Sign Arizona Banking Living Will Secure

Industry sign banking arizona living will secure

hello good morning good afternoon good evening everyone wherever you may be tuning in from thank you so much for joining i am joined as always by jason buffington my colleague and jason today is episode 30 that's three zero exactly it's been a long time now a good long run and today we're actually going to have a guest that we'll bring in here shortly the great rick van over who i'm sure everyone knows from multiple different streams and events throughout veeam's long history now but jason let's tease up today's topic today's topic is essentially around backup and security and does it mix or not and are they related yeah does it mix or not so you know if you look at in the annals of history of the data protection industry you know we've had several companies that tried and talked about um how these two really should be one thing in fact there was one company seems like a backup company bought an anti-virus company and they hung out together for a few years and then really messy divorce i forget the details but i mean history would tell you no these are completely separate things um and any it pro person who's actually employed in 2020 will tell you no actually kind of they ought to be talking to each other so yeah and that history lesson is is an interesting one in so many fronts yeah because the security company bought the storage company for many many billions and later spun it back out for fewer billions but that escalated a arms race where then ca technologies and then computer associates bought arcserve and ibm said okay let's take our tivoli systems management group and let's take adsm rebranded tsm and move it in there so there was a whole slurry of activity that took place in the late 90s early i guess it was early 2000s now if i think back but that notion you're right i mean does security fit or does it not where does backup go into all of this even my dog is rolling over just thinking i've heard this story before and he's only three so without further ado let's bring in the great rick van over also on our product strategy team rick how are you today hey i'm doing great you caught me uh got the dog's attention yet again i uh was uh laughing pretty hard with that one but no hashtag 2020 right we get it hey 2020 you don't have to apologize for children pets doorbells in fact i'm pretty sure you don't have to apologize for a darn thing so you know with that in mind i think we ought to hit the v map here shortly while we simultaneously invite people to post any questions that they may have now for the trio of us now that rick's here we can get to hard questions even if they should happen to come in i see we already do have one question from aj what is veeam strategy for cloud native ecosystem meaning veeam just acquired casting or k10 when can we expect integration of both of these tools rick has no hair because this has actually been happening already i'll tease that one up to you rick well i think that's the next frontier you know aj when i look at the future i mean we are definitely advancing the platform on premises you know cloud virtual file application physical those things the engines of our platform are progressing and then you look at cloud native in fact stay tuned for some big news tomorrow we had we have our software as a service product had an update last week and the other amazon and azure solutions are progressing and then when you look at the kubernetes space with the veeam acquisition of casting my opinion is truly right place right technology right time and uh you're going to see that progress into the veeam platform so stay tuned i mean right now it's it's a product that has a road map with veeam and it is a product that is doing very well in all of the kubernetes native areas so my personal opinion ajay is we're we're doing the right thing um in regards to cloud native apps yeah and if i double clicked on that just slightly ecosystem is at the fabric of everything that veeam has ever done right jason i mean you know this story very well being involved with the alliance partners and that ecosystem extends northbound and southbound meaning whether we're talking about operations and systems management tools applications hypervisors down into infrastructure and one of the many things that david hill on rick's team likes to point out about casting is that there's so many similarities from a product perspective but also from a company perspective an ecosystem is certainly not lost on that so i did tease up look at them like cloud stuff oh sorry go ahead no no no no you finished your thought and then we'll we'll update uh to the map in a little bit here but let's let's make sure we hit this one yeah i mean so when you when you think about like where we evolved from right so for many people veeam was literally synonymous with vm based backups right and then we started adding physical and then we started adding cloud-based workloads but if you look at the path for how that innovation is and the ricketron is actually our bonafide historian for all things veeam as well but but the the short version that history basically starts with does the storage layer interact right you know can we can we leak because at least if the stuff is stored the same way we have the potential to start doing interesting things with it and then after that well then can you start compressing the control plane and start doing instrumentation and then before long it starts to become a seamless product and you can look at like our our amazon product as a poster child for that evolution over time and and each of those that the challenge is in this industry no two clouds look the same so the secret sauce for how you back up amazon looks different than how you back up office 365 looks different than how you back up kubernetes right and so that secret sauce has to be different but each time it always starts off with can we interchange storage then can we interchange control plane and then from there how do we really get better value and one plus one equals 3.7 right so that is that is that natural logic that happens each line along the way yeah my math is a little off rick i get it hey it's larger than pi so that's a good thing so i did allude to a map rick actually in the pre-call tried to take over ownership rights of the map jason and i double teamed them and took it back we are the ones that originated the map so let's hit this map we have i think now 10 countries multiple states let me just do a quick count one two three four five six seven eight nine ten eleven i lied i understood eleven four v eleven of course we're going to try to kick that up higher in a number of u.s states as well so thank you for that do encourage you if you watch this later on feel free to enter what state in the united states or what country you might be from or in city and uh and country you might be joining us we have some i think is that senegal senegal on the on the west coast of north nice yeah you can always count on south africa being in the house say hello to my favorite eaters down below very good we got netherlands in there again uh they're probably checking to make sure that we're not talking about the announcement early so nice yeah exactly so with that since we've only just begun to pick on rick let's really now put them to work the the notion here i wanted to tease up rick and you've got a great talk track in several slides but one in particular that talks a bit to the changing threatscape meaning you know cyber anything to do with security it is not something that's that's standing still it's not dormant it continues to evolve it continues to morph and you've got a great slide about how these threats actually infiltrate yeah and i think that's a good starting point for the conversation i want to give a little shout out to my friends in canada from the atlantic security conference uh got this in 2019 at the event uh thinking about those uh people every day uh when you know missing the the travel but cyber security is really something that we take pretty significant and when i uh you you call a talk track i call it a side hustle uh my specialization here at veeam is preparing our customers and partners to be resilient against ransomware and one of the things that i like most and we'll uh launch the slide i think just now and you know where does ransomware come from and there are three main modes of entry and depending on the different research you have you'll find that they may come from one or more of these in different levels but cove where the the data breach information report veeam zone report we really can track where these threats come in from and i actually grew up thinking that they all came in from fish but actually the cove ware report has around 26 percent of those coming in through bad email and then remote desktop or otherwise a remote access compromise being the leader there and if you think about 2020 a lot of organizations had to hurriedly implement at work from home that really concerns me right do you need it right or do you need it right now march of april this year we needed it right now how was that managed and then vulnerabilities so if you're looking at cyber security especially from a ransomware resiliency standpoint if you're handling your remote access well if you're training users and have technology implementing uh mechanisms to defend against email fish and you're managing updates like we should you can really knock out 97 or so percent of the threat scape for ransomware so that's a really good starting point and you'll see these numbers i've tracked them over time i think that was the end of 2019's number but going into 2020 we saw the remote access go up from a from a breach entry point so again different threats behave different ways but that's a really good way to start is addressing those three yeah great point you know what i really like about that slide rick and jason you feel free to jump in here on this conversation too is that ostensibly those things had nothing to do or very little if nothing to do with backup or even storage you know the point is though that really security is everyone's responsibility and i like to say performance is a goal that you're never done with you make incremental gains but you never say that you claim victory jason i would assert that security in cyber is no different yeah i think the problem is is that as an industry some of the backup companies over rotate us you get a marketing guy in the in a backup company he says well everyone wants to talk about cyber we should talk about cyber and if the only thing that you're doing in cyber is providing a copy to restore from then then it's working exactly like cyber planning would look just like earthquake planning would look just like fire and flood that's it's just not that interesting yes your backup software should be able to restore data yay right but that's that's not really integrating data protection with cyber security and so i think sometimes we we have miscombobulated those terms and we ought to be talking about them authentically as far as where does um data protection backup snapshots replication all those forms where does that fit within a modern cyber preparedness strategy and i think that's that'd be the interesting topic for this yeah great point and why we've got you jason you know we've just been doing some joint activity actually fair amount of joint global research around different kinds of trends that we're literally just getting worldwide information coming back to us maybe walk us through some of that and you know a little bit about how that relates to the topic at hand yeah you know one thing that veeam started doing a couple years ago is we've got this thing called the data protection trends report and on different years we titled the final report different things but we we are in the process of we hired an outside contract firms they didn't know was us reaching out to over 3 000 um it pros and it leaders across enterprises around the world 28 countries i mean it's it's an insane number i think it's the largest single set of data protection data that i'm aware of in the 31 years i've been in the business and um and so we're just now seeing some of that data it's not even all the way called in q8 it yet um but uh but it's looking really good we're gonna publish it um uh under our banner in january-ish uh and we ask questions like you know what's changing what's driving your i.t strategy where are your major concerns how did the pandemic affect digital transformations we had some questions along the way one of my favorite questions is when you ask organizations what does modern look like everyone's trying to get better all right so in your minds what does modern look like and we have a slide for that slide to um in our in our prep for today and we asked uh organizations you know what would you consider be the defining aspects of a modern or innovative data management or data protection strategy and then by the way pick one right pick all that you like but then pick one along that way and they are stack ranked by most important and i love the fact that it wasn't that many years ago that you'd look at a chart like this and it was has to work with oracle must work with exchange dag must work with vms right i mean that's kind of how we did our thing 13 years ago was must work with vms and nobody else got that um but this year take a look at the list when you look at the the top lines that are out there okay so uh must have orchestration get the humans out of the way not skynet style but you know just in general get the humans out of the way we had a set of matrix uh jokes earlier um dr to the cloud uh uh api base but all of these are really about better togethers it's not a feature it's an outcome but the one i love and we put a little red box around this the ability to integrate data protection within a comprehensive data security strategy again backup does not replace all of the premeditations preparedness that rick was talking about earlier but having that last line of defense ought to be part of the strategy can i get an amen from the from the rest of the from the rest of the crowd better give you a vbk yeah vbk is better than amen i don't know so yeah so so that's what the trend is driving towards is is get the humans out of the way leverage the cloud better i love the fact in fact i think it's interesting that integrating uh tasks with systems management and integrating with cyber security are adjacent to each other in that list what folks are telling us is let's stop let's get out of the backup business right data protection should be intrinsic and foundational within the platform and it should be integrating with the rest of the parts of our strategic i.t initiatives yeah and i i know we had a question um that came in and talking about what additional things can veeam do in addition to backup and so that actually is a good way to tease up this whole uh segment or this whole live stream meaning veeam doesn't purport to be a security company but we know that data resiliency data availability has a significant role to play in a security context along with those lines jason you're always very quick to point out that the difference between disaster and recovery and migration is actually minute the difference really is migration is a disaster that you plan for so if you step back at the highest level what is a backup solution or a replication solution it is a data capture data transfer data management mechanism data management can be defined many ways but loosely or minimally you have to be able to keep tabs on where the data is residing and how to get credentialed access to it so with that as a foundation capture the data prepare to move the data and then keep prepared to keep track of the data there are a number of things that you can do and rick as it relates to this context you know one of the things that i really like that we came out with that veeam in version 10 earlier this year was something we call the data integration api and in this context using something like meta defender cloud is something that one of our vanguards ben i believe actually trialed and posted about and you know talking to people in the field veeam has a number o capabilities in ways to interact with antivirus software but when i talk to people and i will tell you frankly when i got hit personally i used three different tools to fully eradicate and scrub no single solution from a security av perspective did the job entirely and that's doesn't seem to be a unique statement when i talk to others including one of our vmses said yeah in the field we knew of someone that had to use four different tools to try to get cleansed and the ability for a solution to like veeam to be able to interact with and have an ecosystem around external capabilities i think shows part of the value of that so you know with that i got before we close on that rick i want to give you kind of a final word on that before we move on well i think what you said dave is is very accurate and you know a lot of times when i talk to it professionals who talk to security professionals right that's the bridge that's the connective tissue and and it really kind of comes down to the discipline and the background uh one of the things i showing my age curator the veeam museum here yes one of the things i grew up with was this thing called the cia triad in sherry and this is the simplest form of cyber security it's ensuring confidentiality c integrity i and availability a of data you care about and veeam aligns in the a triad right and then same thing with the nist cyber security framework a little bit more modern upgraded timely one identify protect detect respond and recover right so veeam sits there so when you look at the data integration api these are capabilities from veeam that honestly you would never expect from a backup product if you really take the time to get your head around data labs the data integration api from a security tooling perspective from a response from a data analytics perspective in fact in the white paper i recently wrote about veeam ransomware resiliency a to z i took the data integration api as a really important mechanism where organizations can basically shorten the time between when ransomware is introduced and when it's exploit is noticed right so you have the capability here to do you know imagine a world and this is the best part is this is all available today take a backup of something okay let's automatically ensure that it's recoverable well that makes me feel really good well then let's also in an automated fashion do a scan for ppi or credit card numbers or social numbers or anything else my business cares about well we can do that and then let's do another scan with advanced threat analysis with different tooling with no exclusions and more aggressive scanning that's all available today so when you put eight and b and c together with jason's math you end up with a hex code of h you know awesome right so you know that's that's the line of thought here dave and whatever framework we align to we can find ways to do that with veeam so i love that example where you talk about using different kinds of tools at different parts in the work stream along the way i think that's especially interesting when you look at say what some of our channel partners and our vcsps and some of the gsis are doing we are now talking about different organizations and what i talk to our larger partners about is look whatever cruddy antivirus detection software that their subscribers might be running part of the value add of leveraging the vcsp system would be that you could go ahead and run a different set of detection tools that weren't chosen by that particular subscriber and so you have different ways of of checking on that which i just think is absolutely brilliant perfect and you know jason i think we're getting an update on the map i think we've got some with seven other countries that have just come in if i'm not mistaken oh nice okay so what do we got so it's always good when when at least one canadian joins the call because then the map just glows green on that side awesome to see that uh looks like check is in the house uh india uh spain is in the house oh yeah very nice uh california weighed in awesome uk sweden uh is that ireland yeah um ireland's in uh and the uk so both haves there uh emirates i think i'm seeing them that little bitty tiny red dot down there so awesome i think it's great by the way please keep it uh please keep the countries coming uh turkey in the house and then the texas education system is starting to fail me as far as some of the countries in uh in africa i will do that remedially later awesome so i want to switch gears just slightly rick i know you've probably made a full career out of talking about three two one and that's not a veeam specific thing that's an industry specific concept meaning three copies of your data ideally two different kinds of media ideally one or more of which is off-site and that has served really very well as best practice for quite some time the challenge has been if i loop back to the very beginning you know jason we were hitting the expanding threatscape that horizontally we've got more and more issues taking place more and more potential points of attack so we've actually recommended as best practice if we go to a slide in our current cyber and ransomware recommendations we ral recommend three two one one zero so the first three digits are the same three or more copies of your data two different types of media at home i use ssd and i use hdd and i've got a security bank deposit box a mile away from me so you know this applies to a small scale as well as to a fortune 500 company but jason and rick we've recently introduced earlier this year the next one which is an offline or air gapped some kind of hardened copy of that data such that it couldn't be compromised even by internal mechanism and then something that's new maybe in terms of us really trying to to mention it but not new in the product rick in terms of being able to leverage something that we call uh sure backup to ensure there are no errors because jason we've been in the industry each 31 years the bad joke in backup is it's really hard to recover something that hasn't been backed up properly you know we can't manufacture zeros and ones so you know verifying at the point that you capture the data and of course having offline resilient copies of that data are vital now i do see we've got a similar kind of question coming in we've had a couple people ask about different kinds of backup migration we had that earlier i think even from the same fella but we talked about it in in the past and the tool that he mentions back i don't know i'm showing my age but probably five six years ago maybe seven eight years ago that particular vendor had something they called external data connector where they didn't really import the data they imported portions of the job to allow a backup solution to be able to get up and running faster there are things like index engines stone ram a few others that actually now ibm bought and acquired and sunset of butterfly software to be able to do something similar across those lines so you know having now probably looked at that interesting notion of importing backup now for about 20 quarter of a century there's good and bad with doing that generally the reason most vendors really don't do much with that is because of what we just mentioned on that last zero or digit that no other vendor likes to take the sort of liability that goes along with perhaps a backup being written by another solution where there were actually errors on the actual backup format which brings us back to three two one one zero and rick and jason i think by next year we're gonna easily come out with a maybe a sixth to tenth digit if we really put our heads together soon number we're right now we're a zip code if you're in the united states canada we'll get it to a phone number but but rick maybe riff a little bit on the one meaning you've got to talk track around ultra resilient infrastructure yeah the it's really simple dave when i talk to organizations who don't come out of ransomware successfully they don't have the one it's that simple meaning some organizations will beat ransomware or recover with what i call a base 321 rule but you know central florida represents with this with this zip code here the one that is offline immutable or air gapped i give that the phrase ultra resilient if you have one or more copies and you know don't be afraid to be two two copies ultra resilient nowadays that is the criteria where you are basically preparing to deal with the ransomware threat now i again i see organizations who get through it without but that's luck and the threatscape is in incredibly advanced and changing and you don't want to have luck in your plan so i highly recommend you check out some of the resources we have around the three two one one zero rule and the short story is dave that this is a mindset that doesn't require any specific set of technology yet it can remediate almost any type of failure scenario including ransomware you know i think it's ironic that the zip code for um three two one one zero burnell florida this is a zip code that actually chronologically is is is likely to get um a hurricane every other year and yet i mean so so as a poster child for disaster recovery they are the zip code that that emphasizes what good data protection should be at surely we should do um uh something about that later hey uh one last shout to the map um uh before we uh before we say no uh before we do our discards um afterwards uh see saudi arabia in the house uh florida um hey if floridian if you are in or have ever been in brunel um florida um along the way please chime in on that um maybe we should join xt meeting down there that'd be fun uh portland's in the house france wisconsin i spent a good amount of time there arizona st petersburg russia pakistan all right uh i think we have more of the map green than not which of course is actually our greater global goal um here at veeam anyways so so thank you for that along the way hey we don't really have time to kind of dig into it but rick next time that you're doing a um a cyber strategy you know one of the things that kind of strikes me that's different um than anything else we talk about in data protection typically in data protection you're always thinking about that most recent copy of the data right how do i get back to most recent we built a decade-long project around availability most recent copy of your data is probably exactly not the version you want for cyber um so if i had an extra 20 minutes that would probably be the thing i would want to dig into your beautiful bald brain and try to understand more on but um but we don't so okay we got one minute left uh let me just make a quick pitch for next monday we're going to turn the gears a little bit different we've got a couple guests coming on we're going to talk about data protection in the public sector so whereas we typically think about business continuity disaster recovery they think of continuity of operations where we think about lost revenue they think about ensuring service delivery whether it's for soldiers or taxpayers or patients but it's all of the non-profit outcomes of ensuring access to data so that'll be fun for uh same 167 hours from now awesome and yeah speaking of shout out do want to give a quick update on the short url we have for great ransomware cyber and backup resource actually authored by our brainiac rick van over in there it continues to be one of the the most downloaded white papers we've had really probably in veeam's history so shout out to that shout out or look ahead to jason in the public sector coming this monday with that thank you so much rick for joining on behalf of jason and myself thanks everyone for tuning in stay safe stay positive and we'll see on the next live stream thank you bye