How To Sign Hawaii Banking Form

How to industry sign banking hawaii form secure

aloha and how you doing welcome to my gtalk gordo the texts are here I'm here my good old buddy papi chulo who's in the house filling in for the security I andrew lanning who's once again is travelling around the globe spreading the word on security um while spreading something and I spreading me Aloha that's what he's doing may we have with us today Pete insult Insull he's our guest today he's a security architect for Presidio west coast yep on the west correct so um we're going to talk about secure network architectures in the cloud and some things that are happening in that space which is kind of interesting you can tell by this pale skin alley boy it has his first trip to Hawaii and you don't get much paler than that and thank god there's someone someone paler than me in the house so anyway thank you guys thank you nicely wear this shirt so it's great to have you on the show we have a few segments we do a little bit of news we have this thing you know got one tech job and then we'll we'll get into your background and perfect like that but before we will do will get out of the way uh you know got one tech job if you feel too can't feel free to come there any time when this is the latest one that is actually down the street from where I live you got to take a little close look at that photo that is a lamppost and that is the light or my street it's been like that for oh I say we're coming up on three months it's been down three months that's how it is but I tried to figure out what the problem was and then i remember when i was with the city there's a thing called the joint whole committee so it's probably in the committee right now trying to determine who's got to fix it because the pole itself is one committee or one department the arm that holds the pole is another department and the end is another department so that's probably going through its due diligence right now store at the joint ball committee at the sitting and Counting Apollo what who was in trouble when somebody crosses at night without the light it gets hit by a car okay well then there's going to be another story which by the way there's a crosswalk just up the street from that so you know you nailed it and that's that's you know that's all you got to do is have someone happen there but anyway we're on it we're got our stuff you know on the upside taking care of everything sitting and counting in Honolulu um so security in the clouds kind of an interesting thing but yeah we get there tell us about yourself so where are you from where did you go to school did you go to school yes home school yeah interesting background so I I've been a little bit all over the map so I was a military brat for years so I've been all over I've been all over the United States and Europe as well I was actually born in Germany but i ended up myself ended up going in the military i actually ended up going to texas A&M university for engineering degree didn't finish that up end up going in the military and i was stationed in the Navy on submarines okay so you were Navy and you were okay so so we like each other so it's 1d like easy now do you have any um do you have any unique and interesting stories about getting arrested the first time you were assigned when you were stationed somewhere not that he had it happened to him no get even get arrested he got a ticket for jaywalking anyway nothing anything that I can disclosed publicly oh hey this was the same oh I know this uniform is right yeah so by the way you're looking pretty tan hey I'm enjoying my time on yeah god I worked so hard for a living you know I would I wouldn't my borrowing some of that yeah look at that there's a contra as wow that's scary just wear leather sunscreen you know that's that's when you spend all your time in a submarine this is what happens oh that's true I never heard deprived of Sun lights and other things yeah I never get cloudy day syndrome exactly you're stuck inside so so you were in the Navy you got out of the Navy and where do you see what school in Texas ain't it yeah once thanks a damn originally and I was going for an engineering degree mechanical engineering ended up going into the Navy after that never finished about two years of my engineering degree and then ended up going the Navy and actually was a nuclear chemist in the Navy so I did radiation protection and reactor chemistry on a sub slave or yeah that explains why a little while i am i glowing am i am i glowing person now I love you oh man you're the best but yeah after I got out I got interested in information technology in the late 90s and started pursuing that end up ended up relocating and landed in florida ended up wait with Lorna has Sun Florida does have Sun and for slice and I didn't spend enough time in it yeah obviously so yeah I ended up going into network engineering my first job for a large insurance company Liberty Mutual and that's starting to work for them and kind of progressed and ended up getting into security at that time and kind of went from there and that became my passion so and that was in the mid to late 90s yep and so think of what you mean you're you're young career in doing this how much is security change over the past 10 night and day 15 years night and day difference the entire concept that we started with this cloud concept yeah public cloud and what was what is that right the internet was just starting out the dot-com days so so it just just shifted the world and everybody's paranoid now about getting hacked oh yeah and having their their exact date is stolen and their records stolen yes so on and so and we'll talk a little bit let's talk a little bit about that so give us a definition for our viewers what is the cloud to you what is the cloud no that's something that he hasn't seen a club well you know the cloud by definition is well alright clavicles out of the way listen we only try to put together the right definition but is effectively it is services being delivered from outside of the own outside of the organization is the most common yes so so so if you're getting services from a let me think a bank right and they're using their computer systems and such our house somewhere else right um be managed by someone else presidio exactly um then that would be in the cloud yeah vs if they had it in their own um the other location well there's a couple definitions here and it's really hard to explain this but there's a concept of why you're the expert private cloud and public cloud okay private meaning you fully have control of this environment which you're making available all these resources available to all these end-users right but you're controlling it in a fashion that allows you to deliver it with some degree of separation with okay with in a box within a box okay right and then public is it isn't your environment it's hosted in somebody else's environment but you're using their services so for example I mean Netflix ok Google yeah they're all technically cloud service okay in there a public or private public cloud because everybody's rights right the end user is consuming those yeah okay and they're public services so if I'm using like Microsoft Office 365 a public cloud that's the public cloud service if I'm using ABC bank and all of that stuff is in theirs or a secluded data center that they control that's a form of private cloud it's it's got some great ice and gray area there I know I'm just trying to get yet like where do you can define the lines would show how complicated it could be so just think about so now you specialize in the security side of the only they are on the security side so you've got all these different types of clouds and then you've got to secure it well now he's in security to now but he's in the even the wetware tonight you know we finally educated him wet where is people ninety percent or whatever does water right that's what it isn't then you get the software side right and the hardware side yep what's the worst side the hardware software or the wetware the p side I think people yeah guarantee full hands down I mean you can do everything you can to secure everything but at the end of the day you're working with people right human error a human error or human intent yes human intent human error they can do all of do all of those quads on are lots of her so um so tell me what it is you do what it is it you do as a as a cloud security so I spend most of my time educating and talking to customers and how best to protect their data whether that be delivered in their own data centers whether that be put into public cloud environments for example like we just talked about but it's about putting together the right type of security solutions but I am mainly on the technology side but like we just talked about people are the biggest problems so I like to talk about the people aspect of things as well not just focusing on how technology can solve the problems but but how do we help you know get awareness on the people side or how do we help control the people to people say so but and then we use tools to help control exact people problem that's going on this now you're saying in earlier today there's all that the cloud is a growing industry yeah yeah so loud strike somewhat are expanding would you say 37 Billy 3077 billion yes expected to expand or top 37 billion spent a year this year so that's 37 billion spending in cloud services providing cloud services yeah that's it's all cloud services combined that's things from amazon that sings from microsoft that's google's cloud services all these other cloud services are it's gonna be a rough least 37 billion dollar market this year 37 billion and you're in your job your job is to make sure all of that 37 billion load is secure not all of it no oh no wait yes right you've only got the west coast so not a problem you got that there's only one smaller size and small so so so that's a huge do you see this growing is it gonna come yeah yeah grow out is is the is the trend of the future right now as we call it cloud that is the trend of the future every customer is looking at cloud services public cloud services specifically if they haven't already adopted it they're already there weathermen and they're there without even knowing about it because guess what we're all consumers of Google services Facebook you name it we're all consuming these public software as a service offerings that are ultimately underneath the noses of a lot of organizations so is it safe to say that if I'm on my mobile device that and I'm going facebook or write dinner though that I'm on the cloud you're all on the class so and so anyone that's sitting out there thinking well I'm not on the clouds they're on the cloud they're on the cloud yes unless they got a flip phone it's only but doesn't have anything else it but even then yes that dial tone is coming from somewhere that's true and that might that abstract carrier could be in the cloud that's true providing it turned out all right your cloud the system has to be on on your phone for it to go well your phone has to be no I'm true that's exactly a good question because I didn't have this the cloud was out there and verizon so where's all my stuff I was in the clouds oh you didn't turn yours on so whatever you thought you say it isn't that the best security if you just turn off all your electronic devices you're more secure I'm gonna bother app that your app itself is not fair but you were on the cloud from a dial tone perspective to make the call right but not from your data side right so a good point but if you have the app and you don't turn on the amp is not going to the clown's not your your your photos aren't going or things aren't going but if you're doing instant messaging yeah and that is app is turned off you're still listing message right and so that's still in the safe to say in the cloud yeah to some too yeah and enjoy your data is stored there too so so that's so here we go so so data is in the cloud and we agreed to that by signing on that long yes yes called a EULA that no one reads yet nobody reads no one reads it so so it got the Ulysses so you got it with you got a fob the data you got to protect applications that are running on the cloud climb things and so on all this kind of stuff so so gonna have to take a short break it's amazing we just crank through 15 minutes them and I feel like we haven't even scratched the surface of this cloud it is and so but let us let us do that let's do a little short break we'll go get Angus he's got a new gadget I think heard this week and a new Scottish thought sorry and you haven't met Angus oh no I know and I can board too oh yeah and I hear you're English oh my goodness wait till he finds out anyway will be a secure delete XR papi chulo I forgot your name for a minute you o0 it goes and we're here with Pete insult from presidio blue back in a minute you're watching sink tech hawaii on sink too kawaii com which broadcasts 6 live talk shows from 11am to 5 p.m. every weekday and then streams earlier shows all night long great content for Hawaii from think tech hi I'm Chris leatham with the economy in you and I'd like to invite you each week to come watch my show each wednesday at three p.m. hi I'm Donna Blanchard I'm a host of center stage which is on wednesdays at two o'clock here on think tech on center stage i talked with artists about not only what they do and how they do it but the meat of the conversation for me is why they do it why we go through this a lot of us are not making our livings doing this and a lot of us would do this with our last dying breath if we had to that choice and that's what i love to talk to people about i hope you enjoy watching it and i hope you get inspired cuz there's an artist inside g to join us on center stage at two o'clock on wednesdays I Aloha everybody my name is Mark glove I'd like you to join me for my program law across the sea unthink tech Hawaii calm Aloha Aloha my name is Denis Leah da ndl IA and I'm the other half of the duo John Newman we are the co-hosts of keys to success which is live on think tech live-streaming network series weekly on thursdays at 11am Aloha Aloha Aloha welcome back and we're here to see our good buddy here Angus Angus is all you now hey there are you doing there puppy you're not gonna leave it broom let me see the skull of you your broom influence yeah and your your guest is a leave it peckish I see that to you then this is he 72 your little bit more failed at me well almost play on to me oh hey yo it's all and so there's an English name unilab yeah we need to shape interview in 44 you just see you know that bruises were in there and you never stood a chance anything we forgive you so just keep on your stuff down there in England Scotland will see you when they did ever again anyway so I've got a couple of things I got a Scottish sign of the day and we have with us especially so when the English come up into into into Scotland that you know what it is this is a buses dinner working and we've made our buses and no working it says ah we know more than service no more service that's the bus the Scotland area so that's how are we going anyway you know I was going to try to find a new innovative gadget so I got a new one today it's so innovative you can't buy it it's a it's a fan you put on your motorcycle to charge the battery or your iPhone it's called a knife and can be bad lad hey it's a nice and chris is crazy but you is awesome that's revelation can i buy yet you design an our way and nobody's really good at saving energy so i think they're gonna come up with it the trouble is they're gonna charge us too much I bet anyway it's called the I fam what's up for it it's kind of amazing Oh anyway that's my gadget as my uh my punch on english is my punch on the papi chulo and it's nice to see you all again don't remember everybody but you're ringing fever a of e ha ha oh my goodness he's so funny look forward to being a guess Hoss why not gonna take over the show under do it all haha we do it all in spanish that's too funny that's too funny anyway we're we're here with feed itself from presidio in the west coast you're the security architected we're talking about securing securing the cloud so what what are some of the iggest challenges you have in trying to secure companies applications and data that run the cloud well a couple things that come to mind is a lot of times we just talked about that a lot of times organization haven't actually identified what their goals were right for for going to the cloud what are they actually trying to protect right the first thing we need to do in security is identify what we're trying to protect what are our threats what are the vulnerabilities our exposure so we always start with risk assessments so that's that's one challenge is being able to identify her the need that a risk assessment is critical whenever we're looking at the cloud we're moving in the cloud the other thing as part of it is you know what are the applications and that kind of data we're going to be putting in there right is this sensitive information is Loretta art right it's a credit card is this healthcare information because now we need to treat that a little bit differently and we need to provide proper security architecture around that so there's a number of those considerations as well so but people get it be like considering who has the right to that information also a different love ya so tranches because I'm on the same way yep work I don't have any business looking at this guy's a piii yeah when it has nothing to do with me but I have a level of security that clearance but security clearance exactly so the principle of least privilege that we try to apply for any is public personally identifiable in fifth personally I live in there's a hecka it's like I've often love that you're obviously a rank it was ya know I had a brain fart I was off for last couple of weeks yeah Rick my brain is fried you still working on it yeah so so there's that mm-hmm um so what about compliance yeah this is a PCI HIPAA yep there's SI je sors I Tartars I can we can keep going on and on about every type of so when I hear this start panicking out and say maybe I shouldn't go to the cloud now actually you know really the biggest thing that needs to be looked at and these public cloud environments because it really is what we're talking about here put these public services that you can put your data in right it's just knowing what the potential risks are and how you can actually secure those environments what they have natively tar for security to you but what else you need to do to protect your information out there not only are compliant there are complaint how much further ahead do you think that the cloud providers are then and this a loaded question because I already have my opinion but the cloud service providers versus versus the people that are doing it in house with limited I'm coaching it limited resources well when you got like I've been AWS and Amazon Amazon and Microsoft got a lot of people doing security yeah they have some of the better security teams you can ever find it's just the reality is Amazon and Microsoft they have some of the best security teams out there and they're going to know how to secure their environments better than most customers can on themselves now it doesn't mean that a customer that puts their data in there doesn't have a responsibility to equally secure their information because at the end of the day there's not it there's a concept of a shared responsibility right so everybody's all committee yeah exactly the shared responsibility so so by shared responsibility like Andy was like the endpoint oh there yeah there you a cloud um um mrs. a cloud services statistics there's the 37 billion in 2016 yep so I have another slide Missouri if you can find that I want to bring that one it because the Dirty Dozen cloud security concerns oh here's what we're protected hold that one that's great yeah this is what we're protecting this is great a big value of a hacked or company a lot of people think that it's just data that they're trying to protect but there's a lot more information when cyber criminals are going after a company they can exploit and get access to a lot more information through different means here right they can go through partners they can get access to the cloud services a company has and get access to the financials the assets at they own so it helps illustrate a point of you know we're not just protecting just data alone the kind of sensitive information we just talked about it goes far beyond yeah you look like you look at the slide you got physical aspects you've got the HR data you've got financials like you said virtual all those kinds of things that are being protected yeah even whether you're in the cloud or whether you have to do it on Prem on your prep it's the thing and do you have the talent that can do that exactly yeah there's another slide that movie called The Dirty Dozen it's called cloud security concerns right you know even though it says cloud security concerns when I look at this its security concerns no matter whether it's cloud uh right yes how could it just be cloud data breaches how many data breaches have we heard of um did I know of from local rankle firm right that have their own data center well what this comes from is this is actually a survey put out by the cloud security alliance for this year actually and it's a ranking of for cloud services what are the highest risks when and threats for cloud services and this is ranked according to some of the concerns that are out there for professionals and everybody else and where do we see the highest risks and actually you know data breaches being number one that's top of mind right now right yes being hacked companies everywhere so of course that's top of mine that you know the second one what's a credential management a credential management is is the concept of you know how are you actually securely storing you know passwords and identity information and how is that information being transmitted back and forth how do you validate that it was you that logged on to a particular service right and that's where you've heard things like have you heard two-factor authentication if you do this with your bank were you you sign on to your bank and then they send you a pin code and you get to the cone that code that's two factor authentication exactly and that should be I would say it's ominous it should be the norm unfortunately there's so many organizations that have no concept of that today yeah and I would say if you look inside the organizations and I could point this out organizations that are running their own data centers and their own facilities is CheY see if your sign ons are two factor authentication do you change your passwords every 90 days or 60 days whatever is you're not allowed to reuse passwords there's a whole set of rules yet should be following the governance yep that's the governance as the governor said that's that I can guarantee the most in-house service organizations that don't have to be regulatory cumulative requirements on the particular customer the the tendency that they happen to have better security hygiene as i like to call yes we've heard that works exactly mr. landing uses that word a lot is so what about um there's an insecure API switch our application program interfaces correct so that's number three now a lot of people wouldn't know what that is but you know kind of give us in the layperson so it's a it's a we it's a way to programmatically make changes or retrieve data or input data into an environment using programmatic methods so you know you're familiar with scripting and things like that orchestration automation those are all using what's known as API as api's these api's must have secure authentication mechanisms though in place sometimes they have vulnerabilities to wear those can be exploited by criminals etc that know how they work now what an example of an API if I downloaded a particular application onto my mobile device that then got into one of my production systems per se you know how do I know that that mobile device application is secure enough yeah baby handling one way to secure interface there's usually behind the scenes but you know your application is is a mobile web version that's just neat using native access but its web so ever so what's the net what's the next one you think that the the next one that people should be you know conscious of them be made aware of well you know one other thing is you know people are having their credentials stolen right we're hearing of these phishing emails where people click on them they they're they're asked to put in their username and password into a log form into a form filled they fill it in and ultimately the attacker steals their credentials and then uses that to compromise another another system yeah and that's so they impersonate that individual so it's hijacking so hi jack hi jack so what should kneel some what should a person be doing to ensure that that doesn't have once again is this this whole concept of identity is the new perimeter you may have heard net that that phrase it's true i mean at the end of the day we're only as secure as how we can validate if it was you write myself writing into a particular system and if passwords are dead i think that's pretty passphrase is now 21 actly 21 no reason nobody can remember passphrases so this whole system but tell anybody it because then they'll have my sister so does any many money this whole concept works yeah that's where this whole concept of two factor come from it's something you have and something you know is it away well yeah okay so we got it we gotta move quick cuz i only got we only got a minute this is si si you talked about that yeah i didn't have a chance to um I didn't have a chance to talk about some of the news but i'll do a quick one because of how box gives us some interesting stuff and it's really related to this they were rate or later to cost the healthcare IT cost per doctrine hour at thirty-two thousand dollars a year just for security and that's just to protect the drekar right and that's what and if if your doctor dentist health care provider is not paying in that range then there's you know you have to start wondering if they've got you'll stop going on and maybe they should be putting their stuff on the cloud so that's it was good at is expected to increase that's that forty percent increases 2009 yeah like you said earlier about what was going on and then we had a hypocrite for prosecution in tampa the other day there um guy went to jail yeah for violating HIPAA so get ready more of that stuff is happening so anyway Pete this has been this is a me haven't even scratched the surface yeah we got to get you back on you know Pete this obviously an expert in this cloud stuff I'm dizzy with everything that's been going on but we also have something that we never Italy totally secure Emma compliant um a solo cup that we give to all of our guests that you have number 82 in the series it's 82 and this Aries well that's great and that's it so anyway that's it we're ready to head out of the show and like we stand be oh thank you nick and thank you sir I'd like me say at the end of every show one two three how you doing with