Jul 30, 2025 | AOC Business Partner
Sponsored content contributed by AOC Business Partner: Covenant Global
Email is the heartbeat of county operations. Whether coordinating with vendors, issuing permits, or managing sensitive records, it’s how work gets done. But many public agencies don’t realize that their email domain—if not properly configured—can leave the door wide open to impersonation, spoofing, or even unnoticed data exposure.
That’s why Covenant Global created the “What’s Your Security Score?” scan: a free, low-lift checkup designed specifically for Oregon counties. It’s not a sales pitch. It’s a practical tool for busy teams who know cybersecurity matters but don’t always have the staff or time to dig into the details.
Why Domain Security and Dark Web Scans Matter
When your email domain records—SPF, DKIM, DMARC, and MX—are incomplete or outdated, it becomes easier for outsiders to impersonate your agency or send emails that appear trustworthy. These records are your front line of defense, and misconfigurations often go unnoticed until something goes wrong.
Similarly, a dark web scan checks to see if any credentials tied to your agency’s email domain have been exposed online. This often includes passwords from old accounts or previously used logins—small oversights that could create big risks later.
What You’ll Receive (At No Cost)
Your Security Score includes:
- A domain health scan reviewing key email security records
- A dark web credential check tied to your public domain
- A plain-English report outlining risks or misconfigurations
- A prioritized action plan for your IT team or provider
And for counties using Microsoft 365, we’ll let you know if you qualify for additional cybersecurity support through Microsoft’s 20/20 Initiative.
Why This Matters for Counties
In our early work with local governments:
- 75% had missing or outdated email security records, leaving them vulnerable to spoofing or impersonation
- Over 60% had credentials exposed on the dark web, often from old accounts or password reuse
This isn’t about pointing fingers. It’s about giving your team the insight and support to make smart, proactive decisions.
It’s Not About Fear—It’s About Visibility
After working with SLG clients, we’ve found that most email domains have room for improvement—but many agencies simply aren’t aware of the gaps. The Security Score gives you the visibility to fix what’s fixable and the confidence to move forward.
It’s fast, free, and built to support the work you’re already doing.
If you’d like to take the first step, we’d be honored to walk with you.
Email us at tellmemore@covenant.global
Let’s keep Oregon counties secure, connected, and confident—together.
Jul 30, 2025 | AOC Business Partner
Sponsored content contributed by AOC Business Partner: Nationwide
For most participants of Nationwide’s Supplemental Retirement Plans, diversifying investments is important because it can help reduce the potential of overall market losses in your retirement account. If you are unsure about how to manage your asset allocation or prefer not to manage it yourself, selecting a target date fund (TDF) from the Plan’s menu of investment options could be the ideal solution.
A TDF is a mutual fund that is managed to adjust its asset allocation to become more conservative as you approach retirement — your target date. In the early years, the fund invests more heavily in growth-oriented assets such as stocks. As the target date nears, the fund gradually shifts toward more conservative investments such as bonds and cash equivalents.
Benefits of using a target date fund
- Professional management: TDF portfolio managers adjust the fund’s investments based on market conditions and its target date, helping to optimize returns and manage risk
- Diversification within a single fund: The fund manager invests to spread risk across various asset classes, which can enhance the stability and performance of your investments over time
- Automatic asset rebalancing: You don’t have to worry about making adjustments yourself as you get closer to retirement
- Convenience: Simply choose a fund with a target date closest to your expected retirement year, and the fund takes care of the rest
Things to consider about TDFs
- Retirement assets held outside of the Plan might affect your overall asset allocation and diversification, the risks you’ve assumed and the fees you’re paying
- TDF glide paths can vary widely, even among those with the same target date
- Investing in a TDF doesn’t necessarily safeguard against losses or guarantee that you’ll have enough income for retirement
For assistance in understanding how to use a TDF as an investment strategy, log in to your Nationwide Retirement Plan account at nrsforu.com to:
- Contact your Retirement Specialist
- Select a TDF or otherwise manage your investments
Jun 26, 2025 | AOC Business Partner
Sponsored content contributed by AOC Business Partner: Nationwide
One of the most important decisions you may make with your Nationwide account is beneficiary designation, through which you inform the Supplemental Retirement Plan of whom you want to control your assets in the event of death. When Nationwide has your beneficiary designations on file, the individuals you designate can usually gain access to your account without having to wait for a court decision.
Beneficiary designation is also one of the first steps in estate planning, a process designed to protect the property you’ve accumulated and money you’ve saved. No matter how old or young you are and regardless of your wealth, having an estate plan can be essential. Without a plan, the state, through probate court, would control the decisions, which might not reflect your wishes.
Benefits of an estate plan
With an estate plan, you can reduce the potential for family disputes and legal battles; avoid handing heirs a lengthy and costly probate process; ensure that more of your assets go to your loved ones rather than the government; and designate who should care for minor children, your spouse or other loved ones.
A well-developed estate plan documents your wishes clearly and accounts for all your assets and situations that may arise. That’s why, in most cases, you will need an attorney to write your estate plan and file the necessary paperwork with your state.
However, you can get started on your own by either completing or revising the beneficiary designation form on file with the retirement plan.
Start building your estate plan
Log in to your Nationwide Retirement Plan account at nrsforu.com to:
- Make sure that your beneficiary designations are up to date
- Learn more by registering for our next “Leaving a Legacy” webinar
Jun 26, 2025 | AOC Business Partner
Sponsored content contributed by AOC Business Partner: Covenant Global
At Covenant Global, we know how hard local governments work to serve their communities — often with limited resources and growing demands. That’s why we’re sharing simple and practical ways to strengthen your cybersecurity without adding complexity or cost.
Why This Matters Right Now
Just last week, a phishing email disguised as a trusted communication began circulating among Oregon municipalities. The message urged recipients to “verify their information within 24 hours” or risk losing access —complete with an official-looking link. These kinds of emails are designed to create panic, trick users into clicking, and harvest sensitive information. While no data was compromised in this instance, it’s a timely reminder: our public institutions are increasingly being targeted, and social engineering is one of the most common attack methods used. These threats don’t just happen elsewhere — they’re happening here, now.
A Common (and Costly) Scenario
Imagine this: A hacker scans your county’s staff directory and sees the email for “Deputy Bill Smith.” They call your outsourced IT provider and say:
“Hi, IT — this is Deputy Bill Smith. I just locked my account by trying to log in too many times, and my cell phone was damaged at a traffic accident scene. I need to have my account unlocked and my password changed. Would you send the password to my wife’s cell phone, 503-123-4567 [hacker’s number], so I can log into my laptop? My email address is bsmith@ci.anytown.or.us. Thanks for your help.”
Since the hacker knows the email address (used to log into the work account), the user’s name, and role/title, it could be very easy to fool outsourced IT into resetting the account — giving the hacker full access.
3 Simple Fixes You Can Make This Week
- Use Email Aliases for Public Contact Info
Rather than listing staff login emails such as bsmith@ci.anytown.or.us or jdoe@co.countyname.or.us, create aliases like CityRecorder@ci.anytown.or.us or ClerkOffice@co.countyname.or.us.
Aliases are free to create, simple to manage, and keep staff login details private — making it harder for attackers to impersonate your team.
- Turn On Windows Hello or Similar Facial Recognition
Use built-in security features like Microsoft’s Windows Hello, Apple Face ID, or Google’s facial recognition to link access to the person—not just a password. These tools reduce the need for password resets and make unauthorized access more difficult, even if someone manages to trick IT support.
- Require Microsoft Authenticator or Another Trusted App
Authentication apps like Microsoft Authenticator (or similar tools from Google and Apple) verify a user’s identity through a second device. Even if a hacker knows the password, they won’t gain access without that second layer. Microsoft reports this step alone can prevent up to 90% of attacks.
What To Do If You Suspect a Phish
Cyberattacks often start with a single click. Make sure your staff knows what to do:
- Do not click on suspicious links or attachments.
- Report the email to your IT provider immediately.
- Verify any unusual requests for information through official channels.
- Educate staff to look for urgent language, threats, or unfamiliar senders.
If a phishing email does get through, a fast and informed response can prevent further damage.
Let’s Make It Easier to Stay Secure
These are small changes that make a big difference. At Covenant, we work alongside Oregon’s small and mid-sized municipalities and counties to improve security with practical, affordable tools — often with support from Microsoft-funded programs like Fortify.
And we’re here to help.
For more information about cybersecurity, please contact Covenant Global by emailing Tellmemore@covenant.global or visit our website at http://covenant.global/services/fortify.
By: Shel Philips, PMP, Chief Security/Compliance Officer and COO, Covenant Global
May 30, 2025 | AOC Business Partner
Sponsored content contributed by AOC Business Partner: Transportation and Growth Management Program (TGM)
Oregon is growing—and with that growth comes a powerful opportunity for local governments and communities to shape a more connected, sustainable, and vibrant future. The 2025 Transportation and Growth Management (TGM) Planning Grant application period is officially open, and your community could be one of the next to lead the way in creating thoughtful, inclusive plans for land use and transportation.
Offered through a partnership between the Oregon Department of Transportation (ODOT) and the Department of Land Conservation and Development (DLCD), the TGM program provides funding to help cities, counties, Tribal governments, councils of government, and select special districts plan for livable communities that meet today’s needs while preparing for tomorrow’s challenges.
With approximately $2.5 million available this year, grants typically range between $150,000 and $300,000. Local match contributions are required and may include cash, staff time, direct expenses, or monetized volunteer hours.
Projects must fall under one of two categories:
- Category 1: Transportation System Planning
This includes full or updated Transportation System Plans (TSPs), refinement studies, individual elements such as pedestrian, bicycle, or transit plans, and Safe Routes to School infrastructure plans.
- Category 2: Integrated Land Use and Transportation Planning
Support is available for area plans, downtown plans, and concept plans for areas expanding into urban growth boundaries.
The application deadline is July 31, 2025, and award notifications will be mailed out in September 2025. All application materials, eligibility requirements, and resources can be found on the TGM Planning Grants webpage.
To help applicants navigate the process, the TGM team will host a live informational webinar on June 10, 2025, from 10:30 a.m. to noon via Microsoft Teams. The session will cover updates to the application, how to complete the online form, and common mistakes to avoid. Registration is required to attend.
TGM grants are more than just funding—they’re investments in the vision and values of Oregon communities. Whether you’re aiming to increase mobility, strengthen neighborhood centers, or create safer, more accessible streets, this is your chance to move your plans from concept to action.
For more information or assistance, contact Virginia Elandt at 503-949-1655 or Bill Holmstrom at 971-375-5975.
Oregon’s future is being planned today. Will your community take the lead?
Photo credit: Kathy Kleczek
May 30, 2025 | AOC Business Partner
Sponsored content contributed by AOC Business Partner: Nationwide
Once you have decided how much money to contribute to your Nationwide account each payday, your next decision involves where that money goes.
Retirement plan participants typically decide which asset classes and what percentage of contributions should go into each through a process called asset allocation. There are four major asset classes — stocks, bonds, cash and cash equivalents, and alternatives — each with a different risk and return profile. Generally, the greater the potential risk, the greater the potential return.
Your asset allocation strategy should reflect your financial situation and goals. To create your strategy, you should consider your:
- Financial goals — How well your retirement budget meets your goals may depend on the income you can generate from these investments
- Time horizon — The period between now and when you will begin to convert your investments into income, usually your retirement date
- Risk tolerance — Your comfort level with the possibility of investment loss
Many asset allocation strategies incorporate diversification as a key tactic. Diversification is the process of spreading money across several asset classes and, as your account grows, across several assets in each class. By investing in different asset classes, you reduce the risk of overall investment loss. The theory is, if one asset class underperforms, others may perform better, helping to stabilize returns. Diversification within an asset class helps reduce the risk of loss from a single underperforming fund in that class.
A well-developed asset allocation strategy should adapt as your financial needs and risk tolerance change, helping ensure that your portfolio remains aligned with your goals. You can help accomplish this by committing to regularly reviewing and, when necessary, rebalancing the investments in your Nationwide Supplemental Retirement Plan account.
For assistance in understanding asset allocation and how to use it as an investment strategy, contact your Retirement Specialist. To review or revise your asset allocation, log in to your retirement plan account.
