1
00:00:09,800 --> 00:00:12,600
You're listening to the identity
at the center podcast. 

2
00:00:12,900 --> 00:00:15,800
This is a show that talks about 
identity and access management 

3
00:00:15,800 --> 00:00:18,700
and making sure you know who has
access to what let's get 

4
00:00:18,700 --> 00:00:26,100
started. 
Welcome to the identity of the 

5
00:00:26,100 --> 00:00:28,300
sender podcast I'm Jeff and 
that's Jim. 

6
00:00:28,300 --> 00:00:31,800
Hey Jim hey Jeff, how are you? 
Oh, not so bad yourself. 

7
00:00:32,100 --> 00:00:36,400
I'm good man. 
Second day of a new career 

8
00:00:37,300 --> 00:00:40,400
working here. 
Yeah, new career working. 

9
00:00:40,400 --> 00:00:44,800
As the, that sounds interesting 
director of digital identity 

10
00:00:44,800 --> 00:00:52,300
advisory services at RSM u.s. 
LLC. 

11
00:00:52,900 --> 00:00:56,300
I think I got that right. 
I'll pee I'll be darn it, darn 

12
00:00:56,300 --> 00:00:57,700
it. 
Yes, that's correct. 

13
00:00:57,700 --> 00:00:59,400
I'm getting there. 
It's very exciting. 

14
00:00:59,500 --> 00:01:02,000
It's day two. 
We're together again. 

15
00:01:03,300 --> 00:01:07,200
The the identity mullet lives on
as our friend Jody says so 

16
00:01:07,400 --> 00:01:11,100
hopefully she's listening. 
Congratulations to you and to me

17
00:01:11,100 --> 00:01:13,300
as well since we're building 
quite quite the quite the 

18
00:01:13,300 --> 00:01:15,100
practice here. 
So this is pretty cool but yeah 

19
00:01:15,200 --> 00:01:18,500
very excited to have you on 
board and you know to to the 

20
00:01:18,500 --> 00:01:20,700
Moon as the kids say. 
Yeah. 

21
00:01:21,000 --> 00:01:23,300
Yeah, I'm excited, man. 
I mean everybody, I've met so 

22
00:01:23,300 --> 00:01:28,100
far has been Super helpful. 
And, you know, it's like, it's 

23
00:01:28,100 --> 00:01:33,400
always a nervous thing starting 
with the new organization. 

24
00:01:33,400 --> 00:01:35,800
I mean, heck, you just went 
through it, not that long ago, 

25
00:01:35,800 --> 00:01:39,900
but you don't know you. 
And then all the other folks who

26
00:01:39,900 --> 00:01:44,800
have been very gracious as I've 
made it quite enjoyable for the 

27
00:01:44,800 --> 00:01:49,100
first day and a half. 
Yeah, the honeymoon period is 

28
00:01:49,100 --> 00:01:51,900
alive and well, still, so yeah. 
Yeah, I've got, I've got a 

29
00:01:51,908 --> 00:01:54,700
little bit sorry. 
I would like I didn't scare you 

30
00:01:54,708 --> 00:01:58,100
off or, like crazy orientation, 
or stupid stuff like that. 

31
00:01:58,200 --> 00:02:01,100
No, no. 
And already starting to book 

32
00:02:01,100 --> 00:02:03,700
some travel. 
So, planning on being out at the

33
00:02:03,700 --> 00:02:10,300
Gartner, I am Summit in Las 
Vegas, is that August 21st 

34
00:02:11,100 --> 00:02:15,500
through this 22nd to the 24th. 
It's a Monday through Wednesday,

35
00:02:15,600 --> 00:02:20,500
this year, instead of the normal
sort of like, after Thanksgiving

36
00:02:20,500 --> 00:02:23,400
Before Christmas, they've moved 
it up to August. 

37
00:02:23,400 --> 00:02:25,200
So yeah. 
Yeah, we're both going to be in 

38
00:02:25,200 --> 00:02:28,500
Las Vegas which is very cool and
we're going to plan on doing 

39
00:02:28,500 --> 00:02:30,500
some podcast recording out there
as well. 

40
00:02:31,000 --> 00:02:34,100
Try to find a quiet corner for 
us to do our Shenanigans in and 

41
00:02:34,100 --> 00:02:37,800
maybe invite some folks over and
have conversations with which 

42
00:02:37,800 --> 00:02:39,200
would be pretty pretty neat, I 
think. 

43
00:02:39,500 --> 00:02:42,800
Yeah, absolutely. 
Yeah I think that's a rookie. 

44
00:02:42,800 --> 00:02:48,000
So if you're if you're listening
and you want to meet us or maybe

45
00:02:48,300 --> 00:02:52,900
you know get involved with 
podcasting anyway just reach out

46
00:02:52,900 --> 00:02:54,700
to either Jeff. 
I are both folks. 

47
00:02:54,700 --> 00:03:00,300
Use LinkedIn as probably the 
best tool to do so and we'd love

48
00:03:00,300 --> 00:03:03,700
to hear from. 
You would love to meet you in 

49
00:03:03,700 --> 00:03:05,500
person. 
Yeah, absolutely. 

50
00:03:05,500 --> 00:03:09,100
Do they proverbial fist bump? 
And and yeah, just have a 

51
00:03:09,108 --> 00:03:11,400
conversation and, and keep it 
real. 

52
00:03:12,100 --> 00:03:14,200
And I feel like, I'm young and 
hip at this point with keep it 

53
00:03:14,200 --> 00:03:17,300
real, and to the moon. 
But to the Moon, is we have to 

54
00:03:17,300 --> 00:03:19,300
wait, not even close to New as 
it. 

55
00:03:19,900 --> 00:03:21,800
And that from like me. 
I think it says, like that. 

56
00:03:21,800 --> 00:03:23,600
Like the meme stocks and things 
like that. 

57
00:03:23,700 --> 00:03:26,800
At but that was kind of like, 
you know, at least where I've 

58
00:03:26,800 --> 00:03:28,800
heard it. 
Most recently is like in the 

59
00:03:28,800 --> 00:03:33,500
condo in the context of, you 
know, some junk crypto coin I 

60
00:03:33,500 --> 00:03:36,200
should say junk. 
But some cryptocurrency, you 

61
00:03:36,200 --> 00:03:40,800
know, being artificially 
inflated and pushed Sky High. 

62
00:03:41,600 --> 00:03:45,600
I guess I was thinking of the 
old Ralph from The Honeymooners,

63
00:03:45,600 --> 00:03:49,900
to the movie with you Alice. 
I think it was like, you know, 

64
00:03:49,900 --> 00:03:52,000
one of these days pow right in 
the kisser. 

65
00:03:54,000 --> 00:03:56,700
So, politically until think you 
can probably say that TV these 

66
00:03:56,700 --> 00:03:57,900
days. 
Yeah, probably in a lot of 

67
00:03:57,900 --> 00:04:01,000
trouble. 
Yes, we're going to be a 

68
00:04:01,000 --> 00:04:04,000
gardener. 
Jim is join me over at RSM, 

69
00:04:04,000 --> 00:04:06,300
which is awesome. 
So, looking forward to continued

70
00:04:06,300 --> 00:04:10,000
success there, I don't know 
about you, but I've gotten a lot

71
00:04:10,000 --> 00:04:12,700
of like cool feedback over the 
last. 

72
00:04:12,700 --> 00:04:15,400
I don't seem like the last 
couple of weeks for people 

73
00:04:15,400 --> 00:04:17,600
who've been listening to the 
show on LinkedIn, which is 

74
00:04:17,600 --> 00:04:19,399
pretty neat. 
It's always interesting to see 

75
00:04:19,399 --> 00:04:22,100
kind of like who's listening, 
right, who's setting in the 

76
00:04:22,100 --> 00:04:23,500
feedback, but also, where 
they're at. 

77
00:04:23,700 --> 00:04:26,900
At and it's pretty. 
We're truly are a global show at

78
00:04:26,900 --> 00:04:31,400
this point got thousands of 
folks listening to our to our 

79
00:04:31,400 --> 00:04:34,200
identity stuff, pretty much 
every week, which is very neat. 

80
00:04:34,400 --> 00:04:37,200
And so what I thought we'd do 
this week is take some of the 

81
00:04:37,200 --> 00:04:39,800
questions that we've gotten over
the last really kind of few 

82
00:04:39,800 --> 00:04:42,200
weeks. 
And do you know what we like to 

83
00:04:42,200 --> 00:04:45,500
call in the biz? 
A mailbag episode ended up 

84
00:04:45,500 --> 00:04:47,600
taking questions in the biz. 
That's right. 

85
00:04:47,600 --> 00:04:51,200
As professional podcasters is 
take a few questions that we've 

86
00:04:51,200 --> 00:04:53,400
received that we thought were 
pretty interesting and maybe the

87
00:04:53,400 --> 00:04:57,400
audience Spike, get some 
interest from and you know, 

88
00:04:57,500 --> 00:05:00,100
answer them put our spin on it 
and see where things go. 

89
00:05:00,100 --> 00:05:05,800
So we selected three and we'll 
start with the first question 

90
00:05:05,800 --> 00:05:06,900
and I'll just read them off 
here. 

91
00:05:07,400 --> 00:05:10,300
This is from Joanne California. 
What we will leave last names 

92
00:05:10,300 --> 00:05:14,000
and companies out to keep just 
make sure that we you know don't

93
00:05:14,000 --> 00:05:16,400
out people where maybe they 
don't want to be or whatever it 

94
00:05:16,400 --> 00:05:19,100
is. 
But Joan California, what is 

95
00:05:19,100 --> 00:05:22,900
more important having and I am 
program and I think by this he 

96
00:05:22,900 --> 00:05:26,400
means the people And sort of 
like the process or having I am 

97
00:05:26,400 --> 00:05:29,900
technology, like OCTA sale point
or cyber-ark. 

98
00:05:29,900 --> 00:05:33,600
So things like access management
identity governance privileged 

99
00:05:33,600 --> 00:05:36,100
access tools. 
So I think the intention here is

100
00:05:36,100 --> 00:05:39,400
like where do you start maybe do
you start with people and 

101
00:05:39,400 --> 00:05:41,700
process in the program? 
For do? 

102
00:05:41,700 --> 00:05:45,300
Get a technology first and then 
it's kind of build around that. 

103
00:05:45,400 --> 00:05:48,900
What are your thoughts? 
Jim, let's see both be 

104
00:05:48,900 --> 00:05:52,300
successful. 
I think that this one of those 

105
00:05:52,300 --> 00:05:55,600
Consulting answered Pounds 
because I think it depends on 

106
00:05:55,600 --> 00:05:58,000
the size and maturity of the 
organization. 

107
00:05:58,200 --> 00:06:01,500
Even very large organization. 
You've got to assume that 

108
00:06:01,500 --> 00:06:04,600
there's some kind of footprint 
of the technology already in 

109
00:06:04,600 --> 00:06:07,000
place. 
Maybe some some old work'll 

110
00:06:07,000 --> 00:06:12,500
technology or maybe a custom 
homegrown solution for managing 

111
00:06:12,500 --> 00:06:16,100
access request, rotting 
provisioning request, things 

112
00:06:16,100 --> 00:06:19,100
like that. 
Maybe some kind of spreadsheet 

113
00:06:19,100 --> 00:06:24,100
process for reviewing access, 
certainly doing some Some level 

114
00:06:24,100 --> 00:06:26,800
of authentication, right? 
People don't just even in 

115
00:06:26,800 --> 00:06:29,100
smaller organizations. 
You do you just go to an 

116
00:06:29,100 --> 00:06:32,700
application and get access to 
the crown jewels of the 

117
00:06:32,700 --> 00:06:37,200
organization so you know single 
sign-on and the even privileged 

118
00:06:37,200 --> 00:06:41,900
access to, it's got to be some 
level of Technology there even 

119
00:06:41,900 --> 00:06:45,500
if it's not good, right? 
Even if the end users have to 

120
00:06:45,500 --> 00:06:49,800
have a 2 usernames and passwords
or even if you're doing some 

121
00:06:49,800 --> 00:06:54,600
kind of, you know, not very 
secure way of managing, Shared 

122
00:06:54,600 --> 00:07:00,000
passwords and stuff like that. 
So in that case where you've got

123
00:07:02,100 --> 00:07:05,700
technology but you know it's not
the right or appropriate 

124
00:07:05,700 --> 00:07:08,100
technology. 
I say start with the program 

125
00:07:08,600 --> 00:07:13,400
because then you bring the 
stakeholders to the table, you 

126
00:07:13,500 --> 00:07:17,900
put together a strategy and you 
go through a formal process to 

127
00:07:17,900 --> 00:07:21,200
select the right Technology 
based on your use cases and 

128
00:07:21,200 --> 00:07:24,400
requirements. 
Now, If you're the case where 

129
00:07:24,400 --> 00:07:28,800
you actually have been absolute 
vacuum of technology or you're 

130
00:07:28,800 --> 00:07:31,000
coming up, right? 
Especially smaller. 

131
00:07:31,000 --> 00:07:35,200
Organizations is not going to be
appropriate, probably for 100 

132
00:07:35,200 --> 00:07:40,100
200 person organization to have 
a whole, a lot of hoopla around 

133
00:07:40,100 --> 00:07:45,000
having an I am program, I think 
starting with, you know, ideally

134
00:07:45,000 --> 00:07:50,500
you have a trusted partner who 
knows the landscape well enough 

135
00:07:50,500 --> 00:07:55,100
and can advise you In more of an
informal way rather than going 

136
00:07:55,100 --> 00:07:57,600
through a whole strategy 
development and here are the 

137
00:07:57,600 --> 00:08:01,000
technologies that would be a 
good fit for you that I think 

138
00:08:01,000 --> 00:08:04,700
are, you know, map to your 
technology skill sets or 

139
00:08:05,100 --> 00:08:07,900
whatever. 
And then I think it makes sense 

140
00:08:07,900 --> 00:08:09,300
where you can start with 
technology. 

141
00:08:09,300 --> 00:08:11,900
But I think for again larger 
organizations who find 

142
00:08:11,900 --> 00:08:15,800
themselves, you know, it's kind 
of become laggards in this area 

143
00:08:15,800 --> 00:08:18,100
in terms of their technology 
footprint. 

144
00:08:18,100 --> 00:08:20,800
Starting with a program. 
Really make sense. 

145
00:08:20,800 --> 00:08:22,700
What do you think? 
Yeah, if I did. 

146
00:08:23,100 --> 00:08:26,500
Difficult to believe, there's 
not any technology there. 

147
00:08:26,700 --> 00:08:29,000
You know, active directories, 
probably the most prevalent. 

148
00:08:29,000 --> 00:08:32,500
Most most organizations have 
that, or they have Azure or we 

149
00:08:32,600 --> 00:08:35,100
Google by way of, like, Google 
office or Google mail. 

150
00:08:37,000 --> 00:08:41,799
I guess I still want to start 
with people and process, though,

151
00:08:41,799 --> 00:08:47,500
because If I don't know who owns
identity and who's responsible 

152
00:08:47,500 --> 00:08:51,400
and accountable for those 
Services, it's really tough to 

153
00:08:51,900 --> 00:08:55,500
get anything going from a 
measurement aspect, just have an

154
00:08:55,500 --> 00:08:59,900
accountability aspect, you know,
those sorts of things, I know, 

155
00:08:59,900 --> 00:09:01,600
plenty of organizations, they'll
go off and say, yeah. 

156
00:09:01,600 --> 00:09:05,900
We're going to go by, you know, 
X tool, and there isn't an IM 

157
00:09:05,900 --> 00:09:09,300
program. 
And they sometimes struggle with

158
00:09:09,300 --> 00:09:11,300
that because they don't really 
have any direction. 

159
00:09:11,300 --> 00:09:12,900
They're like, oh yeah, we need a
password tool. 

160
00:09:12,900 --> 00:09:16,700
So we're going to go by LastPass
not to pick on a particular 

161
00:09:16,700 --> 00:09:20,700
company or OCTA, or Duo, right? 
For MFA or whatever is maybe 

162
00:09:20,700 --> 00:09:25,100
they're buying a tactical 
solution and not really thinking

163
00:09:25,100 --> 00:09:28,300
strategically. 
So I tend to lean towards people

164
00:09:28,300 --> 00:09:31,900
and process because my thought 
is lots of companies. 

165
00:09:31,900 --> 00:09:35,300
Get away without having a ton of
I am technology. 

166
00:09:36,000 --> 00:09:38,600
Probably have a syndication, 
like you mentioned, but that's 

167
00:09:38,600 --> 00:09:41,100
companies don't have identity 
Governor's administration 

168
00:09:41,100 --> 00:09:44,300
technology, lots of companies 
still don't Have a you know, a 

169
00:09:44,308 --> 00:09:47,500
privileged access management, 
Vault or session monitoring and 

170
00:09:47,500 --> 00:09:51,200
recording you know capabilities 
or key rotation or Secrets 

171
00:09:51,200 --> 00:09:53,600
management and rotation, you 
know, things like that. 

172
00:09:53,900 --> 00:09:56,700
But they do have people and they
do have processes. 

173
00:09:56,800 --> 00:10:01,500
So even if you know, it is a 
manual environment at least 

174
00:10:01,500 --> 00:10:05,100
there's some direction and some 
accountability for the delivery 

175
00:10:05,700 --> 00:10:08,600
of those admittedly, very manual
services. 

176
00:10:08,600 --> 00:10:12,100
So I like to start with people 
and process because it generally

177
00:10:12,100 --> 00:10:17,500
takes some You know, some buy-in
and some consensus consensus 

178
00:10:17,500 --> 00:10:22,300
building to buy some of these 
more dedicated technologies that

179
00:10:22,300 --> 00:10:24,600
are frankly, getting, you know, 
more and more expensive all 

180
00:10:24,600 --> 00:10:27,000
time. 
So that's tender, you know, 

181
00:10:27,200 --> 00:10:29,100
that's, I guess that's where I 
tend to start. 

182
00:10:29,100 --> 00:10:32,000
But, you know, the Consulting 
answer, it depends. 

183
00:10:32,400 --> 00:10:35,900
But I think in a vacuum, I'd 
want to know who owns, I am. 

184
00:10:35,900 --> 00:10:39,400
And to me that's people and 
process, the IM program itself. 

185
00:10:39,900 --> 00:10:43,300
Yeah, I mean, I think when you 
think about moving up the 

186
00:10:43,500 --> 00:10:47,000
Maturity rankings in terms of 
having a program you're talking 

187
00:10:47,000 --> 00:10:49,800
about, formalizing the program 
making more formal. 

188
00:10:51,500 --> 00:10:55,500
When you think about other areas
of maturity, it's about 

189
00:10:55,500 --> 00:10:59,100
instituting automation, 
automation paper trail, you 

190
00:10:59,100 --> 00:11:01,900
know, things to make it operate 
better. 

191
00:11:02,700 --> 00:11:08,500
In terms of that, that program 
formality, I think the smaller 

192
00:11:08,500 --> 00:11:12,300
more immature organization. 
You still need a strategy, 

193
00:11:12,300 --> 00:11:14,400
right? 
I don't think it makes sense for

194
00:11:14,400 --> 00:11:17,000
anybody to just go out by 
technology and through 

195
00:11:17,000 --> 00:11:20,800
technology as solution and hope 
it works, but you probably don't

196
00:11:20,800 --> 00:11:24,300
need all the formal steps that a
large organization would 

197
00:11:24,700 --> 00:11:28,600
require, you don't need maybe a 
steering committee meeting with 

198
00:11:28,600 --> 00:11:31,000
representative from all these 
different parties. 

199
00:11:31,000 --> 00:11:32,900
You can do it a little more 
informally. 

200
00:11:33,200 --> 00:11:35,700
If you're the technology leader,
you kind of come up with the 

201
00:11:35,700 --> 00:11:39,400
strategy or work with your 
trusted partner to come up with 

202
00:11:39,400 --> 00:11:42,800
the strategy and Start 
implementing it that you're in 

203
00:11:42,800 --> 00:11:45,600
the larger organization, 
especially a global organization

204
00:11:45,600 --> 00:11:49,200
where you've got stakeholders 
different business units or 

205
00:11:49,200 --> 00:11:52,400
different geographies, as well 
as different departments. 

206
00:11:52,700 --> 00:11:56,800
You've got to come up with a way
to keep those folks included. 

207
00:11:57,100 --> 00:12:01,200
You have get their buy-in to the
strategy, keep them, you know, 

208
00:12:01,200 --> 00:12:04,800
knowing understanding what their
involvement has to be going 

209
00:12:04,800 --> 00:12:07,700
forward. 
So you know, I think it's 

210
00:12:08,900 --> 00:12:13,200
Everybody needs a strategy is 
just how much, how much 

211
00:12:13,700 --> 00:12:16,000
formalization do you put around 
that process? 

212
00:12:16,400 --> 00:12:20,300
Depends on where you are in 
terms of your size and maturity 

213
00:12:20,300 --> 00:12:23,800
of an organization. 
You know, I'm glad you mention 

214
00:12:23,800 --> 00:12:28,800
that word formality because they
think sometimes we get stuck in 

215
00:12:28,800 --> 00:12:32,700
sort of like this definition of 
like, oh it's yeah, it's a, it's

216
00:12:32,700 --> 00:12:38,100
a black tie, you know, suits and
super formal and you know, very 

217
00:12:38,100 --> 00:12:41,600
rigid. 
And I hear that all times like 

218
00:12:41,600 --> 00:12:43,800
okay, we need a more formal. 
I am program, but it doesn't 

219
00:12:43,800 --> 00:12:47,200
necessarily mean it is, you 
know, 8 people sitting at a 

220
00:12:47,208 --> 00:12:49,600
conference room, you know, 
raising their thumbs like 

221
00:12:49,600 --> 00:12:52,900
American Idol to say yes or no 
whether or not this project is 

222
00:12:52,900 --> 00:12:56,400
going to go forward, but I do 
think it it that there is some 

223
00:12:56,400 --> 00:13:00,500
structure to the way that the 
program is being run doesn't 

224
00:13:00,500 --> 00:13:03,600
mean that you need to have you 
know suits and ties and all 

225
00:13:03,608 --> 00:13:05,000
that. 
All that fun stuff. 

226
00:13:05,400 --> 00:13:08,500
It can be more informal as long 
as there is. 

227
00:13:08,600 --> 00:13:12,200
Is someone in charge that there 
is some Rhyme or Reason that 

228
00:13:12,200 --> 00:13:13,900
things are moving forward. 
You're right. 

229
00:13:13,900 --> 00:13:16,500
You don't need, you know, all 
that hoopla. 

230
00:13:16,500 --> 00:13:20,200
As you mentioned for the smaller
organizations, you might have it

231
00:13:20,200 --> 00:13:21,900
that you're worried, you know, 
wearing multiple hats Etc. 

232
00:13:21,900 --> 00:13:25,000
So I'm glad you got to pick up 
because I sometimes struggle 

233
00:13:25,000 --> 00:13:27,000
with that word and kind of 
talking with clients. 

234
00:13:27,000 --> 00:13:30,100
Okay, well you know we got to 
get just more formal with the 

235
00:13:30,100 --> 00:13:33,300
identity program itself, but 
what does that actually mean a 

236
00:13:33,300 --> 00:13:35,900
real world doesn't necessarily 
mean you know death by committee

237
00:13:36,500 --> 00:13:39,300
or, you know, 800 steps to get? 
Anything done. 

238
00:13:39,300 --> 00:13:42,100
I think it just means having 
more structure to the program 

239
00:13:42,100 --> 00:13:45,100
and maybe and maybe structures a
better word when it comes to, 

240
00:13:45,600 --> 00:13:47,800
you know, hey, let's let's make 
sure we have a more structured. 

241
00:13:47,800 --> 00:13:52,300
I am program that there is some,
some guidelines are rails to 

242
00:13:52,300 --> 00:13:55,300
keep people on. 
Yeah, well I think, you know, 

243
00:13:55,300 --> 00:13:59,700
the bigger organ bigger, the 
organization is the more that 

244
00:13:59,700 --> 00:14:02,300
structure is going to be 
important? 

245
00:14:02,500 --> 00:14:06,700
The, you know, let's take this 
example, you know, the way I 

246
00:14:06,708 --> 00:14:10,300
like to run, I am program. 
In the larger organizations you 

247
00:14:10,300 --> 00:14:12,100
have a set of policies and 
standards. 

248
00:14:12,700 --> 00:14:17,400
This policy is to standards are 
meant to be applied to all of 

249
00:14:17,400 --> 00:14:19,200
your technology. 
So if you have a password 

250
00:14:19,200 --> 00:14:23,900
policy, for example, pastors got
to be 12 characters, long, that 

251
00:14:23,900 --> 00:14:28,300
applies to every system in your 
organization right now. 

252
00:14:29,000 --> 00:14:33,400
You may have a group that runs a
Mainframe that can only do an 

253
00:14:33,400 --> 00:14:36,400
eight character password. 
I'm picking on this because it's

254
00:14:36,400 --> 00:14:40,500
such a common example, right? 
I'm system only allows an eight 

255
00:14:40,500 --> 00:14:43,800
character password can live with
the cat password policy can 

256
00:14:43,800 --> 00:14:45,800
integrate to your SSO 
technology. 

257
00:14:46,600 --> 00:14:50,200
I think the proper solution is 
that they should have to apply 

258
00:14:50,200 --> 00:14:53,200
for a formal exception, you 
know. 

259
00:14:53,300 --> 00:14:56,700
Now if you're in a 200-person 
organization, that's that's 

260
00:14:56,700 --> 00:14:59,500
Overkill, right? 
And it's what's the point. 

261
00:14:59,500 --> 00:15:02,400
It's like you've only got so 
many applications that you need 

262
00:15:02,400 --> 00:15:06,200
to manage, but if you're an 
organization with, you know, 

263
00:15:06,600 --> 00:15:10,600
hundreds or even thousands of 
applications, you know, you've 

264
00:15:10,600 --> 00:15:13,200
really got to run things through
the formal process. 

265
00:15:14,500 --> 00:15:16,700
How do you attract it right and 
I think even if you're just 

266
00:15:17,100 --> 00:15:19,600
writing it down on a piece of 
paper it's okay. 

267
00:15:19,900 --> 00:15:22,700
We know that there is this app 
out there, you know, we're not 

268
00:15:22,700 --> 00:15:25,000
going to formally manage it but 
at least we know about it. 

269
00:15:25,300 --> 00:15:28,100
I think that's just having that 
structure in the process to it 

270
00:15:28,100 --> 00:15:30,300
and kind of grow into it. 
I don't think it's something you

271
00:15:30,308 --> 00:15:33,400
need to like, solve overnight, 
but I think you should start to 

272
00:15:33,400 --> 00:15:35,500
think about as the organization 
grows. 

273
00:15:35,500 --> 00:15:37,800
Maybe you're not going to be a 
200 person or a 50-person 

274
00:15:37,800 --> 00:15:41,000
organization forever. 
You know, maybe the you do grow 

275
00:15:41,000 --> 00:15:44,500
at some point, the sooner you 
start to have structure The 

276
00:15:44,500 --> 00:15:47,500
easier it will be to kind of 
grow and mature, that sort of 

277
00:15:47,500 --> 00:15:48,400
thing. 
Yeah. 

278
00:15:50,000 --> 00:15:51,700
Any other question. 
That is a mailbag. 

279
00:15:52,700 --> 00:15:54,700
Yeah let's go do Andrew and 
Georgia. 

280
00:15:54,700 --> 00:15:58,100
I like this question because 
this is something that I like to

281
00:15:58,100 --> 00:16:02,500
ask when I'm talking with 
customers to is he asks this our

282
00:16:02,500 --> 00:16:06,200
social media accounts in the 
scope of I am I think. 

283
00:16:06,200 --> 00:16:08,200
Yes. 
But my management disagrees. 

284
00:16:08,200 --> 00:16:12,100
What are your thoughts? 
So Jim, our social media 

285
00:16:12,100 --> 00:16:15,600
accounts in the scope of I am, 
do you side with Andrew? 

286
00:16:16,000 --> 00:16:18,200
Or are you management? 
Boo. 

287
00:16:19,800 --> 00:16:23,600
Well I think it's I think it's a
great question because I don't 

288
00:16:23,700 --> 00:16:27,900
think there's one answer. 
Here's what I kind of think. 

289
00:16:27,900 --> 00:16:33,800
I don't think it's in the core 
of what most I am programs are 

290
00:16:33,800 --> 00:16:37,100
focused on most. 
I am programs are going to be 

291
00:16:37,100 --> 00:16:41,900
focused on the use case around, 
you know, employee access. 

292
00:16:42,600 --> 00:16:46,000
Now, views, the broad definition
of who has access to what is 

293
00:16:46,000 --> 00:16:50,200
definitely included in that. 
So is also included is Is all 

294
00:16:50,200 --> 00:16:53,500
the people who work for your 
company if they have access to, 

295
00:16:54,000 --> 00:16:59,200
you know, Wells Fargo and Bank 
of America systems or other 

296
00:16:59,200 --> 00:17:00,700
systems. 
Are they have accounts that were

297
00:17:00,700 --> 00:17:05,000
issued by other companies. 
So you should be managing all 

298
00:17:05,000 --> 00:17:08,500
that as well as your social 
media, I guess where I'm going 

299
00:17:08,500 --> 00:17:12,000
with it is that I don't think 
it's core scope of I am, but I 

300
00:17:12,000 --> 00:17:13,700
do think it eventually gets 
there. 

301
00:17:13,900 --> 00:17:16,900
So, if you're building, if 
you're starting from very 

302
00:17:16,900 --> 00:17:20,099
immature Point, you're probably 
not all the There. 

303
00:17:20,300 --> 00:17:23,200
So, I guess what I'm saying is 
that, if you're an organization,

304
00:17:23,200 --> 00:17:26,900
that is very much in the public 
eye, it becomes much more 

305
00:17:26,900 --> 00:17:29,200
important that you're able to 
manage those social media 

306
00:17:29,200 --> 00:17:31,900
accounts. 
But I'd say also, you really 

307
00:17:31,900 --> 00:17:35,500
have to work with the team, say 
use them to make sure it's a 

308
00:17:35,500 --> 00:17:38,400
good user experience, right? 
It can't be like, hey the 

309
00:17:38,400 --> 00:17:41,700
person's got to go to cyber-ark 
to check out a password to use 

310
00:17:41,700 --> 00:17:45,300
the Twitter account. 
That's just not that's not going

311
00:17:45,300 --> 00:17:47,700
to flow well enough. 
So you have to look at Solutions

312
00:17:47,700 --> 00:17:50,700
designed specifically For social
media. 

313
00:17:51,300 --> 00:17:54,900
Yeah, I'll be honest I was not 
with you until you added your 

314
00:17:54,900 --> 00:17:59,500
caveat at the end about, you 
know, social media being a core 

315
00:17:59,500 --> 00:18:01,400
use case. 
Definitely that I think it is 

316
00:18:01,400 --> 00:18:05,400
that the scope. 
I think in general should be in 

317
00:18:05,400 --> 00:18:09,100
scope, but I think after Define 
what that scope is, are you 

318
00:18:09,100 --> 00:18:12,400
actively managing the account, 
or are you providing guidance to

319
00:18:12,400 --> 00:18:15,500
the team probably marketing or 
Communications? 

320
00:18:15,600 --> 00:18:17,500
That is actually controlling the
account? 

321
00:18:17,800 --> 00:18:21,400
I think at a minimum you're at 
Providing guidance and a set of 

322
00:18:21,900 --> 00:18:25,800
policies procedures standards, 
whatever may be for them to 

323
00:18:25,800 --> 00:18:29,600
follow that aligns with your I 
am program policy and standards.

324
00:18:30,200 --> 00:18:33,100
Make sure MFA is turned on. 
Make sure that if you know, 

325
00:18:33,100 --> 00:18:35,400
there's a review of who has 
access to those accounts and 

326
00:18:35,400 --> 00:18:37,400
that they're not posting stupid 
stuff because we see that all 

327
00:18:37,408 --> 00:18:40,000
the time, you know some is 
getting breach making sure they 

328
00:18:40,000 --> 00:18:42,800
have MFA. 
So those breaches are, you know,

329
00:18:42,800 --> 00:18:45,700
minimize the chances of it, 
those sorts of things, there are

330
00:18:45,708 --> 00:18:49,100
certainly dedicated tools out 
there to manage those accounts. 

331
00:18:49,300 --> 00:18:52,200
But They are pretty specific it 
surprises. 

332
00:18:52,200 --> 00:18:55,000
Me a little bit that the 
privileged access management 

333
00:18:55,000 --> 00:19:00,300
players, the big ones, like 
cyber-ark Beyond, trust de línea

334
00:19:00,500 --> 00:19:04,100
formerly known as psychotic and 
centrify and others. 

335
00:19:04,700 --> 00:19:09,500
Haven't really embraced figuring
out how to manage those use 

336
00:19:09,500 --> 00:19:11,300
cases. 
Some of those social media type 

337
00:19:11,300 --> 00:19:14,800
of cats, more directly rather 
than just having a simple Vault.

338
00:19:16,800 --> 00:19:19,200
It's not it's not an area that 
I'm next in an expert on from a 

339
00:19:19,208 --> 00:19:22,100
technology Standpoint but you 
have things like HootSuite that 

340
00:19:22,100 --> 00:19:25,300
has some capabilities out there 
that you know, can probably help

341
00:19:25,300 --> 00:19:27,100
out. 
I know there's another one 

342
00:19:27,100 --> 00:19:29,100
actually there was somebody who 
reached out on LinkedIn 

343
00:19:29,300 --> 00:19:32,800
recently, we got to get in touch
with that person and maybe get 

344
00:19:32,800 --> 00:19:35,000
them on to talk about kind of 
management of social media 

345
00:19:35,000 --> 00:19:38,500
accounts from an identity 
perspective but I do think they 

346
00:19:38,500 --> 00:19:43,100
should be at a minimum governed 
by policy and standards, but 

347
00:19:43,100 --> 00:19:47,200
they should not be forgotten and
just left for some other team to

348
00:19:47,200 --> 00:19:49,500
kind of figure out, I think they
should be included. 

349
00:19:49,600 --> 00:19:52,700
Part of the strategy. 
Yeah, I totally agree with you. 

350
00:19:52,700 --> 00:19:56,700
I mean, see you have the 
advantage that I have to go and 

351
00:19:56,700 --> 00:19:59,200
answer first and then you get to
just. 

352
00:20:00,700 --> 00:20:02,700
Yeah. 
So, so yeah, I mean, what you 

353
00:20:02,700 --> 00:20:07,300
just said, there were two, the 
my mind went right to, okay, how

354
00:20:07,300 --> 00:20:11,000
do you get to a point where 
you're actually responsible for 

355
00:20:11,000 --> 00:20:16,000
managing them which is much 
harder than, you know, having a 

356
00:20:16,000 --> 00:20:18,600
policy in place in having a 
policy in place. 

357
00:20:18,800 --> 00:20:23,900
Let's let's Be frank is like 
there's no money involved with 

358
00:20:23,900 --> 00:20:28,900
putting a policy in place and 
even tracking whether or not the

359
00:20:28,900 --> 00:20:32,700
policies being followed is not 
that much. 

360
00:20:33,500 --> 00:20:34,800
There's not that much of an 
investment. 

361
00:20:34,800 --> 00:20:39,400
They're now in terms of using 
technology to do it to deal with

362
00:20:39,400 --> 00:20:41,600
essentially what I think are 
going to be shared accounts, 

363
00:20:41,600 --> 00:20:43,800
right? 
Because let's imagine you're a 

364
00:20:43,800 --> 00:20:47,600
sports league and you've got 
social media. 

365
00:20:47,600 --> 00:20:49,300
Like you've got a Twitter 
account. 

366
00:20:49,600 --> 00:20:54,700
And you, you know, are taking 
pictures from games or videos 

367
00:20:54,700 --> 00:20:57,900
from games and you want to get 
them post on the Twitter. 

368
00:20:58,600 --> 00:21:00,900
I'm not sure exactly how most is
lease work. 

369
00:21:00,900 --> 00:21:04,300
If they've got 30 people or 15 
people who are at all the 

370
00:21:04,300 --> 00:21:07,400
different games who could 
potentially do that or if it 

371
00:21:07,400 --> 00:21:10,600
gets funneled back to some 
Central source and they post it.

372
00:21:10,600 --> 00:21:15,700
But the more bureaucracy that is
involved with that process. 

373
00:21:16,700 --> 00:21:20,200
The slower is going to be to get
that video online and like the 

374
00:21:20,200 --> 00:21:24,100
name of the game I think is got 
to be speed to getting it online

375
00:21:24,100 --> 00:21:27,300
before somebody else goes and 
seals Earth under our if it 

376
00:21:27,300 --> 00:21:31,400
takes 12 hours to get a 5 second
video online, then, what's the 

377
00:21:31,400 --> 00:21:34,700
point? 
Yeah, that title in us. 

378
00:21:34,700 --> 00:21:37,400
I think of the delivery of the 
content is obviously important 

379
00:21:37,400 --> 00:21:40,900
social. 
Yeah, I guess that wasn't 

380
00:21:40,900 --> 00:21:42,500
thinking about actively managing
it. 

381
00:21:42,500 --> 00:21:45,500
I think that frankly is a losing
battle right now. 

382
00:21:45,500 --> 00:21:53,000
If you don't have specialized 
social media technology identity

383
00:21:53,100 --> 00:21:56,600
controls, like you're trying to 
do it through your average 

384
00:21:56,600 --> 00:22:00,600
access management, or identity, 
governance, or even produce at 

385
00:22:00,600 --> 00:22:02,200
privileged access management 
tools. 

386
00:22:02,500 --> 00:22:06,000
I don't think, It's a winning 
fight right now, but I do think 

387
00:22:06,000 --> 00:22:08,000
they should at least be a 
counter for form a strategy from

388
00:22:08,000 --> 00:22:10,600
a program perspective. 
And then you know the 

389
00:22:10,600 --> 00:22:13,100
organization aside for they want
to make the investment in 

390
00:22:13,600 --> 00:22:17,300
asbestos specific tool that 
covers those specific use cases 

391
00:22:17,700 --> 00:22:20,200
or not. 
I think it really we have to 

392
00:22:20,200 --> 00:22:23,700
get, I'm guessing you also don't
need to give someone on who can 

393
00:22:23,700 --> 00:22:27,400
kind of give us the lay of the 
landscape in terms of the 

394
00:22:27,400 --> 00:22:31,500
technology that's available. you
know, the circuit manager but 

395
00:22:31,500 --> 00:22:35,000
you're right on but the in terms
of the policy I think what I 

396
00:22:35,008 --> 00:22:39,100
was, you know, where my head was
with Andrews question was you 

397
00:22:39,100 --> 00:22:42,600
know, if I'm a company that 
somewhere in the United States 

398
00:22:42,600 --> 00:22:46,900
and we make boxes Like, you 
know, all right. 

399
00:22:46,900 --> 00:22:51,400
And they called me in to put 
together and I am strategy. 

400
00:22:52,200 --> 00:22:57,700
My big Focus isn't going to be 
on their Twitter account, Right 

401
00:22:57,700 --> 00:23:04,300
and it's it's way out in terms 
of of priority. 

402
00:23:04,300 --> 00:23:09,400
However if you're obviously the 
higher profile company the more 

403
00:23:10,400 --> 00:23:13,300
The more you are a target for 
those social media account 

404
00:23:13,800 --> 00:23:17,300
hacks. 
I think I at least take a minute

405
00:23:17,300 --> 00:23:21,300
to ask the question and find out
and if I'm comfortable with 

406
00:23:21,300 --> 00:23:23,500
what's being done and the 
controls, you know, something 

407
00:23:23,500 --> 00:23:26,900
about like from a either, an I 
am program manager or maybe a c,

408
00:23:26,900 --> 00:23:31,300
so I have a lot of targets, 
right? 

409
00:23:31,300 --> 00:23:34,100
It may not be the highest 
priority, but at least I asked 

410
00:23:34,100 --> 00:23:38,500
the question and sort of make a 
mental note of where that is and

411
00:23:38,500 --> 00:23:42,600
maybe if I'm not using enough, a
baby us, the media thing get MFA

412
00:23:42,600 --> 00:23:45,700
in that account and will Come 
talk to you in a couple of 

413
00:23:45,708 --> 00:23:47,900
years, right? 
But at least get MFA. 

414
00:23:48,000 --> 00:23:51,300
I'm going to say is I would at 
least ask a basic question and 

415
00:23:51,300 --> 00:23:55,200
then move on to things that 
might be more strategic from an 

416
00:23:55,200 --> 00:23:56,500
identity perspective, for 
example. 

417
00:23:56,500 --> 00:23:59,600
Yeah, we're Emma faking can 
start to be a real headache, 

418
00:23:59,600 --> 00:24:00,900
though. 
We did talk about this. 

419
00:24:00,900 --> 00:24:03,500
In our MFA discussion is shared 
accounts. 

420
00:24:04,000 --> 00:24:06,000
So if you're using it I'm using 
it. 

421
00:24:06,000 --> 00:24:08,400
All right? 
Well because the SMS text. 

422
00:24:09,500 --> 00:24:12,100
Yeah, exactly. 
Hey and by the way your you know

423
00:24:12,100 --> 00:24:16,000
here's it maybe this is a little
bit of banter but You're 

424
00:24:16,000 --> 00:24:18,200
controlling the questions in the
mail bag. 

425
00:24:18,200 --> 00:24:22,200
But I just got a message from 
Matt asking. 

426
00:24:22,700 --> 00:24:25,300
Oh, so you and Jeff both went to
RSM. 

427
00:24:25,500 --> 00:24:29,600
What's going to happen to the 
podcast while we are still 

428
00:24:29,600 --> 00:24:35,800
actively recording at as we 
speak as as both employees of 

429
00:24:35,800 --> 00:24:37,200
RSM. 
So, that's what's happening with

430
00:24:37,200 --> 00:24:39,000
the podcast. 
Yeah, nothing is happening. 

431
00:24:39,000 --> 00:24:42,100
We are going to continue to do 
this as we have for the last 

432
00:24:42,100 --> 00:24:45,000
three years. 
We just celebrated our A 

433
00:24:45,000 --> 00:24:46,900
birthday. 
This is episode 155. 

434
00:24:46,900 --> 00:24:51,200
I think we're averaging like 1.1
episodes per week. 

435
00:24:51,200 --> 00:24:54,500
If you do sort of like the math,
but yeah, the plan is to keep 

436
00:24:54,500 --> 00:24:58,200
this going to still keep it, you
know, as weekly is as we can as 

437
00:24:58,200 --> 00:25:01,400
we have over the years. 
So no changes not anticipating 

438
00:25:01,400 --> 00:25:06,200
any huge, you know, commercials 
or branding exercise, or things 

439
00:25:06,200 --> 00:25:07,500
like that. 
I'm sure we might talk about 

440
00:25:07,500 --> 00:25:10,600
some things in the future, but 
it'll be the same, you know, 

441
00:25:10,600 --> 00:25:14,700
vendor-neutral Jim and Geoff, 
show, you know, that we run kind

442
00:25:14,700 --> 00:25:17,500
of Dependent from from our real 
jobs. 

443
00:25:17,700 --> 00:25:20,100
So good question. 
I'm glad somebody brought that 

444
00:25:20,100 --> 00:25:20,900
up. 
Yeah. 

445
00:25:22,200 --> 00:25:23,900
All right. 
Anything else in the mailbag? 

446
00:25:24,900 --> 00:25:30,300
Yeah, let's do one more here on 
Nigel in Belgium where this is a

447
00:25:30,308 --> 00:25:33,700
good one. 
Where does privacy sit within an

448
00:25:33,700 --> 00:25:35,700
organization? 
Should the? 

449
00:25:35,700 --> 00:25:40,700
I am team own that generally, I 
would say no, the am team 

450
00:25:40,700 --> 00:25:44,500
doesn't own privacy, there's 
going to be, you know, a bigger 

451
00:25:44,500 --> 00:25:47,100
organization show up, like, 
Chief privacy officer and a 

452
00:25:47,108 --> 00:25:55,500
whole privacy team that I think,
Am has privacy is a stakeholder.

453
00:25:56,000 --> 00:26:00,500
Is our privacy is going to 
provide requirements. 

454
00:26:00,800 --> 00:26:04,900
I think getting them involved 
early in the development of your

455
00:26:04,900 --> 00:26:07,400
strategy is the way to go. 
If you already have your 

456
00:26:07,400 --> 00:26:10,900
strategy developed, you don't 
work with them to make sure that

457
00:26:11,300 --> 00:26:14,200
they support the strategy that 
it accomplishes. 

458
00:26:14,400 --> 00:26:17,700
I think the other thing to be 
aware of is that there are 

459
00:26:17,700 --> 00:26:21,800
spaces, evolving even more 
quickly than than ours. 

460
00:26:22,000 --> 00:26:24,900
As with the I am digital 
identity space. 

461
00:26:25,200 --> 00:26:28,500
I am digital identity is 
definitely evolving quickly by 

462
00:26:28,500 --> 00:26:32,700
privacy keeps evolving even more
quick than that because, you 

463
00:26:32,708 --> 00:26:36,000
know, states and countries are 
constantly putting out new 

464
00:26:36,000 --> 00:26:38,700
regulations and it's changing 
that landscape. 

465
00:26:38,700 --> 00:26:43,600
So that could be impacting the 
regulatory environment with the 

466
00:26:43,600 --> 00:26:48,400
legal environment for your 
organization and your, I am team

467
00:26:48,400 --> 00:26:52,200
needs to adapt to that. 
So, Yeah I think it's it's a 

468
00:26:52,200 --> 00:26:54,800
matter of working had to have 
with privacy. 

469
00:26:55,500 --> 00:26:58,500
Yeah, I agree with that. 
I think the overlap becomes a 

470
00:26:58,508 --> 00:27:00,500
little stronger. 
If you're thinking about it from

471
00:27:00,500 --> 00:27:05,500
a customer, I'd any perspective 
where those controls need to be 

472
00:27:05,500 --> 00:27:08,400
built potentially into like a 
profile management system or 

473
00:27:08,400 --> 00:27:12,200
something like that. 
I see a greater hand in the 

474
00:27:12,200 --> 00:27:16,900
steerage, maybe of how that 
might work within the concept or

475
00:27:16,900 --> 00:27:20,300
the cotton that the framework of
what the I am programs. 

476
00:27:20,400 --> 00:27:22,600
Looking to accomplish with the 
customers probably less Sony 

477
00:27:22,600 --> 00:27:26,200
employee side because they don't
think I typically see privacy 

478
00:27:26,200 --> 00:27:30,100
management for the employee, but
definitely the customer side. 

479
00:27:30,100 --> 00:27:33,600
I would say I agree though. 
I don't think I am owns it. 

480
00:27:33,600 --> 00:27:38,400
I think they're a partner in 
potentially delivering some of 

481
00:27:38,400 --> 00:27:43,100
the services behind it from a 
user, just user experience 

482
00:27:43,100 --> 00:27:46,800
perspective, maybe or storage, 
maybe of certain bits of data 

483
00:27:46,800 --> 00:27:50,700
within like, a master user 
directory or profile or It may 

484
00:27:50,708 --> 00:27:53,900
be that sort of thing. 
Yeah, I think I've been involved

485
00:27:53,900 --> 00:27:57,600
with enough projects where as 
this whole privacy landscape 

486
00:27:57,600 --> 00:28:01,300
from GDP are on, has evolved for
a. 

487
00:28:01,700 --> 00:28:06,300
And when I am teams kind of, get
in their own sphere of trying to

488
00:28:06,300 --> 00:28:08,700
solve, okay? 
What is our privacy landscape? 

489
00:28:08,700 --> 00:28:10,000
And what how do we have to build
our? 

490
00:28:10,000 --> 00:28:14,800
I am systems, it can really 
throw a whole wrench in the 

491
00:28:14,800 --> 00:28:19,000
works in terms of data residency
and things like that and do like

492
00:28:19,000 --> 00:28:23,900
you just don't have The 
knowledge to answer those 

493
00:28:23,900 --> 00:28:28,400
questions as beneficial to be 
able to go to somebody who can 

494
00:28:28,400 --> 00:28:32,800
speak authoritatively on this, 
is how these regulations affect 

495
00:28:32,800 --> 00:28:38,000
our company and how we need to 
address them in terms of our 

496
00:28:38,000 --> 00:28:42,100
system deployment. 
And so if you have a privacy 

497
00:28:42,100 --> 00:28:45,600
office that's you know the 
starting point. 

498
00:28:45,600 --> 00:28:48,800
I also think you know, if you 
don't essentially pulling in 

499
00:28:48,800 --> 00:28:52,200
somebody from your legal team, 
whose Is responsible for how 

500
00:28:52,200 --> 00:28:55,900
those regulations affect your 
company is going to be key? 

501
00:28:56,500 --> 00:28:58,600
Yeah, it's all agree. 
It's hard to be an expert in 

502
00:28:58,600 --> 00:29:01,500
everything. 
Privacy is evolving so quickly 

503
00:29:01,500 --> 00:29:06,100
and the methods with which to 
control that and the laws around

504
00:29:06,100 --> 00:29:08,500
the world are constantly 
changing seems like there's a 

505
00:29:08,500 --> 00:29:12,100
new one popping up every six 
months or a year or so different

506
00:29:12,100 --> 00:29:16,100
countries. 
So it goes, I think for me, I 

507
00:29:16,100 --> 00:29:20,100
think about it from a base use 
case perspective because this is

508
00:29:20,100 --> 00:29:22,900
like a Not that. 
I think I hear a lot is, you 

509
00:29:22,900 --> 00:29:25,100
know, how we're going to manage 
all these different privacy 

510
00:29:25,100 --> 00:29:28,600
regulations. 
And my general guidance is, 

511
00:29:28,600 --> 00:29:31,300
they're all pretty similar. 
It's really about making sure 

512
00:29:31,300 --> 00:29:32,800
you have the appropriate audit 
Trail. 

513
00:29:33,100 --> 00:29:35,900
You've got the appropriate, you 
know, controls to be able to 

514
00:29:36,400 --> 00:29:41,100
remove, or, you know, or 
obfuscate data based on the 

515
00:29:41,100 --> 00:29:42,200
user. 
Those sorts of things. 

516
00:29:42,900 --> 00:29:46,100
If you can do those basic 
things, chances are, you're 

517
00:29:46,100 --> 00:29:50,100
probably in a much better 
position to comply with 

518
00:29:50,100 --> 00:29:53,000
whatever. 
Privacy regulations come up, and

519
00:29:53,000 --> 00:29:57,700
those are sort of like base, you
know, Plumbing essentially, from

520
00:29:57,700 --> 00:30:00,400
add any perspective. 
No, those are great points. 

521
00:30:01,100 --> 00:30:02,700
All right, why don't you? 
Go ahead and wrap it up for this

522
00:30:02,700 --> 00:30:06,000
week. 
Thanks to Joe, Andrew Nigel. 

523
00:30:06,000 --> 00:30:09,700
And and a few others who said 
two questions in before we go. 

524
00:30:09,900 --> 00:30:13,300
I Jim I know that you I just 
moved, I think you're looking at

525
00:30:13,300 --> 00:30:17,100
moving soon and we're going to 
go positive this week because I 

526
00:30:17,108 --> 00:30:20,000
think when people think about 
moving they think of ways I do 

527
00:30:20,000 --> 00:30:22,100
it maybe. 
Hassles that go on with it. 

528
00:30:22,100 --> 00:30:24,200
Right? 
You know, it moving stinks or 

529
00:30:24,500 --> 00:30:27,200
you know, whatever maybe. 
But what's your favorite thing 

530
00:30:27,400 --> 00:30:29,800
about moving everything about 
moving. 

531
00:30:29,800 --> 00:30:31,700
It was top views. 
I'm one of those people who 

532
00:30:32,300 --> 00:30:38,100
might my general belief is that?
We can all agree that moving is 

533
00:30:38,100 --> 00:30:43,000
being the neck are. 
So yeah, I could easily get 

534
00:30:43,000 --> 00:30:47,700
dragged into that. 
That - but I think if you think 

535
00:30:47,700 --> 00:30:51,900
about Moving from the 
standpoint, not the the act of 

536
00:30:51,900 --> 00:30:55,500
moving, because the act of 
moving, I don't think, I think 

537
00:30:55,500 --> 00:30:58,100
you have to be a sadist to think
that's fine. 

538
00:30:59,000 --> 00:31:02,600
But if you think about the end 
product of moving, it's like 

539
00:31:02,600 --> 00:31:05,800
you're moving. 
Hopefully to have a better life 

540
00:31:06,200 --> 00:31:10,200
and I'm thinking, you know, with
my move like the company that 

541
00:31:10,300 --> 00:31:14,300
does my trash pick up some 
weeks, they just don't show up. 

542
00:31:14,400 --> 00:31:17,200
And so I have a trash can that's
like overflowing with trash from

543
00:31:17,500 --> 00:31:19,000
really hoping that that's not 
going. 

544
00:31:19,200 --> 00:31:24,000
Happen anymore. 
My internet my Wi-Fi, you know, 

545
00:31:24,000 --> 00:31:28,600
good once a month I'll just be 
garbage for an entire day and 

546
00:31:28,600 --> 00:31:33,300
it's really hard to do customer 
calls and things like that when 

547
00:31:33,300 --> 00:31:37,500
your Wi-Fi is just going up and 
down all day, so hopefully my 

548
00:31:37,500 --> 00:31:39,400
Wi-Fi. 
Provider will be better. 

549
00:31:39,900 --> 00:31:43,700
And I, you know, when I think 
about that I'm like, I know 

550
00:31:43,700 --> 00:31:46,200
people like you've gotta live in
the moment. 

551
00:31:46,400 --> 00:31:50,000
I've been hearing this advice on
my life and I I think it's good 

552
00:31:50,000 --> 00:31:52,900
advice because you don't, 
otherwise, you'd like just B's 

553
00:31:52,900 --> 00:31:55,200
by you. 
But when you're in these times, 

554
00:31:55,200 --> 00:31:59,300
where it's like, time to hunker 
down, just get stuff done, and 

555
00:31:59,300 --> 00:32:01,900
maybe your circumstances aren't 
that. 

556
00:32:01,900 --> 00:32:03,400
Great. 
Like you're in the middle of a 

557
00:32:03,400 --> 00:32:06,800
move or, you know, whatever 
reason. 

558
00:32:08,100 --> 00:32:12,100
Don't live in the moment, living
like this picture of the future 

559
00:32:12,100 --> 00:32:16,300
of where you're heading. 
And if you're not happy with 

560
00:32:16,300 --> 00:32:20,400
where you are, don't fixate on 
the fact that you're not happy 

561
00:32:20,400 --> 00:32:22,500
where you are think about where 
you're going. 

562
00:32:22,900 --> 00:32:26,500
And so that's what I also like 
about movie is like isn't a 

563
00:32:26,500 --> 00:32:31,000
picture of like, where I'm going
is going to be better and I can 

564
00:32:31,000 --> 00:32:35,200
go through kind of those hard 
times to get to that that better

565
00:32:35,200 --> 00:32:37,600
state. 
Sounds to me like you're full of

566
00:32:37,600 --> 00:32:42,400
Hope when you're moving hope for
better things that I think 

567
00:32:42,400 --> 00:32:45,500
that's a good outlook. 
I think for me, I think the best

568
00:32:45,500 --> 00:32:48,800
thing is it's a good opportunity
to like clean house. 

569
00:32:48,900 --> 00:32:52,100
Get rid of drawers, full of crap
that you don't need. 

570
00:32:52,200 --> 00:32:53,200
You know, everybody think 
everybody. 

571
00:32:53,200 --> 00:32:57,900
This point has like that box of 
cables that they've stored, the 

572
00:32:57,900 --> 00:33:02,200
like, oh, here's my, you know, 
USB type B cable from like 20 

573
00:33:02,200 --> 00:33:04,400
years ago. 
Well, maybe I might need that if

574
00:33:04,400 --> 00:33:07,800
it's been in a box for 20 years,
Or five years or whatever it is 

575
00:33:07,800 --> 00:33:09,600
you probably don't need it. 
Probably a good idea to like 

576
00:33:09,600 --> 00:33:12,000
Purge or recycle you know, some 
of that stuff. 

577
00:33:12,000 --> 00:33:15,700
So I certainly did that. 
I cleaned, I cleaned the major 

578
00:33:15,700 --> 00:33:18,800
house when I moved. 
Like I just had you know, 

579
00:33:19,000 --> 00:33:22,900
Decades of just stuff as I can. 
I haven't used it. 

580
00:33:23,000 --> 00:33:28,700
It's time to go and so I think I
think that that that fret that 

581
00:33:28,700 --> 00:33:32,100
helps with a fresh start to, 
it's like, okay we've we're not 

582
00:33:32,100 --> 00:33:35,300
bringing that baggage literally,
you know, with us to the new 

583
00:33:35,300 --> 00:33:37,400
place. 
Is, you know, start with a 

584
00:33:37,400 --> 00:33:39,000
little bit more of a clean 
slate, which is always kind of 

585
00:33:39,008 --> 00:33:40,900
cool. 
I don't know about that man. 

586
00:33:40,900 --> 00:33:44,900
I'd never through cables way and
I've had so, especially plugs. 

587
00:33:45,200 --> 00:33:49,000
So if you a plug that in the 
other end has some kind of 

588
00:33:49,000 --> 00:33:51,900
random connection. 
You just never know when that's 

589
00:33:51,900 --> 00:33:54,800
going to come in handy. 
Yeah, that's true. 

590
00:33:55,200 --> 00:33:57,000
I, you know, I just, I bit the 
bullet. 

591
00:33:57,000 --> 00:33:59,700
It was just kind of, like, I had
so many cables. 

592
00:33:59,700 --> 00:34:01,500
It's like, okay, well, maybe 
I'll use that. 

593
00:34:01,800 --> 00:34:04,300
And I downside integrator, get 
rid of them all. 

594
00:34:04,400 --> 00:34:07,600
So now I have like, Box with 
cables. 

595
00:34:07,600 --> 00:34:12,300
I have a box with like power 
related items but not only have 

596
00:34:12,300 --> 00:34:15,300
one box of each instead of like 
multiple. 

597
00:34:15,300 --> 00:34:19,600
So I feel like I made progress 
and, you know, now I'm starting 

598
00:34:19,600 --> 00:34:22,100
to pull some that stuff out and 
kind of redeploy. 

599
00:34:22,199 --> 00:34:24,100
You know how things are in the 
new house we got. 

600
00:34:24,100 --> 00:34:26,800
So I like that and you actually 
know where it is now. 

601
00:34:27,800 --> 00:34:29,600
Yeah. 
Try to be a little more 

602
00:34:29,600 --> 00:34:31,800
organized with some. 
That stuff was good. 

603
00:34:31,800 --> 00:34:33,500
It was good opportunity to like,
okay. 

604
00:34:34,199 --> 00:34:36,900
You know, you start, I still 
have a junk drawer. 

605
00:34:36,900 --> 00:34:38,800
So of course, you know, it's 
like my odds and ends everything

606
00:34:38,800 --> 00:34:40,500
goes in there. 
But try to be a little more 

607
00:34:40,500 --> 00:34:43,000
consistent with what I'm doing 
with other stuff but I'm still 

608
00:34:43,000 --> 00:34:45,500
working on my office and the new
place I haven't been home much 

609
00:34:46,199 --> 00:34:47,900
for the last few weeks since we 
moved because I've been on the 

610
00:34:47,900 --> 00:34:52,100
road as I come to you live from 
Racine Wisconsin as I record 

611
00:34:52,100 --> 00:34:56,000
this in a hotel. 
So I'm looking forward to having

612
00:34:56,000 --> 00:34:59,700
a couple days at home at some 
point till today to work on what

613
00:34:59,700 --> 00:35:06,100
is your Racine Wisconsin known 
for Well, let's see Frank Lloyd 

614
00:35:06,100 --> 00:35:07,900
Wright. 
Probably, because this is where 

615
00:35:07,900 --> 00:35:11,900
lots of his architecture resides
from homes. 

616
00:35:11,900 --> 00:35:16,900
To SC Johnson, has their 
headquarters here, they have the

617
00:35:16,900 --> 00:35:19,000
research Tower, that's part of 
their property. 

618
00:35:19,000 --> 00:35:21,100
They also have the 
administrative building that 

619
00:35:21,100 --> 00:35:24,100
has, if the building that has 
what they call it, the called 

620
00:35:24,100 --> 00:35:29,800
the water lilies where it is 
like these essentially spires 

621
00:35:29,800 --> 00:35:32,700
that are inside their one of 
their offices. 

622
00:35:33,600 --> 00:35:39,000
So there's that Kringle which is
like a pastry up here. 

623
00:35:39,000 --> 00:35:43,100
It's kind of similar to like a 
Danish is very popular around 

624
00:35:43,100 --> 00:35:45,300
here. 
I'd never heard of it until I 

625
00:35:45,300 --> 00:35:48,000
started coming here with some 
regularity, but I think those 

626
00:35:48,000 --> 00:35:50,500
are probably the two things that
would be like Frank Lloyd, 

627
00:35:50,500 --> 00:35:52,900
Wright, architecture and 
Kringle. 

628
00:35:53,400 --> 00:35:56,200
And I'm sure my friends and 
Racine will probably tell me. 

629
00:35:56,200 --> 00:35:57,800
There are things but those are 
things that I think. 

630
00:35:58,700 --> 00:36:02,500
The Kragle thing reminded me of 
when we were in Buffalo, what 

631
00:36:02,500 --> 00:36:07,300
was the famous meal that we had 
in Buffalo and buffalo Rochester

632
00:36:07,400 --> 00:36:11,900
of Rochester? 
Your top, the garbage plate then

633
00:36:11,900 --> 00:36:14,900
we do an episode of the podcast 
called garbage Fleet. 

634
00:36:15,700 --> 00:36:17,600
Yeah, we definitely got. 
I think it was like another 

635
00:36:17,600 --> 00:36:19,900
odds-and-ends episode. 
It was a kind of like this. 

636
00:36:19,900 --> 00:36:22,300
It was that I think I called it.
Like, they're like the I am 

637
00:36:22,300 --> 00:36:24,100
garbage plate or something that 
but yeah, it was something we 

638
00:36:24,107 --> 00:36:26,200
did around right around the time
but we were both of Rochester 

639
00:36:26,200 --> 00:36:28,200
for so for people who don't know
what the Garbage. 

640
00:36:28,200 --> 00:36:32,500
Plate is just like whatever they
have the kitchen could be french

641
00:36:32,500 --> 00:36:36,100
fries. 
Some meatloaf some whatever, 

642
00:36:36,600 --> 00:36:39,000
throw it on the plate. 
Leftovers leftovers. 

643
00:36:40,200 --> 00:36:44,800
I like what I have placed. 
Yeah, leftover pizza left over. 

644
00:36:44,800 --> 00:36:48,200
Was that second day of lasagna 
is amazing know what it is about

645
00:36:48,200 --> 00:36:53,600
like that but it's good stuff. 
All right, we are way off topic 

646
00:36:53,600 --> 00:36:55,700
but again let's go ahead and 
wrap things up. 

647
00:36:55,700 --> 00:36:58,500
F, that's fine. 
This is the this is our Our time

648
00:36:58,500 --> 00:37:01,200
our fun time. 
Yeah, we'll go ahead and wrap it

649
00:37:01,207 --> 00:37:04,900
up for this week again will be 
at Gartner, so if you want to do

650
00:37:04,900 --> 00:37:07,600
the fist bump or maybe you know,
help contribute or be part of 

651
00:37:07,600 --> 00:37:08,900
the podcast. 
Jim. 

652
00:37:08,900 --> 00:37:12,300
And I are planning on doing some
live recording out there and 

653
00:37:12,800 --> 00:37:14,900
kind of making plans, aren't 
that hit us up on LinkedIn. 

654
00:37:15,500 --> 00:37:17,600
We're always happy to talk with 
folks. 

655
00:37:17,600 --> 00:37:19,600
If you've got questions about 
different things or when our 

656
00:37:19,600 --> 00:37:22,200
thoughts and opinions, you know,
send them our way, we'll get em 

657
00:37:22,200 --> 00:37:24,100
incorporated into the show at 
some point. 

658
00:37:24,600 --> 00:37:29,100
And yeah, with that hit us on 
the web Denny at the center.com 

659
00:37:29,500 --> 00:37:34,200
Twitter at idac podcast and 
thanks for listening and we'll 

660
00:37:34,200 --> 00:37:35,700
talk with everyone in the next 
one. 

661
00:37:39,800 --> 00:37:42,600
Thanks for listening to the 
identity at the center podcast. 

662
00:37:42,700 --> 00:37:45,100
If you like what you heard, 
don't forget to subscribe and 

663
00:37:45,100 --> 00:37:48,200
visit us on the web and identity
at the center.com.

