Welcome to Learning English, a daily 30-minute program from the Voice of America. I'm Ashley Thompson. And I'm Dan Novak. This program is designed for English learners, so we speak a little slower, and we use words and phrases, especially written for people learning English. On today's program, I have a story about scientists that are studying the material of ancient structures to see why they have lasted for so long. Jill Robbins reports on a black ballet school in London. Katie Weaver brings us this week's health report on the approval of a second malaria vaccine. Later, Jill returns with Andrew Smith to present the lesson of the day. But first, ancient builders across the world created structures that are still standing today, thousands of years later. Roman engineers built thick concrete sea barriers, for example. Mayan builders created sculptures to their gods. And Chinese builders raised walls against invaders. But there are many recent structures that are already starting to fail. The concrete that makes up much of our modern world lasts around 50 to 100 years. A growing number of scientists have been studying materials from long ago. They are breaking apart pieces of buildings and reading historical texts, hoping to learn how they have stood for thousands of years. The research has turned up a surprising list of materials that were mixed into old buildings. They include tree bark, volcanic ash, rice, beer, and even urine. These unexpected materials could have the ability to get stronger over time and heal cracks when they form. Figuring out how to copy these features could have real impacts today. While our modern concrete has the strength to hold up very tall buildings and heavy infrastructure, it cannot compete with the endurance of these ancient materials. With the rising threats of climate change, there is a growing call to make construction more sustainable. A recent UN report estimates that the built environment is responsible for more than a third of carbon dioxide emissions worldwide. Cement production alone makes up more than 7% of those emissions. Many researchers have turned to the Romans. Starting around 200 BCE, the Roman Empire was building concrete structures that have stood the test of time. That includes the pantheon to the aqueducts that still carry water today. Even in places where seawater has been hitting structures for ages, you will find concrete basically the way it was when it was poured 2000 years ago, said John Olson. He is an archaeologist at the University of Victoria in Canada. Most modern concrete starts with Portland cement, a powder made by heating limestone and clay to super high temperatures and grinding them up. That cement is mixed with water to create a paste. Then material like rock and gravel are added. Records from ancient builders show the Roman process was similar. The ancient builders mixed materials like burnt limestone and volcanic sand with water and gravel, creating chemical reactions to tie everything together. Now scientists think they have found an important reason why some Roman concrete has held up structures for thousands of years. The ancient material has an unusual power to repair itself. Exactly how is not yet clear, but scientists are starting to find reasons why. Vladimir Masic is a civil and environmental engineer at the Massachusetts Institute of Technology. In a study, he said this power comes from chunks of limestone throughout the Roman material that is not mixed in evenly. Researchers used to think these chunks were a sign that the Romans were not mixing up their materials well enough. Instead, the scientists found that the chunks could fuel the material's self-healing abilities. When cracks form, water enters the concrete, Masic explained. That water activates the leftover lime, creating new chemical reactions that can fill in the damaged sections. Today's builders cannot just copy the ancient processes. Even though Roman concrete lasted a long time, it could not hold up heavy buildings. You couldn't build a modern skyscraper with Roman concrete, Oleson said. It would collapse when you got to the third story. Instead, researchers are trying to take some of the ancient material and add them into modern mixes. Masic is part of a company that is trying to build new projects using self-healing concrete. People do not need to make things last quite as long as the Romans did to have an impact, Masic said. If we add 50 or 100 years to concrete's lifespan, he said, we will require less demolition, less maintenance, and less material in the long run. It was a criticism about her afro-braided hair that led Ruth Essel to create what she calls a safe space for black dancers. The founder of Pointe Black Ballet School in London said when she was a child, teachers and others all but punished her for not following the traditional ballerina way. I'll never forget my first time about to dance on a West End stage, said Essel. That was the time the 10-year-old wore her hair braided at dance practice.  Her happiness disappeared when her teacher pointed at her in an almost all-white group of dancers. The teacher told her to take out her braids because it looked like a mess. That was just one of several times Essel was made to feel bad about being different. These are all things that happened before I was 16 years old. And I didn't know any better, she said. These difficulties led Essel to establish Pointe Black in 2020 at the age of 26. I wanted there to be a black environment. I wanted there to be people who looked like me. I wanted there to be a teacher that looked like me, she said. She said it felt like she was given power when she could finally wear black clothes and shoes rather than the traditional pink color for ballerinas because it was closer to my color. Ballet has expanded across the world with famous ballet dancers from Asia, South America, and Cuba. But many still think of ballet dancers as light-skinned. And classical ballet companies try to have a similar look for dancers in classical works like Swan Lake. That makes it harder for dancers of color. Some 2.2% of dancers at the top four ballet companies in Britain are of black ancestry. That percentage is in line with the country's black population at 3%. A spokesperson noted that keeping diversity is important to everyone at the Royal Academy of Dance, saying dance is for everybody. But Essel wants to speed up change by introducing new ideas. She said her shows use African dances and music. And dancers wear different hairstyles, including twists, rolls, and afros. She added, it's really just about celebrating the person no matter where they come from. Maya Bealspring is a 10-year-old student at Pointe Black and another ballet school. She enjoys exploring different kinds or types of ballet. I get to experience different types of ballet, different music, she said, after a perfect practice for an upcoming show. Essel teaches all the classes in her school. She said, everything about my school is what my younger self would have wanted. I'm Jill Robbins. The World Health Organization, or WHO, approved a second malaria vaccine last week. The decision could offer a less costly and readily available shot to help fight the disease. WHO Director-General Tedros Adonam-Gabrielsis said the UN Health Agency approved the new malaria vaccine based on advice from two expert groups. They suggested the shot could be given to children at risk of the disease. As a malaria researcher, I used to dream of the day we would have a safe and effective vaccine against malaria. Now we have two, Tedros said. Britain's Oxford University developed the new three-shot vaccine along with the Serum Institute of India. Research suggests it is more than 75% effective. The vaccine can protect people for another year with an additional shot called a booster. Tedros said the shot would cost about $2 to $4 and could be available in some countries next year. Earlier this year, health officials in the African countries of Ghana and Burkina Faso also approved the vaccine. Infected mosquitoes spread the parasitic disease when they bite people. This is one more tool we will now have, but it's not going to replace bed nets and spraying insecticides, said John Johnson of the aid group Doctors Without Borders. This is not the vaccine that's going to stop malaria, he added. Johnson was not part of the expert groups that advised the WHO. The WHO approved the first malaria vaccine in 2021. The UN agency described the vaccine development as an historic effort to end the deadly disease in Africa. The continent is home to most of the world's estimated 200 million malaria cases and 400,000 malaria deaths. But that vaccine, known as Moskerex and made by GSK, is only about 30% effective. The treatment requires four shots and becomes less effective within months. WHO experts, however, said the data to date on the GSK and Oxford developed vaccines does not show which one is more effective. The Bill and Melinda Gates Foundation had been one of the GSK vaccines' biggest financial supporters. But the non-profit ended its support for Moskerex last year. It said the GSK shot was less effective than officials would like and that money would be better used elsewhere. The big difference with these two vaccines is access, Johnson told the Associated Press. He noted that about 10 countries or more could get the GSK vaccine in the next few years. GSK has said it can only produce about 15 million treatments a year. The Serum Institute has said it could make up to 200 million treatments of the Oxford vaccine a year. Alistair Craig is with Britain's Liverpool School of Tropical Medicine. He said countries still waiting for the GSK vaccine should turn to the Oxford vaccine instead. If the new vaccine is widely available across Africa, it could greatly reduce severe sickness and deaths caused by malaria in a few years, Craig said. Neither of the vaccines stops transmission of malaria. As a result, immunization campaigns alone would not be enough to prevent epidemics. And reports of resistance to malaria drugs are on the rise. You would be foolish to think that this vaccine is going to be the end of the malaria story, Craig said. In a separate decision, the WHO's expert group also approved the dengue vaccine made by Takeda. European Union drug officials approved the dengue vaccine earlier. The WHO advised that the dengue vaccine be used in children age 6 to 16 in countries where the disease is widespread. Dengue killed almost 1,000 people this year in Bangladesh. I'm Katie Weaver. My name is Andrew Smith. And I'm Jill Robbins. You're listening to The Lesson of the Day on the Learning English Podcast. Welcome to the part of the show where we help you do more with our series, Let's Learn English. The series shows Ana Mateo in her work and life in Washington, D.C. In Washington, D.C., you can get to many places by using the bus or metro train. And a lot of people use bicycles or scooters to get from one place to another. But it can still be useful to have a car. And that's why Ana wants to get her driver's license. The license gives her legal permission to drive a car. To get the license, she has to take her driving test on a Saturday. In Lesson 21 of the Let's Learn English series, Ana's friend Marcia invites her to a party. The party is on Saturday, so Ana thinks she can't go to it because of her driving test. Let's listen. Hey Ana, my friend is having a party on Saturday. Can you come with me? Sorry, I can't come with you. I have to get my driver's license. Will you be busy all day? I don't know. First, I have to take a test on the computer. Then I have to take a test in the car. But you have to take the test during the day, don't you? Yes. Luckily, Ana learns that the party is at night. The party is at night. Oh, then I can come with you to the party on Saturday night. Great. I have to help my friend with the party. Can you help me? Sure, that sounds like fun. In a previous lesson of the day, Andrew and I explained how speakers of English change the pronunciation of the verb can when they talk more quickly. Can changes to can. Listen again to Ana and Marcia. In these sentences, they mostly pronounce the verb can with slower speech. The party is at night. Oh, then I can come with you to the party on Saturday night. Great. I have to help my friend with the party. Can you help me? Sure, that sounds like fun. Everyone has to bring something or do something. You can bring food or you can perform. Really? I can perform? You can. Can you? Yes. I can recite poetry. Did you notice that the more Ana wanted to emphasize or make her meaning clear, the slower she said the word can. Oh, then I can come with you to the party on Saturday night. Speaking a little faster, the pronunciation starts to change. Really? I can perform?  And if Jill quickly tells me that she can help me tomorrow, it sounds like this. I can do it tomorrow. Now we're going to show another example of how we change vowel sounds and reduce words. Reducing means we make words shorter and faster. This next example uses the two words have to. When Ana and Marcia say those two words quickly, the sound changes. First, listen to the slower speech. Sorry, I can't come with you. I have to get my driver's license. Will you be busy all day? I don't know. First, I have to take a test on the computer. Then I have to take a test in the car. But you have to take the test during the day, don't you? Now, listen to the faster speech. First you'll hear Marcia, then Ana. Now I have to go shopping for food. I have to help Marcia shop. Now listen to Jill and me say have to in a short conversation. So Jill, what are you doing later this afternoon? I have to look at the comments on our YouTube channel. How about you? Well, I have to do a lot of things. I have to check my camera. I have to review some notes for a story. I have to go to the grocery store. I have to... What else do I have to do? Oh, I have to clean up some things. And I have to get ready for tomorrow. Whoa, do you really have to do all that? Can't you wait and do some of it tomorrow? I guess I don't have to get it all done, but I'd rather do it sooner.  So Jill, would you rather be a hammer or a nail? Well, I don't think I would want to be either. But if I had to choose, I would be a hammer. But I'd rather be a bird than a hammer. Me too. We're going to talk more about the phrase, I'd rather, in another lesson of the day. I'm Jill Robbins and you're listening to the Lesson of the Day on the Learning English Podcast. Now let's go back to Lesson 21. Listen to these two sentences and see if you can identify or name the subject and verb of each sentence. Everyone has to bring something or do something. Nobody recites poetry at parties. Did you hear the subject and verb? In the first example, they were the words, everyone has. And in the second one, they were the words, nobody recites. Recites means to say something aloud, usually from memory, like a poem, speech, or the words to a song. There is something interesting about the subjects of those sentences. In fact, the words are so special that everyone studies them in English class. Andrew, when you think of everyone, do you think of one or more than one person? Well, of course, I think of more than one. Yeah, you're thinking of lots of people. But here is why the word everyone is special. Listen to the example again. Everyone has to bring something or do something. Marcia says, everyone has. Everyone means more than one person. But the verb has agrees with a singular subject. So that's how the word is special. The word nobody follows the same rule. We can think about more than one person when we say nobody. But the verb agrees with a singular subject. Listen. Nobody recites poetry at parties. Here are some more words that can refer to more than one person or thing, but that take a verb that agrees with a singular subject. The words are every, everyone, nobody, somebody, someone, everybody, anybody, and anyone. In English-speaking countries, everybody learns the grammar rule for those words in school. But not everyone remembers them. And some people may not feel it sounds natural to follow that rule with the word every. Here is a sentence you can use to help you remember the rule. Every window needs washing. And here's some words from a song. Everybody loves somebody sometime. Ah, yes, I know that song. Are you going to sing that, Jill? Yeah, everybody loves somebody sometime. Sounds good to me. Thanks, but there's a famous recording of that song by Dean Martin that sounds a lot better. Well, Jill, what's the plan for our next lesson of the day? I'm still working on that, but you just said something that gives me an idea. In lesson 22 of Let's Learn English, Anna is planning her new show for children. Her producer, Amelia, asks her about it. Let's listen. So Anna, what's the plan for the show? When we say, what's the plan for, that's just another way of saying what will happen or what are we going to do? And we say, what's the plan for when we are doing something together with another person or persons? Tune in for our next podcast when we listen in on Anna making plans with her producer, Amelia. Thanks for listening to the lesson of the day on the Learning English podcast. I'm Jill Robbins. And I'm Andrew Smith. And that's our program for today. Join us again tomorrow to keep learning English through stories from around the world. I'm Ashley Thompson. And I'm Dan Novak.


Hey, this is Brett, and this 2017 GMC Acadia SLT is stock number 12565Z. We're here at Summit Automotive in Fond du Lac, Wisconsin. You're new and used SUV headquarters. This 2017 GMC Acadia has the 3.6 liter V6 engine. It puts out 281 horsepower. This Acadia has been fully safety and inspected by our service shop for the state of Wisconsin inspection process. It has a fresh oil and filter change. All the fluids have been checked and topped off. And this one is 100% ready to go. We're going to go all the way around inside. Start it up. Take a look under the hood in this video. Dark sapphire blue metallic is the color, and we shoot all of our videos in 1080p 60 frames per second, so if you have HD capabilities on your computer, tablet, smartphone, or television, I highly recommend turning them on right now because it is your best way to check out the quality, condition, options, and cleanliness of the vehicle before seeing it in person. And if you like the video and how we do things here at Summit Automotive in the upper right-hand part of the screen is a subscribe button to our YouTube channel. Click that, and then click the bell notifications, you'll get updates on the videos we do each and every day. This one comes with the painted alloy rims, and it has Michelin Defender 235-65R18 tires on it. These tires look like they have probably about 60% of the tread left on them. Front fender is in excellent condition, I didn't see any dents or dings on there. Does come with the projector lamp headlamps, the LED running lights, and the projector lamp fog lamps. Front bumper is in excellent shape, I didn't see any dents or cracks or major scuffs on there. You get the chrome-trimmed grille, and the hood is in very nice condition as well. I didn't see any dents or dings on there. Headlight lenses are nice and clear. Passengers side front fender is in excellent shape, no dents or dings on there, and the passengers side front rim, no major scuffs or scrapes, looks really good. As you go down this side of the vehicle, take note of how clean the body is, how reflective and mirror-like that paint is. We take these HD videos so if you are far away or even if you're close by and just cannot make the trip down but you're still interested in purchasing the car, you can see the vehicle, hear the vehicle, and have confidence in the vehicle that you're looking at before you even get here. So when you do get here, there's absolutely no surprises and you can make a smart and informed buying decision from wherever you're at. And if this video helps you make that buying decision, let your salesman know that you saw the video, that it was helpful, and that Brett sent you. Back rims in nice shape, and the back tires have just as much tread as the front tires, maybe even just a little bit more. Coming around to the back of the vehicle, rear bumper is in nice shape. You can see it does have the chrome-tipped dual rear exhaust, backup parking sensors, towing package, which includes a receiver hitch and four-pin wiring. The tailgate is in really nice shape. It is a power liftgate, and that works nicely. This is your cover for your receiver hitch. We keep them inside the vehicle so they don't go missing. And those seats do fold down, just kind of pull the strap and push it forward like so. You can see just how nice and flat that those go down. And when the second row is down, you got even more flat space to store stuff. Those seats come up just like so. Then there's a little storage bin underneath here. This is also where your RPO codes are. See if I can get those to focus. There you go. Feel free to pause those or pause it if you know your RPO codes. Anyways, to get this gate down, you can see the shocks are doing a nice job holding that up. Just press that button, and then it comes on down. And as you go down the driver's side, just as clean as that passenger's side, rear quarter looks really good. And for full disclosure, this back room is in excellent shape as well. Four-wheel disc brakes on this vehicle. And the driver's side doors look really good, too. You do get blind spot monitoring in the mirrors. They are heated as well.  There are no rips or tears on the seats. Power driver seat with lumbar, factory floor mats. It does have auto headlamps, power windows, power locks, power mirrors, wood grain trim on the doors. And this one does have Bose sound system. We'll hop inside, check out the miles, radio, and everything that this vehicle has to offer on the interior. You can see that this one has 72,452 miles. Let me get that to come back up. Well, we'll just start it up here. You can see that it starts right up. No check engine lights or anything like that. Instrument cluster is very nice and clean. You get a compass display on there as well. It comes with the leather wrapped steering wheel, Bluetooth and information center controls on the right, cruise controls on the left, and you do have audio controls on the back of the steering wheel. You can see that this one comes with the GMC IntelliLink system, AM, FM, and Sirius XM radio capabilities on here. This one also has a projection manager where you can project your cell phone to the screen via Android Auto or Apple CarPlay. So if you have a nav system on your cell phone, project it right up there and it's like you have Navra on the screen like Google Maps or Waze or something like that. Back up camera also shows up right there and that's working nicely too. You can do your rear climate controls here. You can do your other climate controls up there, but if you don't like doing them up there, don't worry. You can do them on the more tactile buttons and knobs down here. Notice you do get heated seats on this vehicle. There's an AUGZ and two USB jacks in there, stability control, six-speed automatic transmission. You have your terrain or four-wheel drive settings here. It's an all-wheel drive, but you can put it into an all-wheel drive like so. Parking sensors, you get the wood grain trim on the center console as well. Passenger side floor mat and seat are in excellent condition, no rips or tears. Headliner is in nice shape. You can see it does have the skyscape roof, the power sunroof in front. Home link buttons for your garage door security systems, lighting systems, on-star and SOS buttons up there as well, and map lights. We'll take a quick look at the back seats and then we'll take a look under the hood. It's already started. In the second row, you get the quad seating. You get latch child safety system for any child car seats you may have. Both these seats are in excellent shape.  I don't think it's ever been smoked in. And then you get that second row fixed glass roof, part of that skyscape roof. 110 volt, I believe it's a 110 volt, 120 volt, 150 watt plug-in, two USB power points, rear air controls, factory floor mats, and carpeting are in excellent condition back here. These seats, two fold down like so and you get the third row two-seater right there. They also adjust child safety locks on the back doors and the bottoms of the doors all look really good. I would personally like to thank you for checking out the video today and hopefully from this HD video you will have been able to verify the quality and condition of this Acadia all the way around, inside and out, under the hobby of the 3.6 liter V6 engine. Engine bay is very clean, runs very smooth, and once again this Acadia has been fully safety and inspected by our service shop has a fresh oil and filter change, all the fluids have been checked and topped off. And this one is 100% ready to go, you can see the shocks doing a nice job holding that hood up, there is your emissions sticker. And I would highly recommend this vehicle from a quality and condition standpoint, I didn't see a single ding on it. And to see more pictures of this vehicle, one of our other 450 new and used cars, trucks, SUVs, minivans, wranglers, you name it, we got to go to that website right there, www.summitauto.com, full pictures and descriptions of every single vehicle from two locations all at summitauto.com. And if you'd like to check out more HD videos you can go to youtube.com slash summitauto. Remember to like, subscribe, and share on this video and all the videos that you see there. Click the bell notifications and you'll get updates on the videos we do each and every day here at Summit Automotive. In fact in a second you will see a link to subscribe to our YouTube channel in the upper left. Link to more Acadia videos like this one, the upper right, a link to this vehicle on our website and the lower left and a link to one of our latest YouTube videos in the lower right. Click those, check us out. And we're super excited to help you with this Ultra Clean 2017 GMC Acadia SLT in Dark Sapphire Metallic. Thanks again for checking out the video. Remember to like, subscribe, and share.


So you know when you're just taking a look around and come across something you think is worth sharing. Well that's why I bring you today as guys I have found a weapon vendor who randomly sells multi colored swords and they look incredible. How's it going guys my name's DP journey if you enjoyed this video leaving a like really helps out and if you like what you see and want to see more cyberpunk on a daily basis be sure to subscribe. Also people I'm giving you guys a chance to win any game of your choice. To enter my weekly giveaway simply drop a like on this video leave a comment down below and make sure you are subbed. Good luck. So I will straight up mention as I have found this vendor for hours and have not come across any legendary variant so as far as I am aware you can't get a legendary version of these multi colored swords. Uncommon droids and epics though you are good here. Legendaries not so. So these swords are our swords. If you have a samurai build and want to rock a pink sword you can do this and remember guys these can be upgraded to make them better if you like what you see and want to make them a little more powerful. Also depending on your level when going to grab these will also determine how powerful these are upon you purchasing them. Now the samurai builds I have seen you could use the weakest swords in the game and still shred absolutely everything and it's why I bring you guys this video today. So the weapon vendor you can see me going to unscreen now is the one who sells his multi colored swords. I mean there could be more but within my 300 or so hours put into this game this is the only one I have found but I will admit I haven't really been looking for them so there's probably more out there. So the vendor you can see unscreen now.  I have an amazing blue one which is by far my favorite. I'm just going to keep going and seeing what I can get here people but yeah just a quick video for those who asked me on my post earlier and I hope you enjoyed this one. Again a quick guide how you can get some amazing looking multi colored swords.  And on that note guys the end of the video has arrived if you enjoyed it leaving a like really helps out if you're new around here want to see more cyberpunk on a daily basis be sure to subscribe and if you never want to miss a video upload can turn notifications on by hitting that bell button but guys thanks as always for stopping by hopefully you enjoyed the video and hopefully I will see you on that next one.


Hi guys, you are watching OxyVlogs and if this is the first time here and you would like to know more information about life in Dubai don't forget to hit subscribe button and the bell icon so you will get a notification when I post my next video and Today finally I created a video for you about education in Dubai The cost of education among private schools in Dubai is getting higher and that's why many expect parents Choosing to homeschool their kids or send them back to the home country to study as of 2018 There are around 195 private schools and school fees in Dubai range from 2480 up to 130,000 dear homes per year and it doesn't include additional cost for books school bus Uniform etc. If you're looking for a good school for your kid You should do some research on it Arabia to make sure that the school is reputable Many expatriate schools are English-speaking private school that have British or American Curricula while others operate to the standards of their nationality groups like Indian Chinese Japanese German Russian etc School year is divided into three terms autumn spring and summer school day starts at 8 a.m. And children finish their classes around 2 or 3 p.m. During Ramadan the hours are shorter demand for places is strong That's why it's recommended to do early inspection and enrollment and a good place to start your research is this website Which provides good information on schools and universities when you're choosing a school by attention Not only to the curriculum But also to the culture and background of the school teachers students because there are significant cultural and religious Differences between schools in the U.E. So if you get it wrong your kids can stuck in the environment where they feel uncomfortable nursery schools accept babies from one year and kids start schooling at age of five Some schools private schools have entrance tests. So if you just move to Dubai be ready that most probably your kid will have to take that test Most schools offer both primary and secondary education So students don't need to transfer to the separate school upon primary graduation And now let's move to the high education The U.E. has high academic standards and Dubai is a great city to study abroad Colleges and universities in Dubai Offer wide selection of undergraduate and postgraduate programs by May or June You need to apply to a chosen university before the start of the program I will leave the link to the list of the best universities and fees in the description below and now Let me tell you the list of documents. You have to prepare. So first document is your passport then application form certificates transcript of your most recent academic qualification academic references and proof of proficiency in English The two main languages used in the universities are Arabic and English if you are a non Native English speaker you have to provide the results of your IELTS or TOEFL tests to study in the U.E You need to have a student visa in order to get a student visa You need a sponsor if you don't have any relatives who live in the U.E Your university can sponsor you a student resident visa will be issued for one year only and then it can be extended you have to pay up to three thousand dirhams for your application form and Also one thousand dirhams as a deposit and here are the documents you have to prepare for the application So guy this was a quick overview of the education in Dubai if you have any questions please leave them in the comments below and If you will find this information useful, please support me with your likes and thank you for watching I will see you in the next video. Bye. Bye


We're gonna now jump into our next talk Vinay Gupta was going to actually be present in person But due to a last-minute change was unable to be with us. So instead he's streaming live from London We're really glad to have Vinay with us Vinay is founder and CEO of Materium a Blockchain technology company bridging the virtual and physical economies with buyer and seller protection For physical asset NFTs He contributed to the release of the blockchain platform Ethereum He has long had a humanitarian concern with the condition of the poorest in society and disaster relief He invented the cheap simple non-patented non-patented and open-source hexa-yurt refugee shelter which has gone on to become iconic in the burning man counterculture Vinay, I told you that you would have a timer that you'd be able to see I apologize due to a last-minute change We do not have we're not able to send the timer in your direction, but no worries You can at least hear us and we will have we'll open it for questions for Vinay at the end of the talk So Take it away Vinay. Thank you Hey, great. Could you turn on screen-sharing? Consumers you do that because I have a couple slides and I want to show you could be what what was that? Screen-sharing currently turned off. Oh, yeah I will enable screen-share just a sec. Sorry about that. Okay. No worries. Thank you. Okay. All right. There we go I don't many slides just a couple to say so I didn't really want for a complex framing for this talk and This afternoon when I started to think about okay, I better get ready It suddenly came to me that what I should have called it was moral computing So moral computing it is Um There's really whole process really started during the pandemic when I sat down and I got an invitation to write a short book 15,000 words more of a pamphlet for an English publishing house that wanted to do a series of books Called the future of and they said to me today write us something the future of something What do you want to write about and so I wrote a little book called the future of stuff Which was basically an attempt to sort of breathe some life into Gandhi's ideas about fair trade It was an attempt to really get a sort of nice clear 21st century statement about what the moral responsibility is that we have for the things that we consume And so I wrote this book during the pandemic when business was kind of dead slow and then over the last year or so What I've been doing is weaving more and more and more of these kind of Gandhi and principles Into the company that I'm building called materium, which is a fairly standard blockchain company only with a lot more lawyers They're not more middle-aged folks So What I'm playing out here is basically a moral and technical argument For the way that we could start straightening out the world by using computers to do what they're good at And yeah, that's what we're going to be talking about today so I want to start with the concept of a moral toxin and a moral toxin is a Bad thing which you know is happening, but you don't know enough about it to stop it happening and This stuff kind of builds up in your system in much the same way that say I don't know various kinds of chemical Contamination from plastic softeners build up a people's system You know all these stories you get about you know, the amount of benzene and whale blubber in the Arctic making it too toxic for the asking most to eat Into it. I think it's the correct term these days You know, there are moral equivalents inside of our society, right? Most people me included by things that we know were made in China Under uncertain labor conditions at the very least an authoritarian government Certainly a place where it's very difficult to negotiate for workers rights or even unionize and then you also have this, you know suspicion of like maybe slave labor, right, you know Uggers and you know one part of China, you know, are we really buying things from those places? Is it really slave labor? Certainly a bad scene. And so what we wind up with is this kind of nagging hard to voice unease that our lifestyles make us bad people And the nagging hard to pin down aspect of that Is the thing that makes it kind of insidiously destructive of our peace of mind and our general welfare because we know that there's a problem But we don't really have any mechanism to do anything about it. There is no cause and effect relationship It's like a it's like a broad spectrum moral toxin in the same way that we have broad spectrum environmental toxicity But in the case of the moral toxins, there is no EPA. There's nothing to protect us Um, so with that as a sort of context What I then want to basically talk about is what's the technology technological angle of handling this moral toxicity? And this is really a question about knowledge Right the people that manufacture and when you grab some random plastic object, right? And you know the thing that I use to watch the deer out my back window You know, it's some little plastic telescope doohickey and it's great But you know like what do I really know about where this was made or who made it or how it was made or the conditions it was made under How do I know the stuff it's made out? It was not kind of poisonous There's just a whole bundle of unknowns around this thing And what's ironic about that is that somebody knows Every single piece of information there is about this, you know the shape of the lenses It's all in the cnc file somewhere the material there's a spec sheet that somebody has for the material Both the specification for somebody bought this thing But also the information that came directly from the providers All the chemicals that went into making that plastic these things were bought off spec sheets And those spec sheets could be tied into material safety databases And it ought to be possible Given the all of the information exists to give this thing a very very very clear description You know of its composition right down to the place where the materials to make this thing were mined and The fact that all that knowledge is already there all that information is there It's not like we have to go and do a lab analysis to figure this stuff out The information is all present in the supply chain. It's just you know the The information is getting bottlenecked. So when I buy this object the money smoothly flows You know From me through my credit card to amazon through their payment rail To the manufacturer to their workers to their vendors to their vendors vendors to their vendors vendors vendors to their vendors vendors vendors workers So we have a direction of travel for the money for the money can smoothly smoothly seamlessly flow to the ends of the earth But the information about what the money is accomplishing Is dammed up and walled off and you know siloed and we are protected and he used the term in a very Scarecrow way We are protected from the knowledge About how the things that we are using were really created And the result of that is that the entire world is sort of Toxified by the vague feeling that everything that we touch is probably made by slaves And it's destroying the world for you know us as we age and our children and their children particularly their children But we can't get to the bottom of that and we can't get stuck to it because the information is siloed inside of organizations And those of you who are familiar with blockchain at this point your ears will be pricking up like Did you say information silos spread all over the world? I think I have a fix for that so What my company did before the pandemic before I had a chance to sit down and have a think about this was Kind of a very narrow specific use case, right? What we wanted to do was we wanted to build a physical gateway so that you could exchange cryptocurrency for physical assets Gold real estate fine wine fine art Collectibles in the first phase and then in the second phase consumer electronics furniture clothing and transportation vehicles How do you do that? You need super accurate information about what products are And you need the super accurate information about products are because blockchain payments are known with UD8 Somebody rips you over the blockchain transaction. You cannot call amazon customer service to fix it for you so Getting the time to sit and think and reflect about, you know Different parts of my life and how to bring them together That always been very interested in gandhi's work. I had a long career as a humanitarian attempting to get, you know, solutions to things like climate refugees um But I had never really built the moral bridge intellectual bridge Between that side of my life and that side of my work and the side that was much more directly related to You know the blockchain in the future of technology And that bridge building turns out to be a pretty pragmatic thing I'm just going to share screen here for a second and actually show you a thing that we do If I can find the window. I don't know. Where is it going? Come on technology Come on do me a favor here. Just work the first time. I lost my window No, no, no, no, no, sorry. This is going to take me a tenth of a second Oh, no, what has it done? There we go, right Off like a herd of startled turtles um, so There we go share screen Oh, come on. What is it done? No, I tend to share screen. I can't find the window that I'm trying to share This is terrible nightmare. Come on. Just share the right window.  There it is. Okay Apologies for that so This is a thing called a material massive passport. This is fundamentally what my company does for living So, you know, on one side you have a famous Australian DJ who wants to sell recording stopped Oh and uh on the other side, um, there is A set of documentation about what the asset is, you know, here is the thing And on the other side here is the documentation about the thing So This is one of the first assets that we've done that has integrated inside of it this thing that we call a Warranty claim on a carbon offset So you look at the individual object And inside of the data about the object, there is a claim which says producing the NFT for this thing, you know I created 300 kilograms of co2 So 300 kilograms of co2 and then what's issued from that is a digital certificate That says for that object You know, can we prove that there was an offset purchase which removed that co2 and surely enough here is And that's a mechanism. You sort of look at that and this is not rocket surgery You know, there is no neural network. There is no AI. There isn't deep learning It's simply a legal statement in a machine readable form That when you purchase a specific object a secondary action is taken which is some carbon is bought on your behalf And that sort of approach is so simple That you can easily imagine, you know this becoming a standard way of approaching things You know if you're going to move a lot of global trade onto the blockchain Which I think is an expected outcome over the next 10 years There's no reason that as we move that trade on chain We cannot make the systems bi-directional, you know when you purchase something with money You also get a set of information about that asset that becomes attached to your wallet I paid this much money for this thing over here. It emitted 12 tons of carbon in the process Here is my 12 tons of carbon offsets that are happening somewhere else in the system And here's the documentary evidence which is stored in an immutable ledger IPFS or something along these lines So that we can go and verify for ourselves that those offsets are there and that we really are protecting in a chunk of rainforest As we've compensated for the fact that we did a lot of snowmobiling that year and those kind of systems like It's not that those things fix the world in and of themselves, right? You know, if you don't have the ultra cheap solar panels and you don't have some modification to the western lifestyle There's no way that we're going to be able to get the planet stabilized but What we can do is we can start this process of cleaning up the economy through this kind of transparency Using the blockchain to create a level playing field and to prove that people aren't telling one person one thing and somebody else something else and Those factors together You know, plus the cheap transactions plus things like cryptographic identities. So you can tell who it is that says something Is true Those systems together look to me like they could complete the loop on trade You know, rather than it just being money goes out and goods come back money goes out goods and information come back And by combining, you know the goods and the information and the money into a single backbone the blockchain system I think it's possible that you would get a fairer world emerging as a combination of two forces Firstly the simple moral pressure a kind of vegan approach or trying to push people towards better outcome and then on the other side of that The prospect that having true transparency about goods generates a fundamentally more efficient economy Because it allows us to do things like machine Based searches for what we want in a kind of specification driven way, you know, I want a you know 60 millimeter long Hex head nut with the following screw threading and I could go out there and I could get something like that Automatically located found maybe you can purchase on my behalf because machine readable specifications allow us to automate procurement Um, and in that world machine readable specifications automation of procurement. I can then say hey, you know Don't let me buy anything that has a substantial risk of being manufactured by slave labour And anything that I buy that contains a substantial amount of carbon buy me offsets for it at the same time And when we talk about you know concepts like you know automated morality or moral computing This is the kind of idea that you can have computers Support your chosen pattern of moral behaviour As long as we have the data to indicate which goods and services fall clear on those moral spectra And then you set what your acceptable criteria are and the machines take care of the legwork of actually being a moral citizen For that set of cases There's a lot more going on We all have individual moral decisions that we have to make but this kind of background smog of immorality Which is at the basis of things like climate change and the labour conditions around the world I think that stuff we could potentially automate away Um, so that's it. That was what I had to say today. Um, thank you very much for listening and really really sad I can't be there. Uh, it really I'm on the wrong side of the world, but that does happen sometimes Is there anything that would prevent the digital twins of people From being an NFT traded on a supply chain like materium? Like in human capital bond markets Is there anything that would prevent something like that? So Materium was a very strong rule that we don't do this thing for anything that's alive Right. Um, could somebody else do something like this for actual humans? Sure I'm you know, any any imaginable evil thing somebody in the world will do if you let them um, but I think that the Nature of the chain would make it very difficult to do that kind of stuff and get away with it Because if you have all the documentation online that proves what it is that you're selling It also makes it very very easy for people to find you and arrest you if you're doing something Which is inherently, you know, like deeply illegal in that way Digital twins he says Digital twins I may have misunderstood the question. So could you could you clarify it a little? Next question they said Okay Uh, yeah, my question is as you're helping to create these contracts between parties How do you help instill trust between some of the agents or um, how do you implement some of these? Ricardian like contracts from the human behavior side Yes, so the approach that we take on this is there are no facts in the material system The material system doesn't allow people to discuss facts at all All that we have is liabilities. So party a says, you know, this is a good condition 57 buick and it's all original parts including the engine And if it isn't you could claim up to say, you know, 150 000 dollars in damages and That approach to have every single piece of information that a person uses to make a decision be directly backed by a warranty Provides a really really high standard of trust in the transaction Be very specific because we don't trust the people And that is an approach which also allows you to have 10 20 30 40 50 people Use their assets to underwrite the truth about some set of Transactions And so we begin to create a kind of commercial web of trust where there is interdependency between many parties to credential each other's assets And then also things like insurers come into handle the sort of backbone risk management And so it all comes down to basically being able to get a recoverable assets to keep people honest Thank you Thank you very much, Vinay. Let's have another hand for Vinay Gupta Thank you all very much


So our next speaker is Camilo Gomez. Camilo is Global Cybersecurity Strategist with Yokagawa Corporation. He's also leading the security subcommittee in the open process automation forum and is heavily involved in doing the security work that's going on there. So Camilo, over to you. Thank you. So good morning, everyone, and welcome to the session today. We're gonna be talking about what is OPAFS, the Open Group Automation Standard. Why is it an opportunity to advance our security for industrial control systems? So a little quick go over my bio. So I've been, Jim just mentioned that not only member or co-chair of the security subcommittee for OPAF, but also member of ISA and IC and board member of ISA Secure and ICEEE CMC, the organizations managing the certification against for industrial automation and control system security. And in addition, my perspective, as you will see, I come from a career in industrial operations. So I come from the perspective doing work in the field and understanding how the technology will make my business better and the overall business I work for better. So let's get some context. So the first thing is there's no doubt this so-called operational technology environment that in which we live today is in transformation. So we are in a place where, we call it operational technology because we are living in a place where we have these really large assets, physical assets doing some important process that transform elements, physical elements into other elements. And then we have this physical plant, that physical plant and doing this transformation is becoming more digital. But it doesn't mean that becoming more digital is gonna become digital. The physical aspect will always be there. We rely on the digital to improve the operation of the physical aspect. So not only that, in addition to the evolution of the asset, we have evolution in the systems and the hardware and the software we use. We call the automation software and hardware. So if you would see that throughout our physical installations plants, as we call, we are implementing hardware advancements. So we have more robotics and things that will replace humans. So better not what we replace humans. We'll take humans out of unsafe places in which they have to be today because of the nature of the process, physical process they are dealing with. So it has a process out of physical hardware. Automation has a process to help us in that aspect. And software, of course, is the element that also is advancing. We have better ways to do control. We call the advanced control integration with the business systems, manufacturing exchange, and some other high level information that are required to speed up our business. And that, in turn, is creating a high demand for the information that is being collected at the physical level to give them more business meaning. Another element that is impacting, of course, this transformation is this set of global manufacturing initiatives. You probably have heard of many of them. They're very, I guess most well known is industry for all. You can hear it everywhere. But China has an equivalent manufacturing initiative. Korea has an equivalent. Japan has society five zero. Another manufacturing initiative. The US is looking and working with the industrial internet consortium for these new manufacturing initiatives. These are initiatives that are thinking, what if we move to the IIOT world? So this is a transformation between from OT to IIOT happening. And then you see organizations like us. The Open Group and the Open Process Automation Forum in particular are working into transform some of the ways process is managed in a plan today. And there are initiatives pushed by other groups like Namor and in Europe. Some of you might be very well acquainted with Namor. And of course, we are looking with organizations like the OPC Foundation, which are trying to say for a world like this one that is so diverse. Yes, we need a way to interoperate. They're coming into the way to say how we can interoperate in this diverse world. So if my environment is changing, cybersecurity for this environment is also changing. So cybersecurity is a product of the context and industrial cybersecurity is for the context of our business. So there's no doubt that in our business, there's more today we're getting into even more integration between what we call the OT and IT worlds, which that integration is beneficial for both ends. The business side is getting to understand better what is done on the operational side and the operational side, being able to understand what is better but interface better with leverage technologies that were meant to be used ordinarily on the IT side. There is another element of change. Of course, I mentioned to you is IOT and the open process automation. So OPF is not the only open process initiative. You can see that many others open PLC and many more happening. So opening is there, it has to do with IOT and the ability to work interoperate with multiple vendors. So what is the meaning? We are in an era of disruption, of course, innovation, but more importantly is time for new value propositions. So that's important to have. Another element in this context of cybersecurity is the application, the traditional way and the future way. So we just heard this interesting presentation from Bob about how security is necessary to be able to apply in vehicle manufacturing, vehicles in human sciences, medical systems and the importance of applying consistency standards. A risk management process. It's interesting that I was watching you showing the risk-voltaic matrix, the risk-voltaic behind there from the elements that become the threat to the business impacts and how you manage those through a process. That's an ingrained process we have in operational technology and we have been living for years because it's tied to safety. And it's the way, actually it's called process safety, started to push that into place because of physical accidents, not virtual accidents. Physical accidents that have tremendous impact into the environment and human lives. So industrial cybersecurity has traditionally been working with these very large assets, facilities, complex industrial facilities, managing complex processes, transforming physical raw materials into other materials that we use in our daily lives. Right, so it has been traditionally implemented. Sorry, security has been applied traditionally to this industries. We call the process industries the chemical, the nuclear, the pipelines, manufacturing, of course. What we call critical manufacturing, in fact not necessarily every kind of manufacturing and the energy sector as we know. Power generation in power distribution are highly managed through process automation and control systems. So, but we've seen it's a trend. There is an extension of operational technology into all the areas such as mining, transportation is definitely there. I was last week in Australia and attending meetings and those two are very close to them in heart, mining and transportation. And then of course we have building automations, moving into the elements of controlling our physical buildings and so on. Even more, moving into the medical systems as Bob also mentioned. So, sorry, security or industrial transformation is now touching new areas and that's important to know. What is also changing? We, to secure this type of physical asset, of course, and to operate in this type of complex physical assets, we require a standardization. Standardization give us assurance that things are applied consistently and give us some other elements of quality but safety assurance in the way. Security is not different and security for the space also requires standardization. And we have created over these many years since operational technology, cybersecurity appear, an architecture based on functional layers and the functional layers that happen in the industrial environment. So we have that architecture that you probably have seen in the past in some places but what's happening is with this transformation of the business, some of these boundaries are getting blurry, are changing, are not necessarily the same ones. So what we used to call level one and two systems or zero or there could be a mix of the systems. The important thing is that the perimeter of the plant is not anymore physical. So this is a perimeter is becoming a virtual. It's not only virtually located at the plant or the corporation managing the asset, could be virtually located out on the internet. And we're not saying that the plant is an internet of things. The sensor could be an internet of things, the plant cannot. But so the plant is moving from this physical asset into a virtual plant and I might need to operate as I showed you on that first slide, digital twin to help me see in digital terms what is happening in the physical world and even more being able to control what's happening in that world. So what is the trend here? The trend is not just moving anymore into networks or enterprise systems and computers and no, it's actually moving to the inner element, the closest, the simplest element. In our case, we call it components and within the components, what? Applications. And this brings me close to what we're doing in OPAS. You will see that what we're doing in OPAS is related very close to this last part. There's a next element of discussion. I mentioned to you that we use security, we use levels, functional levels to describe the functionality of the systems and processes we manage in a plant but also to manage the security throughout those. So part of the conversation is whether or not the efforts we have made today, until today, have concentrated pretty much on the upper levels for three and two, not necessarily looking into level one and zero. And there's also a discussion and within our industry circles that is that level zero, the instruments. And the thing is that instruments are of different classes, right? We have digital and analog instruments but they are becoming more smart intelligence. We are touching those instruments to small computers and giving running applications into them, making them smart. The issue is this one. Contrary to any other asset that you use in the world, a car or a vehicle, a plant is something that is designed to be there running for many, many years, managing this physical process to make it profitable for whoever's investing in this business. So there are elements that we call the brownfield, meaning what is in place, the current, and the greenfield, the new. So the challenge for security is you always have to deal with something that is installed and how you deal with the install base and how you deal with the new. So we have to have a way to adapt and to provide security for both at the same time. So let's look into the evolution and trends into this O.G. cybersecurity space. The first, this is a slide I put together to try to push two things. So we have a line representing the evolution of the threat over the years. And a line, a blue line, identifying the evolution of the defense. I like to see these as two pushing forces. The attack is pushing to raise their threat and the defense is pushing to raise their defense. The idea is to be able to close that gap between the two and hopefully, at some point, even surpass where the gap is the opposite, it's negative. The threat goes onto the negative, not on the positive. Well, that is the ambition. How are we doing this? So the threat for OT actually, as many of you studied, is simply casual. So we were just casualties of something that was happening in the IT environment. The IT environment, and yes, many people were saying, oh, no, that is not true because the operational technology environment is fully erg up and totally disconnected. Well, we were shown at the beginning of the years when we started being victims, casual victims of IT threat and then our systems were disrupted. Well, this is interesting because if you read the news of ransomware and how much they affected factories, I don't give names, but the car making industries in major ports and so on, right? And they were affected by something called ransomware. And the systems that were affected were the industrial systems, actually forcing them to shut down operations. So even 18 years later, if you want, since we started to be victims of IT, we still are. So that means that we have to do something better, right? In terms to push that defense up and, well, the attackers are changing. So that was the first phase of attacks. The second phase or group I call the second generation is a group of attacks based on PTAs. And actually there are two sources of PTAs, those who are digging for intellectual property and in all cases there are state sponsors and some others trying to create disruption or even monitoring. So that's the case of the threats or PTAs that were threatening pipeline industries in the States and the UK and some parts of Europe during that era. And then more lately, we have this third generation and I call the targeted. They are now OT targeted actually. This is a set of threats that are becoming more and more savvy and, but as I mentioned to you, we still are victims of ransomware. So how's that possible? On the defense side, how we do push our posture up, of course we work in technologies over the year. We create perimeters, we import technologies from the IT side that probably work well in that environment, but we have learned over the years is that none of them are effective and can be effectively applied in OT. So they are the realities of applying technologies in the OT space. So a good example is patching. We are all used to patching in our cell phones today. We receive an alert from Apple or Google saying there's a patch available. Click here to download it, install it and yeah, we wait five minutes. And we leave happy. Well, in the OT world, if I have a critical system that is monitored by other mission critical, excuse me, a critical process that is monitored by mission critical systems. And if I go to have to have to reboot that system, I might will break the integrity of the entire process. So it's not an easy control to apply. It's not that it's about control. Operation licensing that control has its own elements. And there are things you need to know because it's not applying the control like you apply to your consumer device or you can apply it to any normal IT system. So there's another thing. What is, where's the trend of the threat? As I mentioned to you, the threat started to be just simply disruptive. And it was casual disruption. It was not targeted of any effort. In the middle of that process, the intention changed from which was casual disruption to destruction. So we have the example of Shamun in Saudi Arabia and some others, right? Industrial year in Ukraine. Well, actually, in the case of industrial year in Ukraine, in Ukraine, people are also saying that that meant to be destructive, right? Be able to break down the entire power system in that country. So the intention has changed. I mentioned to you before that the target is also changing. It's going from this broader target to really specific. So we have examples. And then the skills the attacker of course are using used to be generic IT, but to perform the most recent attacks that have affected our power industry, our oil and gas industries, and manufacturing, critical manufacturing industries, and many others.  They're OT savvy. They know about the technologies, processes, applications, protocols, and so on. And this is a really important realization. The attacker is not after my automation system. The attacker is not after that little computer. That is just simple to me. It's because the attacker is after the big goal of the attacker is that physical asset and the impact that he or she can have on that physical asset. Or the impact that that physical asset can have in a greater ecosystem. So how we have managed the response over the years? So we apply a simple process that been applied for years consistently related to risk management. Starts with assessing the risk, right? Developing and implementing countermeasures and maintaining those countermeasures doing auditing to ensure that the controls are physically and constantly maintained. Those are people, process, and technologies controls. What we have learned in this process and over the years is that life cycle is a lot more complex than it is today. So it requires the different stakeholders. What we call the supply chain. So this life cycle that was created originally and meant to be used by what we call the asset owners in some places, the end users, the asset owners. They are processes that need to be applied equally by those organizations doing or providing services to the asset or integrating new systems in the case of new systems or providing products supplying the products. And they are all important into this life cycle. So because we work in an industry that has all these elements of risk, it likes to be a structure and it's highly standardized. It makes sense and it helps all the pleasures to work and interoperate safely and give assurance to the asset owners and the business owners that plants and the different elements are managed consistently throughout. So industry at large has been working since 2007 in what we call the, started to be ISA 99 and now IC, well for many years, IC 62443 standard. So this is a standard and again, it's part of our response. Our response tends to be pushed. We tend to respond to this threat through standards. But it's a standard sufficient and the question here, it is not. It depends on the maturity of your organization and how you apply this if you want recommendations in some cases requirements, depending on who is applying those. And you consistently apply those controls into your organization and you keep them up to give you the security assurance that you're looking for. So 62443, it's a complex standard series. It's made of several parts and the first parts were meant, as I mentioned to you for the asset owner, you can read the numbers there. There was a next set of parts or specifications built for the system integrators, for the system providers. And this is showing what I showed you before, the tendency that we're moving into the simplest element. So in the case of the standards, we also going down to the product. So we want now to be sure that our products not only embed security functionality or security features within the IT world, right? But security functionality, but not only that, that security functionality is developed and implemented under a secure development lifecycle. So this is not new if you come from the IT world and you see that we are convergent. This is actually the convergence of those two concepts. Moreover, as I mentioned to you, the way to ensure our safety is through certification. So we prove that somebody claiming, making claims that you have an explosion proof system, it is explosion proof system. Because if you don't normally get that claim, but test that claim, if something happened, you would end destroying a physical asset, right? So certification testing is really important for this environment. And as such, there are organizations building, as you know, ISA, IC got together to build IC62443 now. But each one have their own organizations for testing, in the case of ISA, it's called ISKI, and with or ISA Secure. And in the case of IC, IC is traditional, the conformity assessment organization. In terms of security certifications, ISA Secure has been working in doing certification for security certification for systems and actually products embedded devices for a long time. They call it the EDSA. So EDSA actually, if you notice in this slide, has been in place since 2010. Was it aligned to 4-2, the most recently released standard for suppliers? No, but actually was instrumental in that journey of developing the standard, and actually it's fully aligned, being from the same organization. It's fully aligned with the new version, of course. No, not the oldest version. And you can see there's also an old certification called SDL. So for many years, ISA Secure as well has been tracking the secure development of applications in this space. And embedding security into products, excuse me, and products for us are components and applications. So SDLA has been in place and it's fully aligned with also this inter-release 4-1 standard. Of course, there's an old, our pre-existing certification for systems and so on. IC, understanding that this is complex and of course there's an element I don't have in these slides and it's the element of regulatory compliance. If any of you are coming from the European Union, you probably have heard of the NIST directive and how much it has been settled and now 6-4-4-3 are better. Cyber security standards and certification is now a requirement. How is it going to be applied? It's going to be applied on our per member country, legislations, so they're just setting up a framework. But it's there and as such, ICE is catering to that. Now ICE is fully cognizant better that the standards are moving to other industries, not just the heavy industries that I mentioned to you of physical assets, but moving into the medical and transportation, building automation and so on. And that by moving into those the standard, all the sections of the standard might not be applicable. So they need to be open to the creation of profiles. Well guess what, OPAS is also one of those examples. So we are building some functionality for a specific context. It's not going to resolve the world hunger and you will see in a minute what it's going to resolve. So you probably have heard of NIST. You probably have heard of NIST 882. You probably have heard of NERC-SIP. And yeah, those actually NIST is a framework that applies to US government agencies. Actually it's regulatory compliance mandatory for them. 882 is a guideline for implementing control for industrial automation and control systems. Fully aligned with 62443 by a way with references to 62443 by a way, excuse me. And then you have NERC. NERC was created in the United States for the protection of electrical systems and the result of some incidents. And in order to raise the bar in the power sector in the United States and they created their own standard. That standard is not aligned to 62443. It's completely different.  Yes, it can be mapped and yeah, that's all I have to say. Power, the power, the international power industry in general when they started to hear about NERC, they got also thinking we are going to get regulated everywhere in the world. And for that we have to be prepared. So they started to work on a standard series on their IEC called the 62351. And it's a standard series in which they realized that the weakest point in power management systems was actually the protocols, the communication protocols they use and information models they use to keep the systems up. So what they're after in this standard series is securing actually going from just not the what but how specifically how to secure each one of these protocols. And then we have other standards and frameworks we need to look. Of course we have IEC, the industrial internet consortium. They came out with a framework. They come out with this perspective that all the things that are traditionally done on the OTCIDE could be missing some elements that are important and are being done on the IT side. Actually both are required if we want to coexist in an industrial internet of things tomorrow. So those are important references and I can give you more and this and this is a new standard from the medical sector that is now aligning and by way IEC is also working with IS 899 IEC T65 working group 10 jointly participating in the efforts for making 62443 are more globally encompassing industry standard. So it's not about standards as I mentioned it's also implementing and maintaining. So what is the OPA opportunity? How many of you were in Brad's presentation yesterday? Please raise your hand. So not many of you. Well, what is OPA? So this is an industry standard that we need to that the open group is working on. And it's related to open process automation. It has a particular context and that's what I want to bring here. This is not about creating an IOT device. This is about moving the computing power to the edge. So traditionally the computing in the process control industries has been centralized. And actually as you probably heard yesterday we call those wrongly distributed control systems because it's actually centralized in one place. So what OPA is doing is trying to break out that and say I need to move the computing closer to where I'm capturing my signals. And in our world we call that IO. So actually is this part on the left? We have IO and IO can be also coming wireless. So everything on the south is digital world and OPA is not planning to change that. It's planning to interface with that because the main users of this group have a specific requirement that this is about process automation and for industries like oil and gas power or many others that will require large systems. So the idea is that we are creating a new set of components. We call it the DCN, it's a component with some computing power and where the idea is that we will be able to run applications. And what is new here is that in the past you could only run applications on the component from some particular vendor. The idea here is that the applications can, you can buy your hardware from any one of the vendors and run your applications on any one of the hardware platforms. But to do that there are many elements that need to happen to place because that functionality was the control functionality was before provided within one machine we need to create different things. So we need a connectivity framework, a way to ensure that this systems components and now in an OPA environment then the expectation and ambition is that there will be thousands of this that will be getting closer and closer to the IO. So they are going to be managing subsets of the IO. New devices are gonna be coming with the capability to interface directly with a new IO. But I mentioned to you that this world of OT has to deal with what? Brown field and green field. So this part on the right is illustrating to you that we need to deal also with the legacy. And providing interfaces to the legacy because otherwise you won't be able to sustain and maintain your asset. So to give you an example a refinery plant with thousands of IO points with miles of miles of wire if we intend to change that one is going to cost probably more than what the refinery cost at the beginning. So that's impossible. You have to live with what is existing. And actually those sensors that we have in place many of them have been well as you mentioned to you they have to go through extensive safety testing and be able to operate under harsh conditions for many years are there. Do I need to replace them? No, they're working. And the signal that I'm receiving is of high quality. And I still need that signal. Do I need to replace all of them? No, I'm going to replace those that make sense. So the mission here is to replace the computing power and distribute that computing power. So what is the difference? Of course that OPAF is springing. The difference is that in the past on traditionally even for IT systems security needs to be an afterthought. And it's something we bolt on after and we struggle. So we put firewalls and get ways and you name whatever is the way we call the shield we put shields around but the element is not secure intrinsically. And the idea here is how to make it intrinsically secure if you like, some people don't like the work of course is very close to safety but what we have chose is to use the word secure by design. So that's the main difference. OPAF is building from the get go components that are secure by design. Secure by design means that we need to incorporate security in all aspects of the architecture. And notice that architecture of that component is complex because that architecture that rely on a set of management systems on the top to keep the integrity of the control architecture such as configuration management, application management and system management. But also we need security management systems to support the separation. And to give you an example, certificate management services and so on. Those are services that you need to support a component that is secure by design. I could have the capability to provide and manage certificates within my product but if there's no way to control how I exchange those certificates with the other nodes that environment is not going to work. So we have worked into creating the interfaces and embedding security in all aspects of the architecture. And you can see the application goes all the way from the applications running within the component to the way the applications communicate within the component and outside of the component independently of the hardware that is called the distributed control framework or connectivity framework is part of it as you can see. And of course you need to have a distributed control platform which the DCP that is related on how you are going to interface with your physical hardware platform that it could vary from vendor to vendor. So you need to avoid to a standardized. We're working on all these aspects to make it happen. Notice that the IO is out of the scope. We are not changing IO. We need to interface with IO. Whatever is the current format and there are by way hundreds of ways, buses, digital buses, analog buses that exist today that we might need to interface with. So secured by design. What is secured by design? So one of the main concerns of all past stakeholders of course is that yes, we need the functionality but it's very important that in order to ensure that security functionality is embedded into the products that is done through a process where security is consistently applied from or integrated better right from the beginning from the design, the development and the implementation so that you can have what we call a product with security functionality. That is good. But a product with a security functionality that cannot be maintained and supported is not good. So actually the standards and OPF are looking for that second part of the secure development life cycle. The one that give us the ability to manage defects updates and manage the product through the end of life. So it's gonna give us assurance that security is managed through the end of life of that product. And that requires some behaviors and so on describe. What is the end goal of course is to be able to have a supported product with integrated security functionality. So we have an instrument that can help us to do that and as you know OPF is not to reinvent the wheel. It's supposed to be a standard of standards or reference standard. Similar, how many of you are working in architecture for the open group? Okay, so for all of you that's very close because we open, we call all reference architectures. This is saying similar concept instead of using reference architecture we use reference standards. And then of course we need to work in a variety of areas of security areas that implement controls within the end component. Being that component, the hardware piece, well hardware software piece of component called DCN or the application itself. So for all our components we are worried about a way to identify first of all the resource integrity. So how the component boots in a secure mode. All the way to how is that component going to be identified when it's joining an OT OPAS network? How do I know that is what is that thing that is being connected to my network and now is that something that I can trust? And if it's trusted I need to authenticate not only the component maybe the users of that component I also need to authorize that component to participate and be member of my ecosystem but I also need to authorize the users of that system and I need to provide resource availability. That has with operational reliability is being sure that the resource I have to wait for monitor for ways to ensure that my resource is always available. So I covered integrity parts first. I need to cover the availability aspect which are dear to the OT space. And of course there's no environment and no good security if I don't know what I have and I cannot recover quickly. So for that I need configuration management, resource configuration. I should be able to quickly know what was the last configuration or state of my component and be able to restore to that configuration and a state if there's a failure. And all that of course is being provided through communication, integrity, confidentiality and availability, data integrity, confidentiality and availability, restricted authorized access is still is to be a core concept in OT being able to create zones and even independently of the environment in which you are and of course being able to trace back to accountability, auditability and so on and finally being able to integrate operational and security monitoring. So all those things can be provided through the application of IC 6443. So with all this realization we said, well we have a great opportunity and what is our life cycle? What is the life cycle of OPAP? So the first generation of OPAP as the intention is to be able to define or define or design, build and unmaintain products. And so we need to create a security framework of what are those things that are or the standards that will give us security assurance and as you can see we have identified four dash one, four dash two and three three. Three three is applicable for subsystems. Now just probably if you come from the IT side it's hard to understand the concept but in the OT world not all systems are the same. They actually very few systems are static meaning they are meant to do to address a specific implementation. So unless I'm managing the same cracker and with the same physical conditions I might be able to put equal systems in two plans. In many cases not. They might have the same physical components if you want. A computer, a network switch and few other sensors, subcontrollers that are part of my system that they are non-static. We can when we can do that and to a good extent we call that one the subsystem. Subsystem and that's where we are going to cover with three three. So notice that the standard is also from our evaluation good for many perspectives because it's also helping us with all the areas in the life cycle that are not in the scope today. So when the asset owners or end users as we call it in OPA start to be a concern about how these components and it's actually the approach that Bob mentioned you need to go with the end components and move the trustworthiness up. Then the system integrators need to know that they're building with products that are trustworthy they can integrate. There are other standards will help them in that process and so on the other parts of the standard will applicable to the end user and service provider once you get into operation. So overall we see a good fit and map. Another thing we have done is of course this release next release of OPA is meant to the main objective is about interoperability. So as such we are not covering all aspects of what we intended to do. We are elements such as portability hardware portability application portability and so on other elements that would be integrated in OPA as the specification progress. But being a standard of standards the connectivity power is being provided for release one by a standard name called OPC UA. Many of you are aware of it and some of the system management related to manage the management of the hardware are provided to a piece of another standard called Redfish. Actually Redfish comes from the IT side, OPC UA comes from the OT side and none of them of course had references interesting to 62443. I mentioned to you that NIST and others have even, I see they have references on importance to the controls in 62443. Well these two did not. So part of our work here was to go over the functionality, security functionality that these standards provide. The security functionality that we have chosen to implement as part of this release and being sure that it can be, that it ties and maps to the security controls managed and defined by 62443. So this is part of the work we have done. And to finish what is the end goal and the end goal here of course we started with a gap and the intention here is by doing secure by design in our products we will be able to push or to narrow that gap that we have today. So with that, thank you very much for your attention.