each one in our Soho studio before our skilled artisans in Peru make a mold and handcraft them from high-fired stoneware.


text: My favourite case 5 i used this for my 14" hp laptop, and it fitted so perfectly i didnt have to worry about my laptop dropping or anything, if it happens. just feeling the material of the sleeve, you can tell that it is made with quality materials. mookie&tiki Singapore 2014-12-08


text:
SendBlaster is a free bulk email software, a mass email marketing program and a bulk emailing sender. In today's Internet marketing strategies, being on search engines is not enough: sales are a matter of trust. Web visitors become customers when you give them the content they're searching for. Emailing and sending personalized content is legal when you gather new mailing list users, using free opt-in subscription modules in your websites. When you catch interested subscribers the key for a winning and cheap email marketing is to mass email the prospects using a bulk email blast software as an email marketing program: the free mass email newsletter sender will automatically deliver mass emails and personalized emails to subscribed users in your emailing list. Turn occasional website visitors into recurring users and customers by sending legitimate and confirmed bulk email newsletters, updates and targeted email offers: using a downloadable bulk email software on your PC.
- Download SendBlaster Free Bulk email software, and send today mass newsletters and email offers.
- Download free php opt-in form mail newsletter subscription module for website mailing list permission legitimate subscription (verified double optin and captcha Php closed-loop opt-in scripts). SendBlaster bulk emailing software imports multiple user's details into your local mailing list.
- Create or import.csv mailing list and start your customer oriented permission bulk email marketing.
- Send massive emails and contact multiple customers with one click send.
Legitimate direct bulk email marketing: the best way of establishing a successful relationship with potential clients… sending bulk emails, with your contact's permission of course!
- bulk emailer features list
- email sender software screenshots
Free DownloadBuy SendBlaster Pro
Latest release: License agreement – How to uninstall


text:
- Inside Athletics
- Tickets
- Fan Zone
- Media Zone
- Social
- Shop
- Donate Now
JOHNSON CITY, TENN. - In addition to enjoying East Tennessee State baseball this coming week, fans from the Tri-Cities community can participate in promotional days at Cardinal Park.
On Saturday, March 25, when the Bucs host Georgia Southern in a Southern Conference doubleheader at 1 p.m., ETSU will conduct a "Kids Day" for fans 18 and younger. The first 200 fans 18 and younger to enter the ballpark for the first game will receive a free hot dog. There will also be events and an autograph session with the ETSU Diamond Girls. Admission for fans 18 and younger is $1. "Kids Day" is sponsored by the Hot Dog Hut located in Kingsport, Tenn.
When the Bucs host the University of Tennessee at 7 p.m. on Tuesday, March 28, fans are invited to help the less fortunate by contributing to ETSU's Clothing/Canned Food drive. All fans are asked to bring clothing and canned food to the ballpark with all proceeds going to Goodwill and the Salvation Army.
ETSU and the Buccaneer baseball program would like to thank the Tri-Cities community for its continued support.


text:
Sałatka JarzynowaSunday, December 23rd, 2007
One dish that is always served at my family for any of the holidays is a Polish mayonnaise based vegetable salad, sałatka jarzynowa. It goes very well with the rest of the mandatory Polish dishes served during Christmas, Easter and other important occasions. Every family has their own recipe, but the common ingredients are diced potatoes, eggs, carrots and mayonnaise. This kind of salad with diced vegetables bound in mayonnaise can be found in many countries with various names and a bit different ingredients. The most common name is Russian salad, even though the original recipe contained lobster and truffles and differs a lot from today's version. But the most important thing isn't the origin or name, but the taste!
Sałatka Jarzynowa
4 large potatoes, boiled with their skin on and then peeled
2 red onions
6 eggs, hard boiled
3 large carrots, boiled
250 gram green peas, boiled or from can
200 gram fermented cucumbers
350 ml mayonnaise
optional: 1 tbsp of grated horseradish
optional: a handful of grated cheese
Dice potatoes, eggs, carrots and cucumbers. Finely dice the onions. Combine the diced ingredients in a bowl and add peas. Add mayonnaise and combine everything. Salt and pepper to taste. Add grated horsradish and/or cheese if wanted. Cover with cling film and keep in the fridge. May be prepared one day in advance for a better taste.