Latest / Identity at the Center / #14 - KuppingerCole Consumer Identity World Conference Part 1

Transcript

#14 - KuppingerCole Consumer Identity World Conference Part 1 · Identity at the Center

0:06
Do you know who has access to what this is?
0:08
The identity at the center podcast?
0:10
If you're looking for identity and access management talk
0:13
you've come to the right place and now on to the show, Welcome
0:31
to the identity at the center podcasts.
0:33
I'm Jeff and that's Jim here I am.
0:36
There you are, that's where you are.
0:38
You're there. Today was day, one of the
0:41
cooping, ercole consumer identity World Conference,
0:45
that's a mouthful. Yeah, good job pronounciations
0:48
whooping whooping, her coming up, injure, which I've said
0:51
before coming herself but yeah, whooping her as I learned today.
0:56
So already a successful conference.
0:57
Yes, right, learn something. We can we can now correctly.
1:01
Say, the sponsors name. My attitude is generally, I want
1:05
to learn something new every day once I do, I shuffle.
1:08
Yeah, so we learn that pretty early.
1:10
So yeah, that makes a lot of sense.
1:12
Today was a day of workshops and there was a few different things
1:16
that were talked about. There was a presentation by ID
1:19
Pro around identity, access management or kind of like an
1:22
intro. I am but that's another good
1:24
topics in there. Yeah.
1:25
Yeah. You know, when I saw two topic
1:27
on the agenda, I thought okay I've been in the industry for 15
1:31
years. Probably skip this one but it
1:35
was a single track day. So I sat in the session was
1:40
Sarah and Ian and they're both really brilliant people and I
1:45
got a lot out of it, you know. I think one of the things
1:48
sometimes, when you're so close to something is you don't see
1:53
with it. You'll see the first or the
1:55
trees. Are basically I think that's the
1:57
right amount things that. But basically, what I mean by
2:00
that is, you know, they had a slide for example on IDP
2:06
Discovery or on Discovery. So it was, you know, somebody is
2:10
doing a Federated login, how do you know what IEP to send them
2:15
to and they gave a good framework of a, the three
2:19
methods. And I think that is really
2:22
interesting. So I actually think what I'd
2:25
like to do Do is get their slide deck and maybe even have one of
2:28
them. Come on the show some time and
2:31
really just go through what Ida Pro is all about me.
2:34
Pick some of those topics and and kind of dive into them.
2:37
Could be therapy and might be getting back from your
2:40
hesitation. Yeah.
2:41
And since we talked about in the past, I think, as we've kind of
2:44
grown into this podcasts, right? And kind of learned how it, how
2:49
it works that we can, you know, start to figure out how to, how
2:52
to get some some better guests and Were guests from other
2:56
things that our guests from the money.
2:58
Yeah. But I was wrong.
2:58
The were is wrong word but just, you know, more guests different
3:01
guests from different areas and their cat top neurosurgeon but I
3:03
do pro is a great word. It's only been around for, I
3:07
want to say this is the third year.
3:08
It started at the Ping Identity conference which became identify
3:12
reverse severally identify think it was 2016.
3:17
It was in Chicago and so I'm a founding member of the
3:21
organization just like, you know, a bunch of other people
3:23
and Ice also served last. Last year or this year I should
3:26
say on the board nomination committee.
3:28
So I do have some relationships there.
3:30
That maybe you might be helpful to kind of bring onto the show
3:33
and then talk group. Yeah, I think that would be is
3:35
it is a good, a good well-run well-managed and kind of
3:39
well-executed organization. It feels like they're trying to
3:44
make significant Change for the good in the industry.
3:50
So one of the things they were talking about is how the help
3:54
people get up speed quicker. And I think the way that it was
3:59
put was it takes people between five and ten years to really
4:04
know the industry and that was based on survey responses and
4:08
others people self grading. So, you know, I think you could
4:11
look as a out if you if you've been in the industry 15-20 years
4:15
like you won't know it. As much as I know for so long.
4:19
But this is people greeting themselves and I think the
4:24
thought pattern well most of us who get into.
4:27
I am start with a single product right before, we're not really
4:31
industry experts for, you know, during that period where we're
4:35
only working with one product because we get very product
4:38
focus and how that product solves a particular problem,
4:42
right? Yeah, I remember they went out
4:44
so everyone out. So it would definitely was a
4:46
poll of ID Chrome. Embers and kind of get that
4:49
sense of when to feel when do people feel proficient and it
4:53
was that 5 to 10-year Mark. But, you know, even people who
4:56
have been in the space for 15-plus years like you and I I
5:00
still feel like, there's always something new to learn, right?
5:02
Technology is always changing. I think there's Core Concepts,
5:05
right? That maybe now we take for
5:07
granted right there. Are people who don't have that
5:10
experience, right? We have Morgan on a few weeks
5:12
ago, you know, she's relatively new to the I am space.
5:16
You know, it's people like that. That, how do we groom the Next
5:19
Generation? I know that was a topic that
5:21
actually, you know, someone wrote in looking for us to talk
5:25
about, I think, in some point in the future, once we get through
5:28
this, little travel still work on, it would be a good idea to
5:32
kind of, get those folks back into room and really kind of
5:34
talk about. How do we get, how do we get
5:36
the, you know, folks who don't have as much experience with?
5:39
I am. Snag them in college and see no
5:43
other areas, you know, younger folks are people who are just
5:46
looking to make a change. And And try to, you know, help
5:49
them along their path. Yeah.
5:50
Totally Ida pro has this project, they're working on
5:52
called the body of knowledge which is essentially the intent
5:56
is to be kind of a, you know, a training manual for I am.
6:00
Yeah. You know it was interesting.
6:02
Was it was meant to be kind of I think the way Sarah was putting
6:07
it was. It's like so first off.
6:10
I'm PMP. So that's project management
6:13
professional. That's the group that PMI that
6:17
built the pain. My project management body of
6:19
knowledge. So I actually had to know it
6:22
like down to the job until at one point and what she was
6:28
saying was that they want to create a body of knowledge but
6:31
they don't want it to dictate best practices.
6:34
And my thought was, well, the pin bog definitely.
6:36
So this is the best practice. It is not a agnostic from that
6:41
sense, but I do think that And I am it's a little dangerous to
6:47
you know try to say this is the best practice I think him.
6:51
Similarly different people have different perspectives on what
6:54
the best practices. Well they change.
6:55
So I mean they can change relatively quickly if you think
6:58
about it like what was that? Like two years ago SMS is fine.
7:01
Maybe three years ago but SMS is fine for a one-time password.
7:05
Now it's not even recommended by nist standards and no think
7:08
historically nist has moved as quickly maybe as you know the
7:11
industry but even nests you know it is Saying, yeah, we're
7:15
deprecating that and it's no longer considered a secure form
7:20
for authentication, right? That being said, if you're only
7:24
using an ID and a password, and the only option you have
7:27
available is to use some sort of SMS, you know, OTP, then it's
7:33
probably better that. It's nothing at all, rather than
7:35
nothing, right? But yeah, things move so
7:37
quickly. That I don't know if you want to
7:38
set a best practice today for without having to have several
7:43
pages of This is a point in time, you know exactly.
7:48
You're going to have to just I mean no matter what you do
7:50
you're going to have to update. That's the one thing about
7:53
identity management is pretty cool.
7:55
Since I first got into industry, the first conference I went to
7:59
was called digital ID world, and it was like, I think, you know,
8:04
was there because Rob he's been around for a long time but, you
8:12
know, it was like they talked about I am The standpoint of
8:15
like, what is the father, who what is the identity?
8:20
And it was really quite loved that about.
8:23
I was like, you know, I never really thought about what is an
8:26
identity mean to the philosophical discussion
8:29
philosophical discussion about it and, you know, there's so
8:34
many different Industries where they've kind of disappeared as
8:41
industry and they've just become like could you imagine A CRM or
8:46
Erp industry event? I don't think those exist.
8:51
I think they're all focused on their one product and they're
8:54
all product Focus now. So it's a very, you know,
8:57
Salesforce or sap or, you know, one of those guys or maybe like
9:04
Microsoft or something, but, you know, I didn't imagine still has
9:08
vendor agnostic conferences. Yeah.
9:10
Which is that? Yes, I think it's great.
9:11
There's so many So many products out there, you know, sometimes I
9:17
fundamentally, I feel like fundamentally.
9:19
They do pretty much the same thing, they helped me understand
9:22
who has access to what, and if that is appropriate at its basic
9:27
level, that's pretty much all I am is right, that is different
9:29
things right there. Could be, you know around yes,
9:31
education site operation side, you know, wherever he may be.
9:34
But there's so many still good conferences.
9:37
Like you said that you can see the, you know, compare and
9:41
contrast the different solutions because each one has an area
9:44
think that they're really good at we're other specialized maybe
9:48
in, you know, another area of I am or even just down to, you
9:53
know, I'll call like simple things like IGA then he governs
9:56
Administration doing just the basics of Plumbing of
10:00
provisioning accounts be provisioning accounts.
10:03
Yeah, you know, certifications sale Point does it this way?
10:06
Saving? It does it this way, Oracle does
10:08
it another way. They all have different
10:11
strengths that they liked him. Yeah, I asked the question and
10:15
it wasn't like in order to stump these guys because I'm really
10:19
interested to see if they had an answer.
10:23
But you know it's like we talked about Samuel to and we talked
10:26
about oauth 2 and open ID connect and I asked question
10:31
what what's next and Puma was mentioned, that's definitely one
10:36
that it has people's interests and their future.
10:39
Dietary things. But it's a little bit hard.
10:43
I think hard question to answer because I don't think there's
10:45
anything emergent that's like. Finally, the next you see,
10:50
here's the thing. I don't know what it is, but I
10:53
can tell you that 10 15 years down the road soon, be something
10:56
else. That's kind of feel like about
10:58
actor-director right somewhere? Someone is out of replaced,
11:01
active directory, right? We just don't know it yet.
11:04
That's right. He's kind of same way that what
11:07
no vowel, you know, all of a sudden was gone and you're
11:10
really replaces Novella essentially, right?
11:12
Yeah. So something's out there and
11:14
replace it. I'm curious to see how the
11:16
blockchain plays into this. I think there's some sessions
11:19
and next couple days. Yeah, around that decentralized
11:22
identity. Sarah did have, you know,
11:24
interesting, use case around Puma, you may wear.
11:29
It was kind of like a point-to-point identification,
11:31
which I think is interesting because in the age of privacy,
11:34
you don't necessarily need need to know someone's birth date or
11:37
you just need to know you know are they old enough to do what
11:40
they're trying to do? Is it by a Beer by whatever
11:43
where they need to be 21 or maybe devote right?
11:46
You don't really need all that information.
11:48
Just Yes or no. Basically, it's a binary.
11:52
So then you start having the idea of like an identity
11:55
provider being government agency, and things like that.
11:58
Which, you know, that idea has been getting further else's
12:02
digital ID 1, I can see ya nationally and, you know, I
12:06
don't know, it's like as much as it seems to make sense and never
12:10
really, actually seems never happen.
12:13
I think part of it is, you know, I'm not an anti-government
12:16
person. But, you know, I think the
12:18
government moves, Too slow to keep up with the pace of
12:22
technology for consumers. Yeah, isn't it?
12:26
I think it's Estonia. They've gone to an all-digital
12:29
identification. I don't know enough about speak
12:32
intelligently. So I'm going to stop right
12:34
there. All right, but I'm pretty sure
12:35
it's a Stony a little bit more, but, I'm pretty sure it's a
12:40
Stony of that has gone to like an all digital identity.
12:43
Do all their voting online. I'm not sure how secure it is,
12:48
but you know that, Could be something that becomes a case.
12:51
Study of, here's what works and here's what doesn't work,
12:55
because like anything else, technology people processes Etc,
12:59
will continue to evolve mature etcetera based on the needs of
13:04
humans. Yeah, until the robots take
13:06
over. So one last thing I want to do
13:08
is mention I was talking about that Discovery.
13:12
I went back and looked at the slide because it's a picture of
13:14
it. So the three forms were first
13:17
one they called NASCAR. I thought was a really cool
13:20
name. So the NASCAR was the login
13:23
screen with all the little witches or icons.
13:26
Also got they're like yeah sponsored by Google or Yahoo
13:32
Plankton laughing. Yeah.
13:37
So I thought that was pretty cool.
13:38
That was method. Number one is so this is IDP
13:41
Discovery, that's it. One must NASCAR method to was
13:46
what they call IDP discovery which was you Put in your domain
13:51
or you hit a drop down, select your domain and then the third
13:55
was user base, which is where I say this is probably the most
13:58
common you type in an email address type style user name and
14:03
it truncates off you know at yeah.
14:06
Whatever is the environment clean and then we'll send you
14:09
back to the room. That's interesting.
14:12
Yeah. So anyway, more to come on.
14:16
That probably the other part of the, the afternoon was focused
14:22
on a workshop around how to manage through a data breach and
14:28
this was truly a workshop. So when I saw it on the agenda
14:32
didn't really distinguish, okay? Workshop means there's going to
14:36
be a lot of participation by folks in the audience.
14:40
So it wasn't just watching a bunch of And some actually
14:44
thought that was good, really kept it from being too boring at
14:47
least for me. But the case you guys were
14:52
Richard Hill and John Tolbert, I thought it was a really good
14:55
session. I think that the big message was
15:01
what was in session. So what was it about?
15:04
It was handling your identity breachers, a customer.
15:13
They went through the workshop was kind of, a lot of, here's
15:18
kind of the problem. One of the problems is, if you
15:22
look at handling your breach, there's how you can prevent it,
15:26
how you can detect it and how you can respond, most of the
15:33
investment that at least. So they did a survey of
15:37
companies in the UK and like ninety percent of those
15:41
companies have invested. And prevention 55% had done some
15:48
level of investment in detection.
15:50
Only 13% invested in response. Yeah.
15:54
So in other words the planning for the response, the problem is
15:57
like the Dave reaches I think occurred are currently 50
16:03
percent of companies or something like that.
16:05
I mean it's a really high percentage, I don't know who
16:07
said it, but if there's the old adage of either, you've been
16:11
either, you've been hacked. Or you don't know yet, right?
16:14
Exactly. And then what they're also
16:16
saying was like, you know, Common, there's coming patterns
16:20
that there that they found in their survey, there's a survey
16:24
by the Hanuman institute. There's one by IBM, and a lot of
16:28
the numbers are the same and one of the the shocking statistics
16:33
is it takes about a half a year on average to even detect that
16:37
you've been hacked. This is why I'm such a big fan
16:39
of things like machine learning and AI.
16:41
Yah is How You Gonna Catch? There's no way, you know, that
16:44
it makes sense to staff. Dozens hundreds of analysts just
16:50
to try and pour over logs and you know whatever maybe he.
16:52
So I think that's I think that's what you're seeing now is the
16:56
kind of the Leading Edge of. I am is a lot of this focus on
17:00
machine learning. Hey, I see a product like
17:02
exiting for example, right? We're doing that kind of looks
17:05
long and it was getting into it well especially when a lot of
17:10
these data breaches. Start with a phishing attack.
17:14
Other words, you're getting somebody credentials one way or
17:17
the other and then you start accident, if you're a hacker you
17:21
start accessing the network in a way that would be normal all the
17:25
day I do. And in that case, whose you say,
17:27
okay, while you're accessing the network, in a way that's normal,
17:31
we're accessing it from China, right?
17:33
Or you're accessing it from the VPN in your on the network at
17:38
the same time, right? Into different avoid that
17:40
doesn't make sense right? Or you're you know trying to
17:42
Access different things that you normally don't try to access,
17:45
right? Right.
17:46
And then exactly so search kicking off a weird pattern and
17:50
it requires somebody to go look into it further.
17:53
But I think that was that's the thing is that so many of these
17:59
cases happen and then organizations don't have a plan
18:04
to deal with data breach and then one occurs and there.
18:09
They're trying to fight a battle without a plan, right?
18:13
So things start moving very quickly on you when I thought
18:17
was interesting about that part where the vast majority of the
18:21
spend was on the prevention side and very minimal spend on
18:26
response. I think you see that today in
18:29
some of the responses, you see, if the companies where frankly,
18:32
their trash responses, they're not good, right?
18:34
They just do a terrible job and every once in a while, I'll see
18:38
a company, I'm trying things. Off the top of my head I can
18:40
think of was like okay they actually I think they did a good
18:43
job. Yes they got hacked that's bad.
18:45
But at least they're responsible bit better.
18:47
And if there was some interesting conversation to room
18:49
around, why do we think the response spend is so small?
18:54
In comparison to prevention detection mitigation, those
18:58
sorts of things and I don't member who said in the room, but
19:01
I was kind of thinking see anything.
19:03
It's if you're spending, but this is just a perception thing,
19:06
right? If you're spending a lot of
19:08
money. On recovery or response.
19:13
Isn't that self-defeating because the whole point of you
19:15
spending money on prevention and detection, all those sort of
19:19
things is that you don't get to the response.
19:22
So what are you saying to your CEO and say, hey I need, you
19:25
know, a million dollars for prevention and detection and
19:30
another million dollars for response.
19:32
Or what do you mean, why am I spending million dollars on
19:34
prevention if you're telling me that's already going to fail?
19:37
So I think it's an issue given the dynamic that, you know,
19:40
cisos and cios other folks. He's likable have to balance
19:44
that, you know that. Yes, we're going to do
19:47
everything we can to stop the breach, but we know that
19:50
inevitably something could happen and we need to prepare
19:53
for it as well. Yeah, the Challenger would have
19:56
on that would be, it should not cost you a million dollars.
20:00
So, I was responsible, I was using easy numbers for my
20:02
citizenship in some companies. Maybe it would, because I think
20:08
that parallel, and it is like a disaster.
20:12
Every plan, you know, yes, you go into your Datacenter gu built
20:16
on a redundancy and Geographic redundancy and things like that.
20:20
That doesn't mean you couldn't fall prey to a disaster, right?
20:25
And every companies deserve for her, reflect it and the disaster
20:30
recovery. Plan could say, well, you know,
20:33
we have a hot side over here. So we should never be down.
20:37
And the response plan like this for a data breach probably
20:41
probably know. Oh like you know no matter what
20:44
we're covered, right? But at least give a plan to say
20:48
when we find out Something's Happened.
20:51
This is the team that's going to run with it and those folks are
20:55
prepared know their role. Yeah, I think that was, I think
20:58
one of these you spoke about was ownership, very who owns this.
21:02
And I think people kind of thinking around the room because
21:05
it can't see, faces was kind of like, uh, that's a good
21:07
question. Who owns this?
21:10
Yeah, so so the way they approach the workshop the KCI is
21:15
was they set up a fictitious example I guess they said it was
21:21
based on something that really happened but regardless you can
21:24
see how this could really happen and they dribbled a little bit
21:28
of information as the hack was playing out.
21:31
So you were in the shoes of a new security analysts have been
21:35
with the company for a week and, you know, so slide one was like
21:39
Like you start hearing about some issues where the helped us
21:44
who's getting slammed with all these questions about their
21:48
accounts and then you saw a social media post that some
21:53
accounts have been posted to the dark web, you're starting to
21:56
become aware of it and that's one where the reporter.
21:59
Then the final step to the reporter calls you I reporter
22:03
calls you from some online media site.
22:08
And as you You know about this episode.
22:13
I think that's where things got really interesting.
22:14
Their room, great. Yeah.
22:17
My perspective was, you know, phones Curiosity Company.
22:22
My role is not to talk to Media right now agreed that otherwise
22:27
would have media training employee.
22:29
Yeah, exactly. But, you know, and the point I
22:32
was making was, you know, answering that question, even
22:35
just say, like, no, I don't know that I'll have somebody get back
22:39
to you. That could be a headline, like
22:41
security analyst, doesn't your this company.
22:43
As even know that they stay number of ways.
22:46
I think he has fun A number of ways.
22:48
I'm just looking for a headline. I think I'll take away on that
22:52
part though. Was that from a training
22:56
perspective, making sure the organization knows who to send
23:01
media inquiries to one of the companies I work for.
23:03
That was part of our training was if you receive requests from
23:07
the media for, you know, send them to this person or this
23:11
department, or phone number, whatever it was.
23:13
And we had to actually do that every year rice, you know, it
23:15
was because it, you know, people change it.
23:17
And procedures, whatever. But it was something that was
23:19
actually accounted for from a organizational level, somebody
23:23
made that statement. I think because, you know, from
23:26
that perspective, the data breaches not much different than
23:30
any other type of accident that could tap.
23:32
So if your you had a factory and the factory caught fire and they
23:37
somebody found your number or they were just kind of word
23:40
island of corporate phone number, you know, block they got
23:46
you. I want to know about the fire,
23:49
you know, you'd have to know, don't say anything is not your
23:52
job, right? Send them to that corporate
23:55
phone number. So, even if you had a plan, if
24:03
you had a plan around how to do a data breaches, it should
24:06
include having them call that number because I think they
24:09
would know how to say no comment you know, I'll return your call
24:14
later or something like that. They would know how to Surely
24:17
get all kinds of offbeat calls all the time.
24:19
Yeah. That's when you see her it, when
24:20
you read like a news article you know reached out to so-and-so
24:24
have not heard back or you know did not provide a comment,
24:27
right, right? Which is probably okay at that
24:29
early stage, right? You're probably still
24:32
fact-finding and trying to figure out what the heck is
24:34
going on. You know.
24:36
You would hope that the organization would be aware of
24:39
things before it gets the outside.
24:40
But this is the real world and it doesn't always happen, right?
24:43
So I can't. So at that point, we're kind of
24:46
at the point. Or with so you're starting to
24:48
become aware. You were starting to think, okay
24:51
there's something I need to look into but before you re believe
24:55
even the look into it, you get this media call then advances
25:00
into you start having more information come your way.
25:04
I think the real key is if you have a plan you know who to get
25:07
involved and you start things going, it's kind of fast forward
25:13
because I even though it was a great session.
25:15
What I wanted to talk about was There were two example videos
25:19
that we watched her kind of News interviews.
25:23
The first one was with the British Airways when they got
25:27
breached and it was two weeks after they hadn't come out and
25:32
made a public statement that point.
25:34
So they had this guy home kind of a talking head because that's
25:38
the other. So many Talking Heads on news
25:40
channels and sports channels these days.
25:43
And he's just saying, you know, Thing after another and it was,
25:48
they lost control of the situation.
25:50
They didn't get out and proactively communicate.
25:53
About British Airways. Yeah, pretty sure ways.
25:56
And, you know, and they lost the opportunity to kind of
25:59
formulate, the message and let customers know that they'll be
26:03
made whole and they'll be taken care of in that.
26:06
Not only that, that their planes are safe, right?
26:08
This had nothing to do with the operation of their planes
26:13
because I think with an airline okay, even if you got my credit
26:16
card number five, Fine. I don't want to be on a plane
26:18
that crashed. Well, it's interesting because
26:20
look at what happened recently, the 737 Max, right?
26:23
A grounder that worldwide because of the software issue,
26:25
software issue young. So now we're starting to let me
26:27
on board. The lines between it's not just
26:30
payment and billing software issues can happen anywhere from
26:33
playing. You certainly don't want to
26:35
happen in the air for sure. So you have to be able to steer
26:39
the message where you need to go, obviously they want to
26:41
mislead people, right? But controlling the narrative,
26:46
which You know, is all over the place.
26:48
Politics, Etc Sports, whatever it may be is a key part of
26:51
making sure that it goes stories.
26:53
Go the direction, you're looking some gum.
26:55
Yeah, exactly. The other video we watched was
26:59
the CEO of talk talk. And this interesting, the room,
27:03
a lot of people had an opinion on whether or not the CEO did a
27:07
good job. No, I watched the video.
27:09
I thought the CEO did a good job in that.
27:12
I felt like she was being honest.
27:14
Yeah, she was not trying to cover anything.
27:16
Yup, there was an attack journalism from style, but I
27:21
also could see the point, some of the other people were making,
27:24
which was she look like, she had slept in 48 hours, probably
27:29
hadn't Hughes hanging your head. Her body language was pretty
27:33
weak and then there's attack journalist, just like peppering
27:36
her with questions and rather than Prosecuting instead of
27:40
interview Prosecuting, right? She wasn't letting your finisher
27:42
answers, the answers for never good enough.
27:45
And it's like, you, The people who handle that the best
27:49
basically put the reporter in their place and say, one
27:52
question at a time, you know, let me finish answering.
27:57
So, Anyway, we should try to find those videos and app to the
28:02
show notes. I think that, you know, I know
28:04
we're kind of jumping all over because we don't want the show
28:07
to go on for ever, in the day. But one of the other interesting
28:13
conversations was around when to get law enforcement involved, I
28:16
am. And there was a FBI special
28:19
agent in the room as well. There was an FBI special agent
28:21
or no, and I've had we found him.
28:25
Yes, I thought that was pretty cool.
28:29
You know, depending on the industry or in depending on what
28:35
the potential risks of the, of the reach, our main we were
28:41
looking at a I think we're led to believe that this particular
28:46
company wasn't in the in the business doing anything that
28:52
would threaten the lives and safety of people therapies, like
28:56
an e-commerce type scenario. I think really right.
28:58
It's an e-commerce area but it didn't seem like as e-commerce
29:01
like Gun Company, right? They weren't selling guns,
29:04
firing line or anything but, you know, imagine a scenario where
29:08
your client is selling guns or public safety's involved in some
29:14
way. I think you need to be much
29:16
quicker in terms of contacting law enforcement before you even
29:19
had the full picture. Yeah, if your something where
29:22
lies aren't threatened, maybe take your time to try to, you
29:27
know, you don't want to Um, did love law, enforcement
29:31
involvement, find out that actually learnt for each and
29:34
this is all a big mistake, right?
29:36
I think the FBI is going to have a presentation on Friday in a
29:41
couple days. So we'll see if it's worth if
29:43
it's worth talking about that point but he certainly didn't
29:47
want to spoil or, you know, steal his own Thunder ahead of
29:51
that. What did you think of the show?
29:55
The show the, the conference overall, because I have
29:58
opinions. Ins?
29:59
I'll let you go first. Well, is very small, I like the
30:05
style of today and I don't think the style of today is going to
30:09
carry forward the way the conference Hall is that I
30:13
shouldn't even call a conference Hall.
30:14
It's a floor on a hotel, but there's another conference going
30:19
on in the room next to ours. So tomorrow it will be split
30:24
across those two rooms. There may be more people so I
30:27
think too Kind of make my call now would be premature, right?
30:32
It's definitely a hot, take a hot date, but I'm having fun
30:37
and, you know, I met a guy named Dirk wolf healed from cognitum
30:42
software. He's a GDP, our expert.
30:46
And one thing I didn't realize is that there are companies
30:50
already paying fines gdpr. British Airways was one right.
30:55
There's a and it's not an insignificant amount.
30:57
It's based on a bleeder Gross profit or something like that.
31:00
Exactly. Year, 25 percent of your gross
31:04
revenue deficit Olivia. Yes, if you're 100 billion
31:07
dollar company, could be five billion dollars.
31:09
Yeah, that's nothing to sneeze that.
31:12
So, yeah. So anyway, he was showing me
31:16
some data that's publicly available and, you know, there
31:21
are some large US companies being fined for their
31:24
activities, in countries, in Europe.
31:29
And I know Google was just a news recently because they won a
31:33
lawsuit against gdpr. Okay?
31:37
The it's around the right to be forgotten.
31:40
Part of GDP are. And what gdpr was arguing, was
31:44
that if someone makes a request to be forgotten, Google or the
31:50
search engine would have to remove it from all of their
31:53
product, from all of their search engines, meaning even
31:56
searches, and search engines in different regions, not Located
31:59
in European country and Google one.
32:03
I'm sure he'll get a peel Google.
32:04
One by saying, are they won? The ruling from the judge.
32:08
Was that? No, that's not correct.
32:10
They only have to remove it from the, you know, the member areas
32:15
of the EU that are falling under gdpr.
32:17
So America is not covered under that you know, other other
32:21
areas. So I think that was a real
32:22
interesting ruling how that's going to kind of move things
32:26
forward because theoretically, Lee, you know, if you're in,
32:29
let's say France, all you have to do is just change it to the
32:32
US version and you be able to still find whatever it is,
32:35
you're looking for versus. If you're in France version of
32:37
Google, for example, the results weren't show up.
32:41
I want to give Dirk Werner on our podcast because we get asked
32:46
by customers all the time about, Judy PR.
32:49
And now companies are receiving, real finds remain real money and
32:56
this guy knows a lot about. So I'd like Get him on and share
33:00
some of this information with Arliss.
33:04
So I'm going to agree and say I thought was it's a very small
33:07
conference. The format of the conference is
33:10
three days. Today was really kind of
33:12
Workshop, so it's even though it's day one of the concrete,
33:16
that's really more, like Day Zero.
33:18
So I'm curious to see how things ramp up the next two days
33:22
because then becomes more of a conference type thing where
33:25
those different sessions. But it's still relatively small.
33:27
I think from my account today, there were less than 30 people
33:30
there today, which is a very small number, you know, for a
33:34
concern, you know, and identity world.
33:37
Now I believe this is a new conference.
33:38
It's the u.s. I think it's only been around
33:40
for here that could be wrong on that and I felt like today was
33:44
really good. It could have been a webinar for
33:47
sure but by being in the room and being able to have
33:51
interactions with all the other attendees and there was a pretty
33:53
good mix from different people of, you know, other Consultants.
33:57
But you know companies and you know some fairly big companies
34:00
as well that we're having the conversation of the room it was
34:04
I think that's the part that Rose like okay.
34:06
This was a good thing to be here for.
34:09
I just hope that the next couple days, get a little bit bigger,
34:13
but I think the content itself is hopefully going to live up to
34:17
Billy's my expectations because I think that there's a there's
34:20
something here and it kind of strikes me as you know.
34:23
It's a relatively new seems like they'll regret.
34:25
So relatively new show. It's for my European based
34:29
company think it's Cooper. Miracle is in Germany.
34:32
I think is really really Munich Germany, right?
34:34
Where they're based out of. So They're much bigger.
34:37
I think I'm you know the across the Atlantic I think we need to
34:42
go and that fighting Weenie Roast acts that evaluation.
34:47
Now my favorite thing of the conference today was what the
34:52
food food was really good but specifically one item of food.
34:59
I guess the brownies brownies brownies were actually really
35:03
good but and I'm a chocolate guy.
35:05
So I definitely would have gotten that but no, it was
35:07
potato chips. Oh yeah, they were.
35:11
Unexpectedly good, you were Dynamite.
35:14
Yeah, I'm gonna consider the day one a success just based on
35:19
learning how to pronounce whooping your coal and the
35:23
quality of the potato chips. Yeah, here's my problem is that
35:28
I eat like 6,000 calories a day when I go to conferences, like
35:32
this food is too good. That's not something that
35:35
normally happens, though. Usually we're eating better
35:38
outside of the conference, right?
35:39
But yeah. In Previous podcasts to talked
35:42
about Oracle World. They remember their lunch was
35:45
gotten a long line behind a couple hundred people and picked
35:49
up a bag lunch. And then you went and tried to
35:52
find somewhere to sit and eat it Force networking with other
35:56
people or several. Yeah, I know Gartner does that
36:00
not to pick up Carter but like the other tables.
36:01
Right. Right.
36:02
Birds of a feather, I think is what they call it.
36:04
And, you know, it's kind of cool people to see right in your own
36:07
like, you know, sometimes awkward small talk for people
36:11
who don't really want because social part of another's that do
36:14
and you see faces that, you know, so it's good and bad.
36:17
But yeah, it definitely wasn't your typical comprises of hers
36:21
to people like the quiet people. One of the like exam like yeah,
36:24
these are good. Potato chips.
36:26
Aren't they? You should try ones, but I think
36:32
I think as far as day one goes into the first successful, I'm
36:35
curious to see what happens next couple days.
36:36
So I think our plan is to record.
36:39
Another one or two more of these, just to kind of cover it
36:42
up. But yeah, I'm I am cautiously
36:45
optimistic. We'll see where it goes from
36:48
here. Yeah.
36:49
I mean, depending on how it goes, we might just want to do
36:52
daily updates and then tag him to the end of this podcast.
36:55
You can kind of see like either the evolution of opinion.
36:59
Right. Maybe it's a go.
37:00
Yeah it's a is you know it's going to be like for like three
37:06
months. Yeah.
37:11
Who knows maybe the potato chips tomorrow and I'll be good and
37:14
you know I'm going to give him a sailing reading.
37:17
All right. Well, I think that's probably it
37:21
for today. Yeah, man, and we'll wrap it
37:25
there. You've got questions, comments
37:28
concerns accolades, send them over to if you're also suffering
37:36
from Seattle allergies, Seattle allergies and It's like full
37:40
here and fall everywhere. Not about who you are not Lana,
37:45
it's not it's set in Chicago, for is still in the 90s every
37:48
day, I like that. Yeah, so if you've got
37:53
questions, comments concerns, send them to questions at
37:57
identity at the center.com and we'll be talking to you in the
38:01
next one. You've been listening to the
38:07
identity at the center podcast Taxes all episodes visit
38:11
identity at the center.com. Taxes all episodes visit
38:11
identity at the center.com.