Streamline your digital transformation sales for security with airSlate SignNow

How to create outlook signature

ladies and gentlemen please welcome general manager security Steve Firestone good morning everyone how Guzan right that was a that was a great keynote that Mike did and what I wanted to start with we've had a great year last year we talked about securely enabling the business and this year it's as important as ever and I think that we have found and especially with some of the examples of enabling the business that we're shown in the keynote that we've talked about things that are coming up it's very very interesting to see how security is part of digital transformation so I just want to just give a quick little example about digital transformation so the idea is that we have a brick and mortar company and they're going to open themselves up through api's through other technologies to be part of the disruptive trends that we're seeing so security is one of the key obstacles and enablers for that so if you were to ask people can I put my data elsewhere can I let everybody have access they would say security is one of the biggest concerns so security enables digital transformation so what we want to say this year is securely and empower the business what does empower mean empower means to make more confident to trust and that's what our focus is about when we talk about cloud and mobile that really opens up some interesting avenues for bad guys as well as enablement so if we think of an example maybe a retailer for example that has customers who come in and the company wants to to monetize that they want to expand that they want to use that relationship with customers maybe the financial transactions those customers use to add partners to open it up to that and we're actually going to introduce somebody who's doing that later on you've also heard and seen in the keynotes other businesses that are really being rewritten by software so cloud and mobile open up these new attack vectors and what does that look like so on from 2004 to 2014 what you're going to notice with the size of the bubbles is the severity of the attacks and another thing you might notice up here is the repeat patterns so a company that might have found a way to keep themselves secure in 2006 has a problem in 2010 maybe another problem in 2012 why would that be employees change technologies change and so just like in the digital transformation that we're occurred in the keynote we need to be continually diligent at keeping things up to date now the cost of this of these breaches I mean is incredible billions of identities exposed three trillion dollars spent in remediation in security measures and impact to the organization's three trillion dollars and you can see how these things are happening now let's just make it a little bit more relaxed a little more interactive how many of you by show of hands so I know we walked over here we got the blood going how many here have either in your organization experience the breach or through somebody who's in a similar industry had an experience where you've heard about a breach raise your hand look around look it around at how much and who wants to get called to the boardroom to have to explain that companies must have those controls in there so let's think about a few examples of what is that what does that mean so in the past everybody was inside of a firewall and they opened up some VPN some people wouldn't even do that for a long time now we're having to expose applications if we really want to be part of what we saw in that keynote we have to have the tools we have to have the solutions to enable our businesses to go fast now this is just a reflection of what you all have seen you can't go a week without looking at a periodical a on your favorite online media about what's going on but what this is really showing is that the days of the past where somebody got in to get credit to get their ego to you know hey I you guys well that's cool but it's so much more sophisticated now the goal because again the penalties are high you got to have it's a risk reward what am I going to be doing so cybercrime I'm going to sit there and plant something a Trojan horse and I want to wait for that to develop I want to monetize as much as I can what I'm going to get out of what's going on I have patients there's a whole attack chain of how to make some of these things happen in a 12-month period 110 million Americans were impacted 432 million identities exposed that's in the US but it's a worldwide problem in one of one Asian country forty percent of the personal information of the country was exposed this is a serious serious issue and it's today but let's turn it from theoretical let's let's make it a little bit more practical how easy do you think it is to do some of the things we see we've seen how easy would it be for that next generation of technologists Xbox user who ends up playing script kiddie to do something interesting how easy is it going to be unfortunately it's not hard so if you're going to risk all the penalties you're going to set up all of this expense and infrastructure to make that happen what do you think what would you want to do so who what identity if I'm going to go through all of this what would I want to attack I'd want to attack the privileged identity the privileged user why the privileged user what is a privileged user that's somebody who protects your crown jewels whether it's your customer list your employee data your partner information they have access because they can do maintenance on the system they can upgrade an application they can something so they have access to a lot of information so if I were going to attack and risk all the penalties I'm going to go after that privileged user how would I do that is there anything that for example we use social information in our personal lives right we go out on a vacation we share pictures we maybe have family trees around there's other information that we use and unfortunately many of us as human nature we use that information for our access credentials for answering those questions that you get sometimes when people say why don't you answer these things so that's not hard so what I would do or what the research shows is I'll just go to LinkedIn and I will search for an IT administrator do you think that's hard not at all so I get a list of names what do I do next oh by the way while I'm searching for those lists of names I can find your company and now what i can do is i can find your manager your vice president your CEO and if i'm good i can emulate them in sending you something to make you at ease hey accept a friend request accept a linkedin request from this person's name and we all use social media social networking to help us in our lives so I then go to Facebook and I search for that no problem I can get that information now many of us were security professionals hopefully we have turned off our public profile information better yet some of the customers that talk to me they have company policies to say no LinkedIn no Facebook talking with a government contractor that's part of this you know we get the training in as employees in a company and they say please don't do this please don't do that whether it's HR policies but security policy will say you can't do that doctors they don't a psychologist a mental health professional really doesn't want their patients to find out about it so what do they do naturally right what they might do is I my name is Steve Firestone right so I create a facebook account called Steve good year do you think the bad guys can't figure that out better yet if I know family tree there's there's open on the network relationships between you and your family I can look up who your grandfather's I can look up information about you why am i doing that because i want to send you a friend request I want to find out if you have that spoofed ID and then what my goal is to get information about you that you may have gone on vacation you may have done your children's sports and believe it or not we end up putting access information about our lives that we remember so that's how easy it is and that payoff for that that admin is incredible I can pull now with the request I can go and I can set the traps so there are debates should we open up things to social media what should we do in our company's security needs to be easy we need to be able to anticipate that and still help with what's going on we have to protect that privileged user we have to protect information knowing the kinds of attack vectors that are going to be there and we call that security for the modern era how are we going to enable the business empower securely empower what we're trying to do the stuff we saw in the keynote the information about getting mobile apps about having cloud services we have to be able to provide the security that does that to give people confidence if our data is out on an infrastructure-as-a-service if our if we're allowing a lot of people come from mobile devices these open up more patterns that allow the bad actors to have more ways to get in to us this is security for the modern era and to talk about what CA is doing for that I'd like to introduce our next speaker Nick Nichols he the senior vice president had a product management strategy for us Nick thank you so much I'd like to ask you to share some information about what we're doing to help thank you Steve so I've had the opportunity to speak with many of you over the last six months and I'm hoping to have the opportunity to speak with many more of you over the next couple of days but one thing I would like you to consider is how many identities are you really engaging with as part of your business on a day-to-day basis I think you'd find that the answer is kind of surprising in fact when you start looking at it we often engage with depending on the size of the enterprise we often engage with up to thousands of privileged identities and administrative accounts you might be dealing with tens of thousands to hundreds of thousands of employee identities and then when you start talking about social identity and consumer identities this can go up into the millions then we start thinking about the this new occurrence of the Internet of Things we start talking about internet-connected devices and sensors and appliances when you start to consider all of those identities as part of this mix as well the number soars into the billions so when we start to talk about securely enabling the business it's really about putting the proper controls around managing and protecting these identities however it only takes one identity to compromise you know your environment and actually open yourself up to a breach so empowering the business really means that if we can protect and prevent that kind of breach from occurring if we can make sure that that account isn't compromised you can protect yourself that much further and this is what CA is here to help you with and to to give you some examples of this we've made some significant investments covering two key areas first we made an acquisition this summer of exceeding so exceeding is a privileged account management company that helps you manage and monitor all of the activities around your privileged identities and in particular it extends this out to public and private clouds now this is really crucial because it is these very privileged accounts that are the key targets for many of these attacks so by taking what we've acquired with Exede iam and combining that with our secure access control capabilities we are able to help you put some protections in place to help prevent yourself from being dangling out there is breach bait we've also had a very busy summer we made another acquisition of itm logic now itm logic provides access governance capabilities so this helps you better review and decide what appropriate access should look like now idea of logic was a very trusted see a partner and helped do many identity management deployments over the years and with that they had some interesting ideas and they created some great innovation around that on top of our technologies and so now we've incorporated that into our new identity sweet and speaking of that by leveraging both of these acquisitions I have two announcements to make we have two new releases available now one is with our new privileged access management capabilities and we've extended this to support VMware NSX and later today at 2pm VMware and CA together will be hosting session here to go over the details of that very release also we have by taking what we have acquired with IDM logic we have placed this also into our identity sweet and we have released a new version of our identity sweet that will help you better certify access review access and provide self service for for these access requests within your environment so it really comes down to this when we're talking about security in the modern era it really is about you know how do we protect ourselves when we are dealing with all of these different changes that are happening in today's world when you think about a cloud and mobile based world the traditional security models just no longer apply so when you take network security for example or you take a endpoint security for example when the data can be anywhere where's the perimeter that you can protect with network security there is no longer a perimeter when you take endpoint security for example well you're coming in from anywhere you all these different mobile devices out there can you lock down every single device well that makes it very very difficult so the only thing that you can really tie to is a fundamental understanding of who it is that you're dealing with and what that relationship looks like so this is why identity is key to security in the modern era so from that perspective our mission is to deliver solutions that empower the right people to have the right access when and where they need it and by doing this we can help stop breaches in their tracks we can help empower individuals to be able to do the things that they need to do by having the appropriate access but not having excessive access and we can help the business really take advantage of all of the opportunities of digital transformation with confidence and with in a secure fashion so that way they can do so without compromise so here are some examples of how we can securely empower the business first let's examine you know employees and contractors we need to be able to make that kind of access very easy so we don't want people waiting around we want them to be productive right away and we want to make sure that as they're doing this that all of the security is is in place as part and parcel of these activities next we want to make sure that all of the security is inherent and frictionless it has to be transparent it should be part of the fabric and to securely enable the business and to really facilitate this digital transformation we can't have security being in the way we need to not be part of the the team that says no but how do we enable yes but without compromise and as we've discussed we need to protect access for our administrative users and our privileged accounts but things become even more important when we start to consider the identity of things now when you start looking at the internet of things that a lot of times that conversation ends up being oh well that's far off that's not something that I have to worry about today actually I would disagree I think this is something that is becoming much more of a concern today and you know let me share with you a very specific example something that you're very familiar with our cars so if you think about it cars actually have identities and i'm not talking about personalized license plates or that you have a pet name for your car i'm talking about the fact that you actually have a computer on your car and when you take your car into the mechanic into the dealership or what not to get serviced they'll connect to that car they'll download diagnostics that have been gathering up as you've been driving the vehicle and depending on what the problem is they might actually even update the and change the control settings on the car so with that I mean you're really talking about this this is a software platform this is a computer on wheels and now even you know discussions are going on to how we can even upgrade our cars with software downloads adding new features and capabilities and downloading them just as if you were going to be updating your tablet or your smartphone so with that starts to open up a whole bunch of interesting possibilities but it also can open up some unintended consequences so let me show you what I mean and we'll play a quick video like many thousands of jeeps around the world it can be remotely over the internet through a cellular connection to its entertainment system that would allow someone to take over its steering its transmission and even its brakes to demonstrate that I'm going to act out today's crash test dummy and drive it on the highway here in st. Louis while charlie crist hijack its digital systems from Charlie's house miles away they wouldn't tell me what they had plans but they assured me that it wouldn't be anything life-threatening so first we're going to turn the fan on yeah let's turn the fan on to the even notices re all that something just turned on all the fans and PC and stuff I didn't do that music I'm gonna do it do it kill the engine so we're killing engine right now I stomped on the gas but the Jeep slowed to a crawl after their stunt on the highway Chris and Charlie still want to see me a couple of other tricks below a certain speed they can control the Jeep steering as long as it's in Reverse poppets locks mess with the speedometer and of course disable the brakes okay hold on tight hold on he's not gonna so pretty scary huh needless to say jeep has since patch that vulnerability but i think you'd agree with me is that we need to have better controls in place around these internet-connected devices so so when we start talking about into things it can be applicable to things like your car or other devices and appliances that you might be using on a day-to-day basis so we really need to protect this kind of access just like we would within our networks and protecting access to our critical applications so when you start to think about you know this from this perspective we want to make sure that we're enabling the appropriate access we want to allow the mechanic to do his job to fix your car we certainly want to make sure that you can drive your car but we want to make sure we're preventing inappropriate access that we stop somebody from doing what we just saw so as you would expect you know the security technologies that you use today with in your enterprise are often the same technologies that automobile manufacturers are starting to incorporate into protecting their cars critical systems these are CA security technologies so across the way in the solution showcase we actually have a demo to show how we can protect the cars critical systems through appropriate authentication so this is an exciting time I mean if you think about it we have huge opportunities ahead of us we can do all sorts of amazing things but with these great opportunities come great responsibility as well and we need to focus on providing the proper controls to make sure that we're doing so without opening ourselves to undue risk this is the key to identity centric security so this week you'll learn how this strategy impacts our road maps and how we're providing simplified deployments how we're enabling a more app like user experience within our products and how will be able to provide better insight and control through advanced security analytics and as you attend the roadmap sessions excuse me we have three roadmap sessions at this year see a world here today in this theatre and tomorrow and each session you'll get the opportunity to speak with our product managers and talk about the new features and capabilities that will be releasing over the next little while so throughout this week you have a tremendous opportunity to learn from your peers so take the time to sit back listen to what's going on and understand how your peers are going through their own digital transformations and that will give you the opportunity to learn new insights and understand how you might be able to leverage some of this within your own organizations to recognize a few key examples let me bring back Steve Firestone Steve Thank You Nick we're we are proud to have gone through an exhaustive process to select three candidates and give three awards today the VIP Awards nice play on words right for vision impact and progress companies that have the vision to see the transformation that's coming that have used the solutions to be able to advance their business now we're going to talk about all customers but right now let's give congratulations to Sandra stoneham so congratulations DBS and Sandra coming up for DPS we're going to go on this mark and take a picture here right here now DBS talks about itself as the safest bank in Asia they are using our single sign-on and our identity management solutions to be able to advance the agenda of what's going on so congratulations DBS congratulations Sandra and thank you so much our next award winner is Toby gossen from Disney congratulations Disney again very tough competition to get an award here amongst all the customers thank you so much congratulations on the market so Disney is using our privileged access management software to really protect the brand it's one of the world's known brands leveraging this to be able to deliver services and to be able to expose applications that are really making it fun for us thank you again and congratulations to Disney you don't imagine you have hundreds of candidates and you get to only select three so please don't be concerned because it is a very very tough thing so are our last award winner please come on up Mike Shakespeare congratulations tesco let's go on the mark there so Tesco is an online retailer a grocery store it's the what I was talking about in the beginning of the example they leverage our solutions to be able to make their business growth they are the largest UK retailer and one of the largest online retailers in the world they have taken the suite of products to protect and enable their business for partners to leverage the employees to do financial transactions and really appreciate it thank you again congratulations Toby congratulations Mike and congratulations sent and congratulations of course to the companies that you represent and for all that you do to partner with us now I want to thank all of you for taking the time to come here and for all of the exceptional work you're doing I think when we talk about digital transformation hopefully today we've lined up enough of a of a message where you can see how would you expand out your businesses as you create the digital identity that helps the digital transformation as you saw some of the things that are going on you can recognize that the future is now now to validate some of that go out into the into the hall and talk with some of the partners they take a unique view one of the things that CA technologies is big on is a heterogeneous open environment to be able to allow people to work together in many of our organizations we're going to have to play nice we're going to have to work together to deliver solutions to innovate solutions together and these partners have come all the way to help us to share how we can enable each other's technology to provide the solutions for all of you so please go out and see them and also we have a number of really amazing demos out on the showroom floor today as well so I encourage you to go and take a look and see exactly you know some of these things are new technologies that were showcasing as well as getting a feel for how we're simplifying our offerings and how we're providing a much greater customer experience as part of this so so please check them out so I wanted to summarize a little bit about the digital transformation and i also want to focus though on that customer experience our promise to you to be a trusted advisor to work on the things that Mike talked about in the keynote about quality about trust you're going to see examples out there on how we can lower the operating costs here so that you can do things let me give you a promise that we are going to work to earn that to partner with you and to enable or businesses and securely empower the kinds of things that you're talking about and I think that validation is going to be you we're going to meet with several of you we have met with you feel free to ask questions feel free to share feel free to challenge us as how we can help you to make this week the best week that you've had with CA Technologies now as we think about all of the things that we provided for you to take advantage of it of what we have to enable your businesses I just wanted to recap a few few easy examples of the things that you saw so you saw a connected car you saw an Internet of Things that's something we have to work with you saw analytics in terms of what kinds of things will do in an identity solution you're going to get to see presentations later about these solutions think about how we've tied the message of security in the modern era together to each of the proof points and then think about how rapidly we have to do something and i'll just i'll leave you with this message and you can't rewrite your applications many of us it's a challenge to upgrade to get the right down time to be able to upgrade our applications much less rewrite them if we're going to keep up with what's happening in the disruption the ability to use AP is to map to existing infrastructure to understand the security policies that are there and enable us is critical the the knowledge that we're protecting that privileged user that we're opening and protecting at the same time is really important so I want to basically close with saying we're securely empowering the business and thank you all for coming and I hope you have a great show yes enjoy the show you