Latest / CYBR.Signal / Art vs. Architecture

Transcript

Art vs. Architecture · CYBR.Signal

• 0:00
  SPEAKER_00: Hey everybody, Michael Farnham, CEO of Cyberset Community here.
• 0:04
  SPEAKER_00: If you hear noise and you see some stuff, if you're watching this video and not listening to the podcast version of it, I am in downtown Houston.
• 0:11
  SPEAKER_00: This is where I live.
• 0:13
  SPEAKER_00: And coming in for a meeting, but I was running by this statue here, as you can see, if you're watching this, some fine art down here in downtown Houston.
• 0:23
  SPEAKER_00: Got me to thinking about some conversations I've had recently with some founders and also some chief information security officers that I've been talking to.
• 0:32
  SPEAKER_00: And one of the things that has come up a lot is the user interface and user experience within applications and what that means to the chief information security officer, whoever's running the security program, what they need from a metrics perspective, what they need as far as information that comes out of product that they're using in their infrastructure, a security product.
• 1:00
  SPEAKER_00: So what do I mean by that?
• 1:02
  SPEAKER_00: So from a metrics point of view, you can put a lot of stuff into a user interface, into a user experience, a UI, UX in a product, and you can put a lot of details in there, and all of those details can amount to not really meaning a lot.
• 1:22
  SPEAKER_00: So without disparaging this artwork that's sitting here, I don't mean it's not worth a lot or it doesn't provide some kind of value.
• 1:31
  SPEAKER_00: What I mean by it is something nice to look at, it's beautiful, you can really enjoy it, but ultimately does it provide you value that you're looking for in, let's say, the building that's behind it.
• 1:44
  SPEAKER_00: So the building that's behind it is providing value.
• 1:48
  SPEAKER_00: It is providing business offices, it is providing restaurants, it's providing a lot.
• 1:54
  SPEAKER_00: So as a business person, you look at that art, you can admire it, you can enjoy it, but it may not provide you a lot of value from a practical perspective, whereas that building that's right behind it does provide a lot of value and a lot of business value, a lot of practical value.
• 2:11
  SPEAKER_00: So it's the same thing with the UIUX and metrics that are in a product that you may be using in your security program.
• 2:19
  SPEAKER_00: So if you've got a dashboard in that product, what do you want to see in that dashboard?
• 2:24
  SPEAKER_00: You want to see metrics that are nice and pretty and that but don't really have any practical value to you.
• 2:30
  SPEAKER_00: And what do I mean by that?
• 2:32
  SPEAKER_00: So think about things like patching.
• 2:35
  SPEAKER_00: If you've got a patching product in the dashboard, if it says, hey, we pat, we've seen three million vulnerabilities in the world and we've provided patches for all of them, or we have seen 20 in your environment and we've provided patches for all of them, and hey, they were in a critical area in your network.
• 2:56
  SPEAKER_00: So that was uh that gave you a lot of value because we've we patched something that would have taken your network down or cost you a lot of money or whatever that may be.
• 3:06
  SPEAKER_00: So it's the same thing.
• 3:07
  SPEAKER_00: So you got artwork, no real practical value, it's nice to look at.
• 3:12
  SPEAKER_00: You can enjoy it.
• 3:13
  SPEAKER_00: You got the building practical value, gives you business value, lets you house your people, has food and drinks and all of that stuff.
• 3:21
  SPEAKER_00: Or if you look at it the same way in a UX UI and a product and a dashboard, I don't want to just look at stuff that looks nice.
• 3:31
  SPEAKER_00: Your UX can look really nice, it can wow me, it can blow me away.
• 3:35
  SPEAKER_00: But if it doesn't have practical value for me, it's not really that much use, and I don't want to spend a whole lot of money on it.
• 3:42
  SPEAKER_00: So I had this conversation with a product vendor the other day.
• 3:47
  SPEAKER_00: They had, I don't know if it was version one, but it was an early version of their dashboard.
• 3:52
  SPEAKER_00: They had a certain message that they were going with.
• 3:55
  SPEAKER_00: They had this one dashboard, it's a nice dashboard, didn't have the best metrics in it.
• 4:01
  SPEAKER_00: They came back with another version of it, and all of a sudden the metrics were just all extremely useful.
• 4:07
  SPEAKER_00: They were all relevant to what a CISO or CIO or VP of security or whatever would be looking for in that product and provide really good practical value.
• 4:17
  SPEAKER_00: Stuff that they could take to their board and show them that they were making progress in their environment, making progress in a security environment, patching things.
• 4:27
  SPEAKER_00: This specifically was one for AI, and it was showing how many AI products were in their environment.
• 4:33
  SPEAKER_00: It was showing how many tokens they had been using, showing all of the different conversations that they were having that different users were having in AI.
• 4:41
  SPEAKER_00: So it was a very practical tool.
• 4:43
  SPEAKER_00: So anyway, so just to sum that up, artwork, nice, not disparaging it, nice to look at.
• 4:49
  SPEAKER_00: Doesn't really provide practical value.
• 4:52
  SPEAKER_00: That building provides practical value.
• 4:54
  SPEAKER_00: Same way with the UI UX when you've got a product.
• 4:57
  SPEAKER_00: If you've got a really nice product and nice dashboards, but don't really provide me good value, I don't really care that much about them, even if it's nice to look at.
• 5:07
  SPEAKER_00: But if it provides me practical value, stuff that will let me take action quickly, that's practical value.
• 5:13
  SPEAKER_00: That's what I want.
• 5:14
  SPEAKER_00: So all right, everybody, thank you very much.
• 5:16
  SPEAKER_00: And remember, we spell cyber C Y B R because community yields better resilience.
• 5:22
  SPEAKER_00: See you next time.