Featured

Information Security: Your Peace of Mind is Our Responsibility

Protecting the integrity of customer data and ensuring its reliability has always been in our DNA. In the constantly changing landscape of cyber threats, organizations need a robust set of processes and specialized individuals to ensure that new risks are monitored, and systems are adapted accordingly.

To that end, we are proud to announce that Marketing Systems Group recently achieved ISO 27001 certifications. ISO 27001 is an international standard that details requirements for establishing, maintaining, and updating an information security management system (ISMS).

This standard requires systematic examination of information security risks, design and implementation of controls and risk treatments, as well as adoption of a management process to continuously meet ongoing security needs.

How Do We Implement This?

As we see it, information security has two parts that must be executed in tandem:

  1. Implementing information protection
  2. Monitor the implementation and improve as new threats surface  

Implementing security controls around information is a lot like measures we take to physically secure our home and family.

You Would Do the Following:

  • You would look for a home in a nice neighborhood.
  • Keep an eye out and control your visitors and what they do in your home. In essence, who plays in the sandbox with our kids and what do they play?
  • You would install a home monitoring system so that you are made aware of any threats.
  • You would educate yourself and your kids on staying safe, communicating their activities, and set rules on what is allowed and what is not.
  •  You would create a “Plan B” that will allow you to find a safe way out in case of an emergency.

We follow a similar model when it comes to protecting information:

  • A nice neighborhood – We ensure that our data resides in data centers that have proper security controls in place.
  • Who plays in the sandbox – We ensure that all vendors and partners, in specific the ones who deal with our data have similar controls in place by conducting risk analysis with them on regular intervals. We also ensure that proper access controls are in place.
  • Monitoring – All our environments are monitored 24/7 and we have dedicated and trained staff in charge of security and threat monitoring.
  • Continuous education – We provide continuous training to all our staff members on information security and risks. We also conduct simulated threat assessments to understand preparedness by our staff members.
  • Plan B – We develop disaster and business continuity plans that account for how we would recover and communicate with stakeholders to get back on our feet to continue providing services to our customers.

4 Steps for Continuous Improvement (PDCA):

  1. Plan – As part of our operating procedure, we retrospect problems and collect useful information to evaluate security risk and root cause. We then define policies and procedures that can be used to address root causes of problems. Next, we develop methods to establish continuous improvements to information security management capabilities.
  2. Do – We implement the developed security policies and procedures based on best practices.
  3. Check – We monitor effectiveness of ISMS policies and controls and evaluate tangible outcomes as well as behavioral aspects associated with the ISM processes.
  4. Act – We continuously improve by means of documenting results, sharing knowledge, and using feedback loops to address future iterations of the PCDA model implementation of policies and controls.

Certified, Authorized, and Compliant

SOC 2 Type II Certification – Our cloud data centers are SOC 2 Type II certified for the trust principles of Security, Availability, and Confidentiality.

ISO 27001Certifications – Marketing Systems Group achieved ISO 27001 certifications. For more information about ISO 27001, check out the ISO website.

All certificates and reports can be provided upon request.

Featured

Defining Small Area Geographies with Radius Sampling

In this blog we look at different ways to define small area geographies. How can we define a trade area or location using radius sampling (defining a geography around a particular point at different size ranges)? It sounds simple enough. You pick a point and draw a circle around the location. Done, right? Not exactly. The issue is how you identify geography within the circle. How precisely can we get at those addresses?

You can look at census blocks or block groups, or you can look at zip codes. It all depends on how large the radius is. Typically, we use census blocks for 5, 8, and 10 mile diameters, and because the blocks tend to fit well around the edges, we only need to do some minor carving.

With smaller radii, it becomes more of a challenge, though. Census blocks or block groups tend to fall way out of that range, or we get under coverage because not enough of the blocks or block groups fit inside the circle.

In episode 7 of our Coffee Quip video series, subject matter experts David Malarek (Senior Vice President, Sampling & Database Services) and Dennis Dalbey (Manager, Geodemographic Services) demonstrate the two basic ways to define radius geography using census blocks within a 10-mile radius—area inclusion using polygons and block centroids.

For example, we can start with a 10-mile radius around a point. Then we overlay census blocks (or block groups). On the overlay all block groups that intersect or have some relationship to the 10-mile radius can be seen. Where the color overlay falls outside the radius, we can decide which block groups to keep in or out of the sample frame.

The Polygonal Approach

By using polygon geometry, we can apply area inclusion. We can determine or make a cut on the percentage of the polygon area within the radii. For instance, any block group where the geographic area is at least 50% or more within the radius can be selected. When this is mapped, you will find holes along the edges of the circle where the geography once existed but was cut out because the inclusion was under 50%. Note that no matter how you carve the fringe, there will always be some overstatement of the sample frame or some under coverage depending on how well the block group geography fits the radius.

The Block Centroid Approach

Another way to do this is to use the center point of a polygon to assign geography to a radius. It’s a different type of geometry being put to use. Instead of using polygons where we’ll make an inclusion, we are actually using what’s considered the center of the polygon—the census block centroid. This method will allow us to select blocks that are theoretically 50 percent or more within the radii without having to apply an inclusion like we did with the polygon earlier. It is a more efficient way of doing it, but keep in mind that we are making a 50 percent cut across the board. You will encounter tradeoffs such as introducing under coverage or over coverage here, too.

One of the benefits of using the block centroid is that we can vary the distance. Let’s say we are not really sure whether the 10-mile radius is going to meet your quota. We may want to overstate the geography at 20 miles. With block centroid we can apply the distance and go from 10 to 15 to 20 miles until we meet the population or household quota. Note that this can be applied to polygons as well, but it is much easier to do with the block centroid.

The Address Level Approach

Yet another way to do this is to plot all the known addresses that fall within the blocks or block groups touching the circle and exclude any address that falls outside the circle. This is the most accurate way of getting accurate household counts and eliminates under and over coverage. It’s a two-step process and a more involved methodology but it is also the most accurate. One downside to this approach is demographic data is only available at some larger aggregation of geography such as block group and not by individual addresses.

Dave and Dennis compare the polygon and block centroid methods, and why they sometimes yield different results. Sometimes we actually need to plot ABS address locations in the blocks within the radius and remove the ones outside the radius, so we get a better fit for the overall target population. This is really the best methodology in terms of making sure that households are completely within a radius without having to worry so much about the regular geography, where part of it is in and part out.

Find more details and visualizations of these methods, in our Coffee Quips #7 video. It is the first in a series of geodemographic coffee quips. For additional information on our geodemographic services click here.