Manchester Municipal Risk Management Authority

Member Login

Upcoming Meetings
08.19.20 Membership Committee Meeting
08.20.20 Investment Committee Meeting
08.20.20 State Pool Committee Meeting
08.20.20 MMRMA 2020 Annual Meeting - Cancelled
09.03.20 U.P. Law Enforcement Advisory Committee Meeting *CANCELLED*
09.08.20 Technology & Cyber Security Advisory Committee Meeting

What's New/Hot Topic From MMRMA to You
Announcement: MMRMA Cancels 2020 Annual Meeting
Planning efforts pivot to an extra special Annual Meeting in 2021 and other events and resources to benefit the membership.

August 2020 Risk Journal
RAP/CAP grant update. Applications welcome; next deadline is October 2. Plus virtual public meeting tips from a member and a parliamentary expert, and exploring direct supervision in jails.

June 2020 Risk Journal
Developing, Communicating Plans to Reopen During and After Pandemic; Managing Inmate Expectations a Key Component of Effective Jails

Data Breach Update: External Email Spoofing Tactics Evolve

Posted: Thursday, January 24, 2019

In today’s digital age, most people and businesses depend more and more on the internet, email, and other web- and cloud-based activities to conduct business. These tools are useful and important for organizations. Of course, they also come with potential pitfalls.

As quickly as information technology and security professionals develop protective measures against such vulnerabilities, the perpetrators develop new methods to thwart them for criminal purposes.  

For example, you may have heard that, when receiving emails, it’s important to look not only at the name of the person but also at the sender’s email address. Unfortunately, today’s phishers and hackers can “spoof” email addresses, making it look like such messages are coming from our real, trusted contacts.

Users of computers and email are encouraged to pay close attention to the email messages they receive. It is unwise to assume a message is legitimate simply because it appears to come from a trusted contact – even a person within one’s own organization, and even if the email address itself looks valid.

Email recipients are highly encouraged to contact the sender by phone or in person to verify a message’s validity if it is unexpected or if its content diverges from customary messages sent by the sender. This is especially critical if a message contains:

  • Links
  • Attachments
  • Requests for sensitive information and/or documents

MMRMA encourages members to talk to their information technology/security teams or vendors about email security, the spoofing of email addresses, and how your organization can best address this issue.

MMRMA’s Technology and Cyber Security Risk Control Advisory Committee is also working on resources for issues like these to further assist members in avoiding hacking, phishing, and other nefarious criminal activities.

We will continue to share additional information with the membership as it becomes available.


« Return to Hot Topic Page

Michigan Municipal Risk
Management Authority

14001 Merriman Road
Livonia, MI 48154

MMRMA has been a leader in municipal risk since 1980 and remains committed to meeting the ever-expanding challenges faced by its membership. MMRMA's risk control services are designed to help its members identify, prevent, and mitigate losses through on-site surveys, training, and other services. MMRMA also provides its members with premier claims and legal services, sound financial management, and essential news on the latest developments in public risk management.


site by wedü