Data Controls Cloud Platform – Rehan Jalil, Securiti

This is texturing TV. Hey everyone, welcome back to techstrong TV. I'm really pleased to have our next guest.

I want to introduce you to his name is rehanjalia. And Rihanna is the president and CEO of a company called security rihad. Welcome to Tech strong TV.

Alan thank you so much for inviting. It's a pleasure to be here. It's our pleasure to have you on Sir Rohan.

We've had Security on our Tech strung TV. In the past some other folks from the company but assume that our audience doesn't know anything about you and security and and so forth. I'm gonna add go ahead man.

Did tell your story and what what should our audience know, I don't think it we're living in tolling a big bag of data like data is not only growing massively in volume, but also expanding in it's his breath. It's going in SAS Cloud. It's in public clouds.

It's private environment. It's actually, you know, all your data clubs modern data clubs the truly all the Innovation engine is driven by data. And while companies are trying to do, you know unleash the incredible power of data.

It comes with tons of obligation. And those obligations happen to be in security to give me the data secure happens to be responsible use of data or privacy environment variety of other things those obligations. I have to be properly governing the data and staying complying your own privacy.

There's so many other regulations. So while data brings a lot of you know, opportunities also brings a lot of obligations. The mission of Security is to enable companies to unleash the incredible power of data by using data in a responsible fashion keeping it secure and building trust to the consumers and other organizations feel safe to actually share the data.

That's that's the our mission in life and where we stand as the ecosystem. There's a ton of digital transformation going on. It is moving to public clouds and new architectures can be put in place where you can actually automate the Fulfillment of these obligations around data in a way that you don't have to worry about you can put this almost like in an autopilot so that you can go ahead and innovate on top of this data and that's really the mission like to enable Innovation on data by enabling properly proper controls around it.

I love it. You know what before we jump into this. I just want to get out of the way for people who maybe while they're watching this one open up on a browser.

What's the website for security? i And that's s e c u r i t i and yes here AI or we can say the control start problem. Either one is fine.

What controls? Data controls dot Cloud automl. Alrighty So we had let let's I think you framed the problem the issue and a potential solution.

Let's peel the onion back a layer too though and talk about I I think you you know security refers so it is Unified data controls you DC. Let's really kind of peel that what do we what do we mean when we're talking about this and how it how would you know, what's your vision? And how is this implemented in your product service would have you?

Absolutely, so think of security as enabling data Command Center just like network teams. Have a knock. And security teams of stock the data teams are things around data.

There should be a data Command Center. So security is enabling a data Command Center. What does it mean?

Let's contrast it. Sometimes it helps to actually if you contrast historically different teams inside the organizations, they have addressed their own needs, you know in a bit more, you know, focus in silos fashion what I mean by that they've been silos in the sense that security teams look at from the lens of keeping the data secure, right? So they have a review part of the puzzle.

They actually solve privacy team solve another part of the puzzle by incuring, you know through whatever means they may have to for responsible user data staying compliant with regulations like gdpr and cpre and so forth. That's separate part of the puzzle. Then you have governance teams.

They actually do, you know, another I was a part of the puzzle they try to solve with, you know, how to govern the data from access and entire lineage and other things. And then combines Kingston on site. What the security is enabling is to bring home it all together.

So there could be a common source of truth of complete understanding of data in this data Command Center. So data Command Center gives you full visibility on wherever your data is not just in on your private data center or on-premise not just in public Cloud not just in data Cloud not just in SAS, but everywhere so we security breaks the silos across visibility across all environments number one and also provides enough depth and breadth of the intelligence around data to all these four teams can utilize the common source of truth of understanding of data so they can actually fulfill their obligations how you do that? First you establish a very Broad and thorough deep layer of intelligence surround data.

That's what we're literally called Data intelligence there where it tells you what Data Systems you have what AppSec you have which are touching the data across all different environments. Do you actually know exactly what data systems are in the environment? Because Data Systems can keep also popping up some are coming from you know, Cloud providers some are coming from open source.

Someone coming from lasses offers on ours. That's what you get the full understanding of for Data Systems you have then on top of it. And here you want to know where is the sensor data because sensitive if you think about Allen is completely intermingled.

You know, your non-sensitive data and sensed data is completely jumbled up together. So you need some technology which security enables to know exactly where your sensitive data is surgically you know it. And then from privacy use cases the companies also need to know where is the data of a single individual and why is that because privacy is all about the rights of one individual and independent when their rights and dictated that way they live typically like if it's in California there and recipro if it's in you know, Europe under gdpr or Brazil is an lgbd.

So you gotta know that what's the data of a single individual across the organization so you can map to what regulations apply what you're obligations are. So the intelligence clear is war now where you need to know what the data system sensor data and who's data and the context around it. You know what consent I have from this individual because Dita having data doesn't mean you can use a card plan for any purposes.

That's what we call the Deep intelligence layer the intelligence graph. That's actually big. That's what also we call as you common source of Truth.

We are four different teams across the organization can potentially leverage to keep it secure to Make sure the compliant of privacy regulations to make sure you're governing it properly and of course your compliant with their regulation to enable it that's what we call unified data controls UDC that you're unifying the intelligence across the silos in unifying the controls. Do you not looking at the beast from different four different places and there is just not everyone has a different view over the data is there's a unified view of the data everyone agrees what the data right and are not controls are going to be there. And why this is the right time because you can see it's a beautiful architecture.

But sometimes you just cannot change the architecture why this is the right time because there is a digital transformation everywhere going on. People's data is moving from on-premise data warehouses to data at data clouds, right or it's moving from on-premise systems to public clouds. And while this traditional transformation is going on.

You can have a block more modern architectures which can enable all these unified controls and we've seen that Allen that security is being adopted at this point by some of the largest organizations on the planet including some of the largest financial top 10 Banks including some of the largest payroll companies largest Airlines largest retailers technology companies delcourse insurance companies. Anybody who has a lot of sensitive or data in general. These are desire to actually have much more comprehensive intelligence and control.

So, it's actually it's fun to be actually in this in this journey with the team at security. While I married I can share the little bit background why the steam is being very appropriate to build this technology. The team has actually is a strong background in protecting data, but we're running the cloud security business of semantec before starting this thing.

And before that the same team had been previous another company called elastic at which became a leader in in casby and also was running the cloud security business account at Blue court. So that combined experience of the team enabled the team tour and understand the problem statement very well. And once you understand the problem and you know, the nuances of the issues in a good position to actually in a way so yeah accordingly, you will see the Securities rated by men leading analysts on the Privacy side as literate number one technology on the planet and similarly adoption by some of the largest organizations around this concept of unified data controls is becoming with normal.

relations absolutely, so you know we had I agree, right I think for a little bit. We took our eye off the ball when it comes to data we were so wrapped up in like applications and app security and and cloud and the cloud infrastructures and and containers and multi-threaded applications and identity access can you know and all of this but we we almost forgot that really behind it. All data is Primal is primate is the Primacy right it if it's not it's about the data.

It's not all these other things. Serve as access to an Insight from the data, but it's about the data. However at the same time.

It is complex and a lot of what we see, you know trending in it or breaking down silos not building up silos. And so, you know for instance you mentioned earlier the knock sock kind of thing. Yeah, a lot of organizations.

Are you going to a combined knock sock because security needs to be part. of that dark function I would say the same thing needs to happen. Would you call data command centers right DCC?

Correct? Yes. Is the next evolution of this to build UDC?

into the general it management, so it's not. It's not a separate Silo, right it it's worthy of our attention obviously, but but it's more integrated. Is that something you can see with security down the road?

Yeah, I think I'll give you some examples here is one thing to what we think is something that you know, what customers are saying, right? And so we're learning from customers. Right so many for a large organizations, you'll see that Chief did Officer the CISO Chief privacy officers Chief compliance officers the utilizing this right?

So it's kind of interesting to see that not just one group, but actually across different functions, of course CIO, you know often people report into CIO becomes a general function with me within the it side of things. So we actually experiencing that right now. In fact, if you go to this domain data controls dot Cloud, you can see the use cases that utilize it so it's data controls one word dot Cloud.

You can see the use cases listed here where many of them are tied to security some are tied to privacy summer try to access governance come our try to compliance side of things, but the different functions are utilizing because it's a common source of truth that established the other thing I'll share with you and is there are hundreds of millions of websites out there mobile AppSec AppSec. They all need a front-end representation of how the utilize the data. And all these organizations organizations, they need to give rights to the consumers.

whose data they're collecting even if it's login information, even if it is their preference, even if they're shopping list, even if their orders is data is belongs to the end consumer. It doesn't belong to the company by law. They have rights and companies have to represent.

So we we launch something called privacy Center dot Cloud privacy centers one word dot Cloud which enables organizations to also provide the front and interface. To represent how they are treating the data what rights they are giving to the consumers and make it super easy because it's a very complex topic because your traffic can come from across the globe, right your traffic can come from Europe or come from New York or from California or Canada and you can just stop the traffic But whichever place it comes from they have their rights. So you have to automate, you know, enabling of these rights.

So privacy centered about Cloud actually provides a very easy way to understand what the rights are and you represent to those consumer for yours that you're actually they can trust you with with their data and you want to honor it. So there are many things you should do you're consent you have to collect third party can send subject rights. Do not sell do not track privacy notices privacy Center Cloud packages everything in one place.

It's worth actually checking out private cloud. I got it. I'd love to talk to you about this all day.

But unfortunately, you're about out of time. ai. ai.

That's right. It was Data control Comm was that it? You're not cloud data controls that tells me yeah daily controls that cloud until then we're having though.

Thank you so much for coming on Tech strong TV with us today and sharing a little bit about Unified data controls and data controls cloud and the security story. That's the lock and we'll be in touch. Adam is a pleasure talking to you.

Thanks for hosting. Thanks. Thank you.

A pleasure. We're gonna take a break here on Tech strong TV. We'll come right back.