The week started out in Chicago to attend the Hospitality Technology Strategic Initiative Council (HTSIC) meeting. The HTSIC is a collaboration of hospitality associations to address the technology needs of our industry. Some of the associations represented are: Hospitality Sales & Marketing Association International (HSMAI), Hospitality Asset Management Association (HAMA), OpenTravel (OT), Hotel Technology Next Generation (HTNG), Convention Industry Council (CIC), Hotel Electronic Distribution Network Association (HEDNA), Hospitality Information Technology Association (HITA), American Hotel and Lodging Association (AH&LA) and of course Hospitality Financial and Technology Professionals (HFTP). As you can see, this is a broad-reaching group and represents most every area of hospitality. Technology issues affect every area of our business, so it makes since that we come together to address them instead of trying to do it individually. This goal is stated in the council's mission statement.
The HTSIC, composed of senior-level, industry leaders and related hospitality/travel associations, discusses pressing industry needs as they relate to hospitality technology. The council works to identify industry initiatives, find the best possible home for these initiatives and reduce duplication efforts.
This was my first exposure to this council as the senior elected officer of our association. I was quite impressed with the cooperation among the different associations. By leveraging the broad-reach as well as the power of all these varied associations, I feel that we will be able to make some positive impact.
The council's discussion was centered on our industry being targeted by computer hackers at an increasing rate. We've all seen in the news where some of our industry colleagues have experienced data breaches over the past few years. None of us wants to see those news reports to increase. The way to help do that is to make our systems harder to penetrate and the criminals will pass us by. The criminal's mind is to find easy, lucrative targets. They are not interested in spending a lot of time trying to get in. So, if we can make it more difficult, then maybe they'll move on.
Payment Card Industry (PCI) compliance is something that all of us have been working with for many years now and it is extremely important. PCI compliance is not the responsibility of our software vendors, it is our responsibility. PCI centers around security policies and procedures that are at each property. There are many aspects to PCI compliance, but we've identified three areas within the PCI framework that will help close the door on the main vunerabilites that the hackers are using to attack us. They are as follows:
1. Generic Logons. So many systems have a generic logon to access the system. It could be a default logon at the front desk, an HVAC PC that's in an engineering closet, or an interface PC. All these generic logons should be removed or at least have a password that changes every 90 days placed on them. Hackers are getting into systems by just logging in as one of these generic users. Every computer and server in our properties should require a password to have access, no matter how big or small your operation is.
2. Firewall Settings. The firewall is your door to the world for your network. It is designed to allow the people you want to come in and those you don't to stay out. Many organizations have too many "doors" open on your firewall. This allows the hacker to gain access into your system. Have your IT Professionals to make sure that you only have the doors open that you absolutely need and if you need a door open, it is only open to the people you allow, not just anyone.
3. Remote Access. Allowing support vendors access into our systems to help with software or hardware issues is a fact of life for us. We have so many different systems from different vendors that need to be supported. The only way they can help us most of the time it to access our systems remotely. This access can allow a hacker to also gain access. To help secure this, you need to keep that access off until you need it. It can then be turned on, your vendor can fix the problem, and then turn it back off.
Being a CIO, I realize that changing these items can cause inconvenience. But, one phrase I like to use concerning security is, "If it is convenience, then it is not secure." Hackers rely on these conveniences to do their work.
The mission of the council concerning this issue is to educate the users to implement these suggestions. You will notice that is takes zero capital money to do these things and it will take you a long way towards the security needed. I do want to point out that these are not the only things you should be doing. PCI compliance involves much more, but these are a start. Be looking for some more information and communication on these matters in the future.
The HTSIC will have a booth at HITEC, so please go by and give us your suggestions and concerns as we continue forward.


The next day after the meeting, I travelled up to Milwaukee to visit the Greater Milwaukee Chapter. I was able to spend the evening with my good friend and HFTP Global Vice-President Tom Smith at his house on the lake in Pewaukee, Wisconsin. I had to put that because I think the names of the towns and areas up there are hilarious.

I'm not making fun, they just strike me as funny. We have some weird names where I live that are also funny like "Chunky Gal Mountain."

How many of you would like to live there? Makes you wonder where the name came from.


The next evening we had the meeting with the chapter at the Harley-Davidson Museum. Now, that's a cool place for a meeting, especially for a motorcycle rider such as myself.

I do have to tell you that I don't ride a Harley. My motorcycle is a Harley-want-a-be. I'm not cool enough to own a Harley. But, it doesn't prevent me from looking at them and dreaming.

We met for an early afternoon reception at the lounge there at the museum. As I've always said, alcohol is good before I speak. Then we went into a meeting room for the presentation. The meeting room was called "Flame." So, the signs read "HFTP in Flame."

The meeting room was very nice and of course the AV cart was a tool box. Wouldn't have expected anything less. The other meeting rooms were called Bolt, Peace, and Potato. I had to ask what the "Potato" meant. All the other rooms were centered around a motorcycle, but potato I didn't get. I was told that the name came from the sound of a Harley engine when it starts. It makes the sound "po-- po-- po-- tato" when it starts.

Ok, I like riding a motorcycle, but when I start thinking it is talking to me, I need to quit.


There was a great group of about 25 in attendance. That was a good number considering they changed their normal meeting date to accommodate my travel schedule. I really appreciate the chapters doing that so I could visit.

They were a great audience and even laughed at the jokes.

See, the alcohol helped. It also didn't hurt to have Tom there to make fun of either. Sorry Tom...

After the meeting we had a great dinner down in the cafe at the museum and most everyone stayed around and talked for a long time. That shows that the chapter has a great group that has bonded. That shows great dedication and great leadership. Their current President, Mary Hoover, had done a great job in keeping the chapter motivated and I even heard them talking about their track to Chapter of the Year!!

Good luck and keep up the good work.
Chapter Officers:
- President - Mary Hoover - maryhoover@wi.rr.com
- Vice President - Kay Giese
- Treasurer - Jane Schneider
- Secretary - Karen Frank
The next morning I got up early to drive back down to Chicago to catch my flight. My flight wasn't until 11 a.m., but I left extremely early because I didn't know what to expect with traffic. I had time for a small nap when I got to the airport. No drastic travel stories this time except...

Being from North Carolina, I am just not used to toll roads. I hardly ever think about them so I'm usually not prepared for them. This is no different. I pulled up to the toll booth and all I had was a $100 bill. Of course, they can't take a bill that large. So, they had to write me up a slip. And so did the next booth.

After that one, I decided to get smart and pulled into a gas station to buy a snack and break my $100 bill. Of course, I didn't run into any more toll booths!!

So, now I'm in debt to the state of Illinois for $2.50. They spent more time in payroll and paper supplies than the $2.50 that I'm going to have to send.

Plus, I have to do it online with what I assume a credit card. Now there's exchange fees on top of that. But, don't worry. I'll pay it.

Thanks for reading!!
Until next time...
