Latest / Leaders In Payments / Before the Transaction: Kathryn McCall, Chief Legal & Compliance Officer at Trustly | Episode 260

Transcript

Before the Transaction: Kathryn McCall, Chief Legal & Compliance Officer at Trustly | Episode 260 · Leaders In Payments

• 0:01
  Greg Myers: Hi, catherine, and welcome to this episode of the Leaders in Payments podcast, where we're looking at all of the things that happen before a transaction, or, put another way, before money ever moves, and, of course, merchants and vendors and payments companies.
• 0:14
  Greg Myers: Being compliant and keeping data secure are two of those things, so that's what we're going to talk about today, so welcome to the show.
• 0:22
  Kathryn McCall: Thank you very much, Greg.
• 0:23
  Kathryn McCall: I am happy to be here.
• 0:25
  Greg Myers: Great, so tell our audience a little bit about yourself, maybe a little personal and professional background.
• 0:29
  Greg Myers: Absolutely.
• 0:32
  Kathryn McCall: So my name is Catherine McCall.
• 0:33
  Kathryn McCall: I am the Chief Legal and Compliance Officer for Trustly Inc.
• 0:37
  Kathryn McCall: I've been with Trustly since January of 2018.
• 0:40
  Kathryn McCall: I first came in as outside counsel and then I moved in-house in December of 2019.
• 0:47
  Kathryn McCall: I live in San Francisco and I have almost 25 years of a combined experience in corporate governance, debt and equity financings, m&a and then, of course, also payments.
• 0:58
  Kathryn McCall: Here at Trustly, I'm responsible for all legal, regulatory compliance and enterprise risk matters in the Americas.
• 1:07
  Kathryn McCall: I advise our executive team and the board of directors about compliance, regulations, rules, how to comply with the law and stay on the right side of the law.
• 1:20
  Greg Myers: Okay, great.
• 1:20
  Greg Myers: So tell us what Trustly does.
• 1:23
  Greg Myers: Give us the 50,000 foot overview of Trustly.
• 1:27
  Kathryn McCall: Sure so.
• 1:28
  Kathryn McCall: Trustly is a global leader in open banking payments.
• 1:31
  Kathryn McCall: Another way to phrase that is pay by bank.
• 1:34
  Kathryn McCall: It's an alternative to making payments to merchants by your credit card.
• 1:39
  Kathryn McCall: Our solution helps merchants process consumer payments at a cost of up to 50% below those credit cards.
• 1:47
  Kathryn McCall: We offer guaranteed payments to provide instant access to funds for the merchant and also to help eliminate charge backs, which are expensive for consumers and for merchants.
• 1:58
  Kathryn McCall: Our UX and risk engine delivers superior approval rates, which makes merchants and consumers very happy.
• 2:06
  Kathryn McCall: We also help merchants with instant payouts and a full suite of open banking data products.
• 2:12
  Kathryn McCall: We currently focus on enterprise merchants across multiple verticals, like e-commerce, financial services, billers and gaming.
• 2:22
  Kathryn McCall: We work with companies like AT&T, dell, coinbase, verizon, lyft, t-mobile, ebay, western Union, fanduel, draftkings and GoFundMe and others.
• 2:36
  Greg Myers: Okay.
• 2:36
  Greg Myers: Well, let's dive into the topic at hand, which is security and compliance.
• 2:41
  Greg Myers: So can you give us the high level 50,000 foot level of what security and compliance is all about?
• 2:49
  Kathryn McCall: At the highest level.
• 2:50
  Kathryn McCall: I would say that security is fundamentally about mitigating risk through strong governance and leadership, proper risk management protocols and promoting proper security best practices throughout the organization.
• 3:05
  Kathryn McCall: It's a proactive and preventive measures, which are the highlight of strong security against malicious actors.
• 3:15
  Kathryn McCall: It's multifaceted, so mainly it's about ensuring that an organization adheres to all relevant laws, regulations and industry standards, and also that it keeps abreast of the latest fraud acts that are going on, the latest fraud attacks that have happened, what bad actors are doing, and it's really about protecting the integrity of our financial networks.
• 3:45
  Greg Myers: Okay, and so there's a lot of players or companies sort of to help our industry stay safe and secure.
• 3:53
  Greg Myers: So can you talk about some of those, or at least maybe some of the functions that you perform, and kind of, how does it all, how do all these players work together to keep us safe?
• 4:04
  Kathryn McCall: Yeah, there's a lot that goes into keeping our financial network safe and secure.
• 4:09
  Kathryn McCall: Yeah, I would say there's a lot of rules and regulations that go into it so, such as the Bank Secrecy Act and the Financial Crimes Enforcement Network, which then enforces the Bank Secrecy Act.
• 4:23
  Kathryn McCall: We've also got a lot of players and vendors involved in the industry, such as Signified Alloy, verif and Quantexa, that help fight against friendly fraud conduct.
• 4:37
  Kathryn McCall: Know your customer checks provide quick and accurate identity verification.
• 4:42
  Kathryn McCall: Also tools to check on.
• 4:45
  Kathryn McCall: You know who are the people that say if we onboard a merchant onto our systems, who are the people that control that merchant?
• 4:54
  Kathryn McCall: You know you can look at the high level and say, oh, they're a corporation, they're founded in Delaware, but who's pulling the strings behind that network?
• 5:01
  Kathryn McCall: Where are they located?
• 5:03
  Kathryn McCall: Where are there sources of funds that come in?
• 5:05
  Kathryn McCall: So you can follow up and find out a lot of that information through vendors, through regulators and then also just through public searches, searching and pulling data and information, such as information from the Secretary of State about the corporation.
• 5:24
  Kathryn McCall: And then all of these tools all come together and you have to use and pull different sources for different types of activities in order to control and protect your financial network and also others.
• 5:42
  Kathryn McCall: So each company, I would say, plays a really unique role in mitigating fraud and risk, but they're all an integral part of our industry, by collectively creating an environment that enhances security and compliance.
• 5:59
  Greg Myers: Yeah, you mentioned something when you were sort of given your description earlier about how you advise senior leaders, leadership executives, board of directors.
• 6:10
  Greg Myers: Is there any one thing within this big realm of security and compliance that sort of always gets talked about, or is it really just, catherine, just keep us safe?
• 6:23
  Greg Myers: I mean, is there anything that sort of bubbles to the top?
• 6:29
  Kathryn McCall: There's a lot of just, we're safe, right, we're okay, right, we're in compliance with the laws, right.
• 6:34
  Kathryn McCall: But there's also a lot of concern, you know, driven by our board of directors and our executive team, about you know.
• 6:42
  Kathryn McCall: Are we protecting financial networks as a whole?
• 6:45
  Kathryn McCall: Are we?
• 6:46
  Kathryn McCall: We don't want to be a loose link or a weak link in the chain.
• 6:50
  Kathryn McCall: So there's a lot of emphasis on looking at, you know, the merchants that we sell our services to and that we onboard to our platform.
• 7:00
  Kathryn McCall: Who are these merchants?
• 7:01
  Kathryn McCall: Have we performed all the know, your customer or KYC checks on them?
• 7:07
  Kathryn McCall: Do we really know and understand who's in control of that organization and who funds that organization?
• 7:16
  Kathryn McCall: Where's their money coming from?
• 7:18
  Kathryn McCall: Why are they using our services?
• 7:20
  Kathryn McCall: How are they using our services?
• 7:22
  Kathryn McCall: And it's amazing to me just how granular and a lot of respects our board of directors can be about, you know, checking those merchants and refreshing the information that we get on our merchants.
• 7:34
  Kathryn McCall: And if we have merchants who are, say, you know, it's the last thing that anybody wants to do, which is refresh that due diligence information, provide you with all the information that we provided you in the past, but now you want it again.
• 7:48
  Kathryn McCall: Now you want us to fill out these questions about who we are and provide, you know, copies of our IDs and all of those things, and it's really the last thing any company wants to do.
• 8:00
  Kathryn McCall: But it's amazing to me how our board of directors is.
• 8:03
  Kathryn McCall: You know how many merchants are late in fulfilling that request.
• 8:07
  Kathryn McCall: How late are they?
• 8:08
  Kathryn McCall: Should we turn off?
• 8:10
  Kathryn McCall: And you know, we know we won't get the revenue from them, but maybe we need to turn them off and not allow them to transact over our systems in order to protect Again, it's all about protecting the integrity of the financial systems.
• 8:24
  Kathryn McCall: You know what's the reason that they're late.
• 8:25
  Kathryn McCall: Do they have a good reason?
• 8:26
  Kathryn McCall: Or is it, you know, something like we just don't want to, or well, maybe we don't really want to disclose that, to trust me.
• 8:34
  Kathryn McCall: So if we delay long enough, maybe the question will just go away.
• 8:37
  Kathryn McCall: And, believe me, the question will not go away and our board of directors will follow up.
• 8:45
  Greg Myers: Yeah, that's interesting.
• 8:46
  Greg Myers: You know, with stuff that's gone on in this industry, you know, I mean it's always been here and it always will.
• 8:53
  Greg Myers: But you know, a few bad actors can affect all of us, right, and there's been a few things recently that you know, recently in the last year, that have happened that make certain segments of our industry look bad.
• 9:06
  Greg Myers: So you know, I mean, I think for most of us who've been in the industry for a while, this is kind of obvious.
• 9:12
  Greg Myers: But maybe can you talk about, like, why this data security and security in general, why is it so important?
• 9:18
  Greg Myers: And like, what are the ramifications?
• 9:20
  Greg Myers: Obviously, we know the big ramifications of, you know, being in the news and things like that, but what are the other ramifications of not having a safe and secure environment?
• 9:31
  Kathryn McCall: Sure.
• 9:31
  Kathryn McCall: So I think there's, you know, two things going on here with in terms of data security, and number one is the devastating impact it can have on an individual if their personal financial information or perfectly identifiable details get leaked.
• 9:50
  Kathryn McCall: We've broken our trust with those people and it's almost impossible to get back.
• 9:57
  Kathryn McCall: Then the other thing to look at is also the impact on our financial networks in general.
• 10:04
  Kathryn McCall: If our data security is not secure and if bad actors can get in there and can leverage information that they're able to find maybe they're able to assume a consumer's identity or steal information out of there or create some nifty new fraud conspiracy out of that data then we've compromised the integrity of the financial networks.
• 10:31
  Kathryn McCall: Again, as you mentioned, there's the loss of trust.
• 10:34
  Kathryn McCall: There's the reputational impact.
• 10:36
  Kathryn McCall: It is when that trust gets shattered and it's very public.
• 10:41
  Kathryn McCall: It's an uphill battle to win it back.
• 10:43
  Kathryn McCall: There's still that.
• 10:45
  Kathryn McCall: Weren't they the ones that I think seven or eight years ago did blah, blah, blah?
• 10:50
  Kathryn McCall: It's not only protecting consumers and protecting their identity, but also protecting the financial networks.
• 10:58
  Kathryn McCall: It's essential that you have strong security procedures at the forefront to prevent breaches like that from ever occurring, and having a strong and secure environment for data.
• 11:09
  Kathryn McCall: Having that strong and secure environment for data is really commonly expected in today's world, and failure to provide it has serious consequences on reputation.
• 11:20
  Kathryn McCall: Especially, we're dealing in the payments industry, with people's financial information and payments on very important matters payments of their mortgage, payments, on other matters that could have really harmful consequences to the individual.
• 11:38
  Greg Myers: Yeah, absolutely.
• 11:39
  Greg Myers: Well, let's turn a little bit and talk about AML.
• 11:43
  Greg Myers: Can you tell our audience what it is and what are the ramifications of not being compliant in that area?
• 11:52
  Kathryn McCall: Absolutely.
• 11:54
  Kathryn McCall: Aml is anti-money laundering.
• 11:57
  Kathryn McCall: Money laundering is trying to make illegally obtained funds look and appear legitimate in the financial systems.
• 12:07
  Kathryn McCall: When we talk about anti-money laundering or AML, we also need to talk about counter-terrorist financing or CTF.
• 12:17
  Kathryn McCall: Counter-terrorist financing is using funds to, like what it sounds like, finance terrorist activities.
• 12:29
  Kathryn McCall: Sometimes counter-terrorist financing can be almost more challenging than AML because the source of those funds could be legal.
• 12:38
  Kathryn McCall: It's just going to fund an illegal activity.
• 12:44
  Kathryn McCall: Around anti-money laundering and counter-terrorist financing, there's a lot of rules and regulations around it.
• 12:50
  Kathryn McCall: There's the Bank Secrecy Act, the USA Patriot Act, which have controls and various.
• 12:59
  Kathryn McCall: You have to have an AML compliance program in place.
• 13:03
  Kathryn McCall: If you're a financial institution or a money services business, you have to monitor your systems to look for suspicious activity, file suspicious activity reports.
• 13:13
  Kathryn McCall: You have to endeavor If you know who your customers are we've talked about that before the KYC procedures know who your customers are, know who's transacting on your systems, know what their transactions look like, so that if there's a spike of new, different activity, it may not necessarily be money laundering or terrorist financing that you should know enough about your merchants to look at it and say, for instance, we're in the gaming industry.
• 13:41
  Kathryn McCall: Oh, it's Super Bowl Sunday we had a spike in activity.
• 13:44
  Kathryn McCall: That makes sense, so that you know your customers, you know their history, you know the consumers who are transacting, so that if you see something like huh, it's a Monday in July and one of our gaming operators is experiencing a spike in activity, but there's really no big games going on and there's nothing happening.
• 14:08
  Kathryn McCall: So we need to look in that.
• 14:10
  Kathryn McCall: It's about having the systems and the alerts and the processes in place, that you get those alerts and that you can look into those matters and say, hey, we've got a fraud ring going on or this is something different.
• 14:23
  Kathryn McCall: We need to shut things down or slow the pace of transactions down while we look into this matter, make sure that our services aren't being used for money laundering, aren't being used for terrorist financing.
• 14:38
  Kathryn McCall: And then, of course, you know there's the self-interested matter, which is, if we breach the law, we could be subject to sanctions, fines, negative, you know, reputational impacts.
• 14:49
  Kathryn McCall: It's better up and it's really.
• 14:51
  Kathryn McCall: You know, as we mentioned before about data security, it's really tough to reestablish your reputation after you know something happens, becomes public.
• 15:00
  Kathryn McCall: You look unprofessional and you also look, you know, like you're not being diligent to protect criminal activity in the industry.
• 15:09
  Greg Myers: Yeah, and it's just fascinating to me that payments companies, financial services companies have all of these rules and regulations and government entities that they have to deal with and we can still onboard merchants pretty fast and we can do transactions in seconds.
• 15:26
  Greg Myers: And you know, that to me is fascinating.
• 15:29
  Greg Myers: And I'm just curious and you don't have to answer it from a trustee perspective, but from like an industry or your knowledge perspective, like how many, how many bad things are happening or getting caught, like we never hear about them?
• 15:42
  Greg Myers: But you have all these processes in place and you mentioned it slow down transactions or turn people off, or I mean, does that go on a lot more than we really realize?
• 15:52
  Kathryn McCall: It does, it really does.
• 15:54
  Kathryn McCall: And then there's a lot of times and this came up recently where you know we noticed an attack, you know within our systems, and shut it down, looked at it and it analyzed it and then one of our executives was talking to you know, another friendly executive at another company is like oh, you got hit by the blah blah blah.
• 16:17
  Kathryn McCall: Yeah, it's like.
• 16:18
  Kathryn McCall: Oh, so you know it's.
• 16:20
  Kathryn McCall: It's like Okay, they hit that company, they hit this company.
• 16:24
  Kathryn McCall: You know they, they go around and they hit a lot of other companies, sometimes with the same schemes, sometimes with different schemes, which is why I think it's really important that the companies and the players in this industry talk to each other and, you know, bring these things up with each other.
• 16:43
  Kathryn McCall: Hey, this happened to us over the weekend.
• 16:45
  Kathryn McCall: You know you might want to look or blah, blah, blah, or here's how we protected against it, because it really does happen a lot more often than I think the average consumer would think.
• 16:58
  Kathryn McCall: There's also been times, you know, like our risk team is really great at analyzing and they know when we turn a merchant on, they just know like we're turning something new on and the fraudsters are out there waiting to bounce.
• 17:12
  Kathryn McCall: So they'll turn it on real slow at first, so slow rate of transactions.
• 17:17
  Kathryn McCall: They'll gradually ramp it up.
• 17:19
  Kathryn McCall: If they notice anything going on, they'll bring the pace down.
• 17:23
  Kathryn McCall: They'll ramp it back up and really analyze what is going on so that we get a feel for what the pace of transactions are with that merchant.
• 17:33
  Kathryn McCall: What the amounts are.
• 17:34
  Kathryn McCall: Are the amounts?
• 17:35
  Kathryn McCall: You will talk to merchants like what are your average dollar amounts of the payment transaction?
• 17:40
  Kathryn McCall: So then you know when we look at like, well, this merchant told us that their average transaction is 30 bucks but we're seeing $300.
• 17:47
  Kathryn McCall: So that's different.
• 17:50
  Kathryn McCall: So let's, you know, slow that down.
• 17:51
  Kathryn McCall: Let's talk to the merchant and see what's going on here.
• 17:55
  Kathryn McCall: But I do, it does happen a lot more often than I think people are aware of and you know I'm the same way.
• 18:03
  Kathryn McCall: Like you know, all these systems we have and multi-factor identification and all of these things I get frustrated with and I have to remember like this is for my protection.
• 18:12
  Kathryn McCall: There's a reason that all of these things are out there and when I look at something else or I get hit with a different type of identity verification thing when I'm trying to make a payment or do something of, I always think, aha, somebody got hit with something, so they had to change their risk rules, they had to change their monitoring system and now, you know, something else is coming up.
• 18:39
  Kathryn McCall: So it's a lot of push and pull I know we're getting into a bit of a different topic, but a push and pull between greasing the wheels for the consumer and the merchant but then also putting enough you know, brakes and controls in place so that we can halt stuff or, you know, stop things midstream to protect the consumer and the financial networks.
• 19:02
  Greg Myers: Yeah, well, what do you think are some of the biggest challenges that companies face when it comes to being secure and compliant?
• 19:10
  Kathryn McCall: Oh, I think it's just.
• 19:11
  Kathryn McCall: You know, nothing is ever set in stone.
• 19:13
  Kathryn McCall: You know companies.
• 19:15
  Kathryn McCall: There's some companies that think, oh, you know, we're just going to set our compliance and establish some security standards and we'll just set it and we'll forget it and move on.
• 19:25
  Kathryn McCall: But it's really the opposite is true.
• 19:28
  Kathryn McCall: You know, regulations in the industry are constantly changing and evolving.
• 19:33
  Kathryn McCall: There's new innovations and developments that come out and can cause a change in rules and regulations.
• 19:39
  Kathryn McCall: Some of these new innovations and developments open up In so many ways it's Hololive's major lesson for an open-source会 or something purely unintentionally, but open up new opportunities for bad actors in the industry to come in and say, aha, there's a hole, there's something I can exploit in that.
• 19:54
  Kathryn McCall: So the landscape is constantly changing.
• 19:57
  Kathryn McCall: The rules and regulations are constantly changing and evolving.
• 20:00
  Kathryn McCall: The landscape of threats is always evolving.
• 20:04
  Kathryn McCall: Bad actors are constantly devising new schemes, constantly thinking of ways to overcome safeguards.
• 20:11
  Kathryn McCall: They're ingenious in coming up with ways to circumvent rules, regulations and controls that are in place.
• 20:20
  Kathryn McCall: So it's an industry.
• 20:22
  Kathryn McCall: I think some people think, ah, it's theory.
• 20:24
  Kathryn McCall: Compliance, that's a boring industry.
• 20:27
  Kathryn McCall: Whatever, it's constantly evolving and you've got to constantly stay one step ahead of the bad actors.
• 20:35
  Kathryn McCall: You've got to constantly monitor all of your systems and controls in place to make sure that you're being compliant with the tapestry of rules and regulations that are out there.
• 20:45
  Kathryn McCall: And in the United States we've, of course, got the federal rules and regulations.
• 20:51
  Kathryn McCall: Then we have 50 states that all have their own rules and regulations, so it's just constantly evolving and changing and nothing is really set in stone.
• 21:02
  Kathryn McCall: So you really have to be adaptable and have a robust plan to meet ever-changing threats and needs.
• 21:14
  Greg Myers: Well, what do you think the future looks like?
• 21:16
  Greg Myers: Maybe thinking out five, seven years from now?
• 21:19
  Greg Myers: How do things look different?
• 21:22
  Kathryn McCall: I think we're moving in the area of, unfortunately or forcibly, more regulation and not less.
• 21:29
  Kathryn McCall: I know that there's a lot of governmental agencies that are looking at open banking payments, pay by bank, and coming up with ways to govern the industry and looking at the different ways that this industry can be exploited and thinking about the controls that they need to have in place.
• 21:52
  Kathryn McCall: I think also the bad actors out there are going to become more sophisticated as technology continues to evolve.
• 22:02
  Kathryn McCall: They're going to come up with ways to overcome that technology or exploit that technology.
• 22:07
  Kathryn McCall: So security and compliance are going to become increasingly important and at the same time, as I mentioned previously, regulation and oversight will follow suit.
• 22:19
  Kathryn McCall: As the bad actors get more sophisticated, the rules and regulations follow.
• 22:24
  Kathryn McCall: So I think it's imperative for companies to create and foster a culture of compliance within their organizations.
• 22:32
  Kathryn McCall: Make sure everybody knows and understands that.
• 22:36
  Kathryn McCall: Even maybe you work in marketing or somewhere where you just think, oh, money laundering, fraud, all those things security, compliance is completely unrelated to me.
• 22:48
  Kathryn McCall: But you never know and you might know something that you notice hey, we're onboarding such and such a merchant, but I was at a trade show last week and heard somebody say that they're not a very good actor in the space.
• 23:01
  Kathryn McCall: So it's about making sure that your organization as a whole has a culture of compliance so that in five to seven years and we've got more sophisticated bad actors, more rules and regulations that everybody is aware that it's on everybody's shoulders.
• 23:18
  Kathryn McCall: To look at it, I think the payments industry in general is going to continue to accelerate and grow, with third parties coming in shaking up the competition, and all of us are going to be faced with these malicious actors and legal roadblocks or I wouldn't say roadblocks, maybe just more controls and more challenges to make sure that you implement controls that are required.
• 23:44
  Kathryn McCall: So, yeah, I think it's just going to become more regulated and more oversight.
• 23:54
  Greg Myers: Okay, well, let's circle back to Trusley, and you've talked about a lot of these things that have to happen, and can you tell us how do you manage all of your compliance programs, with all of the technology and the people and the tools?
• 24:09
  Greg Myers: So how do you manage all of that?
• 24:12
  Kathryn McCall: Yeah, so I'm the lucky person that compliance falls within my remit, so I get to manage all of that.
• 24:21
  Kathryn McCall: We're constantly building and evolving our compliance team and also the tools that we use and the controls that we put in place.
• 24:34
  Kathryn McCall: We have a strong central team of compliance gurus, it security professionals, grc that's governance, risk and compliance experts and legal counsel, regulatory experts, etc.
• 24:49
  Kathryn McCall: That are constantly monitoring, updating and improving our various compliance programs.
• 24:56
  Kathryn McCall: We also have training programs for our employees.
• 25:00
  Kathryn McCall: Our employees just finished our anti-money laundering and counter-terrorist financing training in the month of August, which I know they were all very excited to participate in and complete.
• 25:12
  Kathryn McCall: We make sure that we have the best enterprise risk management that we can.
• 25:17
  Kathryn McCall: We're constantly looking at what are the risks coming into our enterprise, what are the risks in AML, what are the risks in CTF, what are the risks of fraud, etc.
• 25:28
  Kathryn McCall: What new risks have come up, what have we heard from others?
• 25:34
  Kathryn McCall: And just making sure that nothing is really set in stone and that we remain adaptive and nimble and that we talk to each other and we talk to other people in the industry.
• 25:46
  Kathryn McCall: That we also like when I say we talk to each other, that we talk with our risk team.
• 25:52
  Kathryn McCall: What are you guys seeing?
• 25:53
  Kathryn McCall: Are the risks that we're managing and watching for?
• 25:57
  Kathryn McCall: Are they adequately capturing the risks that you're monitoring and protecting us against with your rules and regulations?
• 26:04
  Kathryn McCall: What are the new regulations that are coming down?
• 26:08
  Kathryn McCall: What do we need to do to change our systems to comply with those regulations?
• 26:12
  Kathryn McCall: We regularly consult with external resources, such as outside legal counsel.
• 26:17
  Kathryn McCall: We talk to regulators, we talk to cybersecurity experts and we have auditors come in and audit our systems and let us know if they see any deficiencies or any weaknesses, so that we can close those gaps and make sure that we don't have any weaknesses in our systems.
• 26:37
  Kathryn McCall: It's a constant being nimble and adaptive and aware.
• 26:46
  Greg Myers: Okay, well, katherine, we've covered a lot of ground so far.
• 26:50
  Greg Myers: Is there anything else you wanted to go over before we wrap up the show?
• 26:56
  Kathryn McCall: Yeah, I would just say for everybody in this industry.
• 26:58
  Kathryn McCall: It's really on all of us to make sure that we protect the integrity of this financial industry and maintain the trust of the consumers in the industry, that we let the consumers be completely unaware of all these threats and pay their mortgage on the fly from their phone and not think twice about it and have that whole transaction go through completely seamlessly and be on two or three seconds unaware of all of the various checks and controls and risk rules and monitoring that that transaction goes through before completion.
• 27:38
  Kathryn McCall: And, Greg, I just want to say I'm really grateful for this opportunity to share my insights and give deeper insight into how much effort trustly puts into creating a secure and compliant environment for its employees and for the financial networks.
• 27:54
  Greg Myers: Well, I think, as someone who's been in this industry for a long time too, you kind of grow to take this stuff for granted.
• 28:01
  Greg Myers: And it is such a huge part and I think you said it so well that we all play a role in keeping it safe and that safety and security is important for all of us.
• 28:13
  Greg Myers: Any one company that does something bad or wrong or whatever it hurts the entire industry from a lot of different perspectives.
• 28:21
  Greg Myers: So you've had some great insights today.
• 28:23
  Greg Myers: I really appreciate it.
• 28:24
  Greg Myers: I know you're very busy, so I wanted to thank you obviously for being on the show and I appreciate the time and the insights.
• 28:33
  Kathryn McCall: Absolutely.
• 28:33
  Kathryn McCall: Thank you so much, Greg.
• 28:34
  Kathryn McCall: I appreciate being here.
• 28:37
  Greg Myers: OK, and to all you listeners out there, I thank you for your time as well, and until the next story.