Great, so I'll begin so today I will touch base on the version ID. I didn't see feedback for most of you and I thank you for that in advance. So. I'll discuss on that and then I'll hand it over to Brian and you'll discuss some more terminal out terminology walk through the activity feed and to do list. Feed as well, so this presentation will probably be the shortest we had. So, there'll be plenty of time for Q, and so. Based on your feedback decided during the beta, we would test using the test report. My team believes that this. The test report ID with combination of the product ID should maintain uniqueness. Since products with the same product ID that may be manufactured a different location should not be on the same test report. That's. So, that's what I learned from the last meeting and. And when I ask that question in the follow up email, many of you. State of the, you prefer to use a test report ID. I also hope that this will make things easier for end to keep track of the certificates. And for clarification, when component parts certificates are used, the test report ID can be used as a version ID for multiple certificates that doesn't negate the uniqueness factor. It's the 2 different product ideas using the 2 are the same test report ID would still have. Will still be unique and lastly, for certificates with multiple labs, I would suggest let's 1st the lab with the most citations and then you set test report. However, so this test report ID is not actually required for the citations or the CFR. So, we'll make this option, which also means that we create a system generated ID that you could use instead. I think our developers will default to the test report ID. And if you agree to that as well, we would. You wouldn't have to provide a version ID. You just use your test report ID from your certificate for the version number and then. Unless you specify and then we'll override that system generated ID, we haven't really decided on like, how many digits that will be. But we'll update you on that in the future. And so, I'll open it up right now for any questions, but we could hold off to the end after Brian. Okay, and once we develop some of the documentation, we'll clarify maybe a few more things around this from the person, I do how to use the combination certified product ID and test report ID together. So, we'll get that would be all prepared in a package later on once we get to the stage of onboarding all of you to test the system. And so, today, I'll be discussing activity even to do this under this is telechance. So, just a little bit of preamble the the screens and the flows that we're about to discuss these arose out of the need to have some sort of notification. Based system with any filing, there's a lot of different individuals who are doing a lot of different things within the system. And there needs to be some level of visibility and activities taken on a product collections to get updates, things like that. So, initially, when we began developing, we were thinking of just a standard user inbox with all the notifications and all the things that have happened on product collection. With red and unread statuses, they have the badges notice that there's a whole bunch of things you look through them and you clear those notifications. And we ended up moving away from that, because we wanted to make sure all of the updates happening within a product collection were accessible to us, but we didn't want to require visibility on them to clear badges and deal with red and unread notifications. So, we came up with the concepts of detail here that we're going to go into today, the first being the activity feed, which. Internet parlance could also be referred to as a timeline of sorts, but it's a reverse chronological list of recent actions taken product one. So, when you've updated certificates, when you've added new certificates, the test data, when a certificate been tested to these are all the sorts of things that are going to show up in that. So, scroll back very far. We haven't come up with the specific details. If it will endlessly go back to the beginning of time, or if there will be a limit to it, that's the basic function of it. Similarly, the to do list. This is either actions that do require you to do something to complete something. So, if, you know, within a given company's workflow, someone needs to provide at the station. Or a certificate, or get that final version ID. That's a relatively high profile item. So, sort of developing a messaging system where a user can paint someone inside the application, say, hey, can you do this? We came up with this concept of the to do list. Every user is going to have a to do list. And then the items that are system calculates need to be handled or can be handled by that user based on. And then clear when they've been clear automatically, once they've been dealt with, that's what we're going to be digging into today. It's the activity fee. Like I said, it's a collection of recent events in any product collection that you can access. Metribes, entry updates, imports that would occur through either a CSP upload or API import. Those will also show. Um, a user's role is going to determine what shows up in that fee. The administrators of this account, they see user related activities like. John Doe was invited to X or Y product collection. Editor roles don't need to see the individual activities, right? So there's, there's going to be a little bit of automatic filtration that happens based on what your role is in the product collection. The fee will be filterable. So the type of event that you're looking for, if you're looking for a batch of products that were imported by CSP last week. Washing to be able to filter down that activity fee to only show batch imports, the only show imports from CSP, from CSP uploads or guy uploads, things like that to really make it easier to track down. The events that are looking for similarly, when you're finding these events, when you're looking back to try and find something before it's usually going to be to follow up on some activity to finish a product entry or to the unit. So these events in the feed are going to be linked. So 14 products were imported to your product collection 2 days ago. If you click that 14 products hyperlink, it's going to show you which 14 products are going to follow up actions. So hopefully that's pretty clear. We've got a quick click through flow to show, to sort of demonstrate this in action. And just a reminder, these screens are obviously subject to change the mockups. All the work is on, I like to say between, I may look a little different in the final form, but this is to really give you an idea of what we're envisioning for the flow. So as you think through this, if there are any things you're missing, you feel like aren't accounted. To or actions you may take. That's why I wanted to voice those concerns or questions. So, so, this is our basic concept for the feed. They can pop out, scrollable and got a lot of core information right there in the feed about things that have happened specifically to this product collection. There will be feeds available from your user dashboard that are not. Limited to a specific product collection that you're used for that has access to multiple product collections. You will have the ability to see all activities across them and filter that down to specific collection on different screens. But if you navigated to a specific product collection and you pop open that feed, that product collection. So it's a context to where. The 4 products. Yep, so you click that. So that's, you can see that that's the filtering mechanism of talking about whatever. Where, you know, based on when that happened and where it came from, you want you to be able to narrow down. Find the place that you're looking for, and then easily get insight into what happens. So you can see those are the 4 products that tag that appears. Yes. That gives you insight into what the filter is that's currently 5 year collection. Change all 4 of those already 1 of those products you'd be able to do that. That clears it, you just back to the filters, I think a little twirl down. Alright, so yeah, this was another filter mechanism. I was talking about where you click on an event site, I believe it should show. So, this user is that's popped up here is an administrator because they have insights into user based events or updates to affiliated parts. So, I believe product and then the secondary context menu comes up trying to see only new enter new product entries updates to entries that already existed or entry removal. So, I think so this filters the list down. So, now the activity feeds only showing new product. Okay. So, if you only wanted to see entries made through the API. You'd be able to addition further filter it down and then get insight into which products product updates. So, that's got sort of the quick over. I think it's a really handy tool for basically just engaging with all the mass amounts of data. So, like I said, the new list plays updates that require direct action when you're invited to collaborate on a product collection. The system really does need you to accept or invitation received those require an action. So, from there to do this on your dashboard, you'll be able to you click that notification, view the invitation accepted rejected items or similarly, if you're an administrator, our products in your collection, your. Test status, which is precursor to that actually filed it using reference message sets. That's an action that we don't want to linger indefinitely. It's going to hold people up at 27 products that are waiting at the station. There's going to be a dream to do list seven products are waiting at the station. Click on it. It's going to show you those products. Do them some of them lower the number of all that sort of so this one I believe is shorter. I don't think that first accepted. See that product collection that you weren't that this user was invited to the product collections screen down there below. They can jump into it, start working, install the whole product entry. They're waiting at the station see that took this user right to those four products. The filter is to show products away at the station and be able to complete that step from turn to the dashboard that item would be clear as well. It would only pop back up once new items in the collection to that ending at the station. So that's sort of the quick, quick and nerdy overview of how we're envisioning these tools functioning. Like I said, if you guys think of anything that coming for updates, I think, delegation responsibility. Let us know hopefully that was pretty. So if you're on the line, if you have anything to add, feel free. Yeah, so can you go back to the previous screen for 1 second? Yeah, so you're noticing here a couple of items we have in the to do list also this concept of expiring soon and expired. So we're, we're talking internally, you know, a little bit about what exactly these concepts mean since certificates don't exactly expire. They're good forever as long as there's product that was manufactured in that time frame, but, but there is a need as long as you're continuing to manufacture, manufacture a product to recertify every year. So it's mostly a terminology thing. Perhaps it should be, you know, pending recertification or, you know, needs recertification soon, something like that. But again, there's this idea that where we want to help you. Has the business account administrator or even a product collection. Administrator to know when you've got. Uh, products in your collection that appear to be nearing a need for updating the certifications and or there are certifications have lapsed. Um, and we're also talking about providing the opportunity to ignore them because there are there are cases, or perhaps on an individual product ignore that if you're not planning on manufacturing any further, you don't need to. Uh, recertify with CPSC obviously. So, um, so those are a couple of other contexts where we're trying, we're thinking this to do lists can come in handy to help you to manage, uh, you know, manage. The flow of, uh, information that you need to provide into into the system here. So, yeah, it's important to point out that I spoke. Comments or questions from the group. So, essentially, you're done with the contents. Any questions or concerns about the activity for the to do list. Take no questions that's positive that covered everything to do with these 2 concepts. Let me go back to slide on the components for discussion. So, we've covered a lot of this, but of course, we still have to address. Some other things like under business intelligence, we have to report. Under certificate data management, we do a self the cover at the station. I really, we still have to cover the managing part and trade part parties and then API as well on the all the way to the right. So, those are like the final ones and. This today was a light topic because we are still developing content for the rest of it and kind of resolving some questions that we have internally before we present it all to you. But in 2 weeks time, we'll be able to cover some of these other topics as well. And then, well, now in next steps, there really isn't any next steps for you. Next steps for me and my team and is to finalize updates to the care. I've taken a lot all of your content, all your feedback and very much appreciate it's been very helpful. Especially on finding my new typos and errors, but also addressing some bigger issues. I've taken some questions to clarify. I've gone through many sections that can tear just clarify content to make it easier to follow. And if you to flip to a page, you have all your answers. Typically of a document like this to answer maybe in there, but I mean, in the section, you're looking at precisely. So I did copy and paste some lines around. And I made some clarifications to certain lines. But to that point, I don't actually have these questions written on the slide. We were internally talking about the record keeper, the individual. Who is responsible for managing the test reports. So that is actually. A requirement on the certificate, but we haven't included that in the filing. We thought that would prefer to test it for the beta pilot. And the reason being is that that is the final data element from the certificate that's not included filing. And if we were to include it, then that could inform our computer around 16 CFR 1110 and help us decide. Whether an email certificate meets the requirements for a certificate accompanying shipments and I know that was a question that was brought up from several of you. So, we'll consider it as an option, but I have a question that you could pipe up now or email me Peter. As to who internally or within your partners, it's response is actually managing the test reports. Who is that record? Is it you the importer? Do you rely on your broker to keep that or the manufacturer testing lab? We consider that those 4 are probably the most likely options. I think most likely it's the importer or broker based on my experience here at CPSC. However, you want to consider if there are other record keepers like at their party that we haven't thought of that you. May hire to manage your test report. And for the more, if it is 1 of the options, I did just suggest that makes it easy to include in the UI because then we would just have like a checkbox or a drop down feature to identify who would see record keeper because we ready. We will be ready collecting that data who is the importer, which of course is the business account holder. The broker information is being received from the entry summary and then, of course, lab and manufacturers provided. So, we hope that's not too much of a lift that would just be a drop down or check box. And so, I just wanted to get your feedback if any of you want to pipe in and let me know who primarily maintains this test reports. And you could even just type it into the chat field. I will follow up with an email detailing these questions. This was kind of last minute and I know I was not prepared and did not have a slide for this. I do want to say our next meeting we march night. I do have to postpone it to 3.30 PM. I do apologize if that's an inconvenience for you, but there is a conflict that I have and. And I figured it was funny it's 3.30 is not a big change. So, you have 1, yeah, just you want to read it off. Yeah, absolutely. So, I just mentioned that Ikea has essentially which keeps test reports. They are responsible for the. So, in that case, it would be the importer or in this case, you know, the certifier slash business account that has a comment she said from our side and macy's response is the responsible party. But we hold all certifications on the 3rd party of laboratory. Okay, so that case, it's the laboratory, which we wouldn't know on it's just okay, I will follow up with an email with these slides. This reporting, of course, because there's some people who have not. We're not here. We'll ask for that. Yeah, we're just in that. Yes, I understand. So, you're that you're addressing a different point. We will as part of in the beta pilot, like, let me take a step back. I know CVP has a definition for I, which does not always align with we consider as the order. So, we will clarify that in the future, but for the purposes of the data pilot, it is because you are the participant, you are the 1 responsible. Where the data and certifying so we shouldn't run into that issue, but when it comes to the future rulemaking, we have to clarify that difference between I, or I can just follow up.  Thank you for your time. I'll stand for a few more moments. It likes to speak to me. Thank you.


All right, dog pounds, let's look at the concept of penetrance. Are you ready? Penetrance is this idea that not everyone who has a specific genotype is going to express the phenotype. All right, let's go back to pea plants just for an easy, accurate example. In pea plants, if you have a homozygous dominant, what's the word? Genotype, then you're going to make purple flowers. If this happens 100% of the time, then the penetrance equals 100%. If, really? I mean, my understanding is that this happens 100% of the time, not so. Sometimes, for example, with a condition called retinoblastoma, I can do this, retinoblastoma, okay, I've got a picture of it, I'll show you the picture. This is a condition where it's genetic and it has something on your retina, this little fellow's retina and it's got whatever those things are on the retina. If it is a genetic condition, so if you have the genotype and 75% of the people who have the genotype to get this phenotype, get the phenotype, then it's 75% penetrance. And if 90% of the people who have the phenotype have the genotype, get the phenotype or express the phenotype, then it's 90% penetrance. With a form of dwarfism called achondroplasia, that's a genetic condition, and that's 100% penetrance. So if you have those alleles, then you will display the phenotype that you would expect. For me, I started thinking about that and I'm like, dude, how can you ever draw any conclusions? Because you would never know is the variety that I'm seeing because there are multiple genes involved or is the variety that I'm seeing because there isn't full penetrance in this particular situation. And then of course I have to be like, why? Like, is there something about the people where it's not penetrating that is unique? Like, I find this one really fascinating. This is an excellent example of how it's so much more complicated than we even know. And this next one is hopefully going to hit it home for us all that, wow, we're complicated critters. I'll be right back.


Hello and welcome back to the craft box. My name is Brent and today We are on episode 11 of completionist crafter. This feels so weird. I haven't recorded a video in forever I'm back now from my holiday, which I had See all of the videos that you've previously seen have all been pre-recorded up until today. So Yeah, hasn't been haven't done this in a while It's been I think I calculated just under a month. So definitely overdue for another one of these But yeah, let's talk to adora who has changed significantly And today we are crafting the last of these bits here. We are crafting the Royal beard number one the stand in table number two number three The tall keeper number four the tall small fry and number four the tall whopper number five The low statue base number six the stack of paper number seven the stack of wood planks and number eight the water bucket Which means next time we Into the jewels. So this is the second last episode of the first crafting Vendor in all of the game. So we're gonna be here for a long time So, yeah, stay for the long round We're gonna mark here. I just have to say that Looks beautiful Looks beautiful. Let's get a home Let's hit home and we will be going to craft these I should have everything a lot of stuff is needed Not as much as normal Not as many fish and such because they take forever Which is why most of these episodes take forever to come out because fish take forever to get But yeah, not not this time Yeah, we are gonna wait for it to load and while we're doing that I'm gonna get out my wee little piece of paper Which I have all my stuff written down on And kind of go over most of the big stuff we need actually it's probably easier to do it over here. This is all I Think it's all housing. I think possibly it was here Royal beard is Five fire cat teces bizarre Cattails there will be one of the reagent hunters coming out soon if you're watching this now or like Probably out already if you're watching this later to period art easy peasy boom crafted that Easy as pie really really easy stained end table scarab TCS again bizarre mistwood There's a video on that already Jade of course any of the reagent vendors around the world's So that's sustained end table tall keeper aquarium miss shields bizarre Sapphire obviously the reagent vendors Gullfish grouper these can be found in Trident Avenue their storm rank one So just winnow storm and do all that sort of stuff and boom you can get them real quick Miss wood video already leather straps bizarre nightshade Good luck with that. That's a bizarre job or hope you have some is another good one They can be quite hard to find in the bizarre, but we've also got the small the tall small fry aquarium which Just making sure that yep, this is right. We've got five storm shields bizarre Citroen reagent vendors my decoy These I think I found in the What's it called? House of Scales area like the upper zigzag or lower zigzag one. I think it's up a zigzag There'll be I'm gonna start a fishing series where to catch some of these fish because they needed a lot Miss wood again video again with the straps the same as before ancient scroll I had a lot bizarre is really good place to go and also I think you can get it from parchment So that's in Crocatopia Manly So that was easy peasy The tall whopper miss shields obviously Bizarre reagent vendors these guys Darkmoor or the castle Darkmoor the entry we area that Go there Fishing the waters when I death you'll get a whole bunch of bone fish as well But I mean what can you do mistwood easy peasy leather straps spring scrap iron and Mali bone there'll be a video coming on that sometime in the future not sure when but it will be sometime in the future So that is all of that stuff. We now have the The low-statue base which is shadow oil simple vials from reagent vendors stone blocks Bizarre dragon spire just wherever really there's a lot of place red mandrake. That's a bit difficult Nightside is a good place or you could also go to the bizarre don't recommend it Because there's a lot of people getting that We've got stacks of paper which is shadow oil and simple vial obviously reagent vendors around the world Cattails easy peasy Parchment Crocodotopia is a good one. I'll get into it a better Guide of how to get parchment in a later video Stack of wood planks coal again reagent vendors across the spiral Simple vials again the same and this would the same boom and finally the water bucket I am actually really happy to have all of these big things done Basically, all of these are just already self-explanatory coal and simple vials reagent vendors cattails Easy peasy acorns from mistwood boom. We did it Yeah, I feel so accomplished It's a bit it's crazy because you wouldn't think that these videos take a while But they take forever to actually like get everything for some of these videos takes so long Which is also why you haven't seen the revered weapon yet. I really want to do that and I've got all but I think the All but the flying squid ink So, yeah, we're like halfway there So hopefully soon and then I can start doing more on these episodes as well because it gives another crafting slot So I'll have ten instead of nine so I can do more But yeah, next time we will be doing the jewels, which is the last of the door's recipes finally. Thank goodness But anyway, just a short video. We crafted all of that. Thank you for chewing rune to leave it I can subscribe actually we are gonna go and place all of these down We are is the Decoration note that in furniture of items This is where I'm keeping all of my fish tanks at the moment Yeah, so we're just gonna place them up here real quick boom easy peasy All the fish that we've crafted so far So, yeah, thank you for watching and to leave a like and subscribe if you're very subscribed press the little bell and remember craft outside the box You


Pilot studies are often used to test the feasibility of a larger study before committing resources to it. They are typically smaller than full-scale studies and may involve fewer participants, but they provide valuable information about the practicality of a project. Pilot studies can help determine the best design for a study, estimate sample sizes, and assess the accuracy of data collection methods. They can also help to refine the protocol and ensure that the study is ethically sound. However, pilot studies should not be mistaken for full-scale studies, as they do not necessarily yield conclusive results. This article was authored by Cooper-Cindiel, Campbell-Michael J., Lorraine Mubisher, and others.


The Federal University, Oye Akiti, has installed cameras in critical locations on the campus. The Vice Chancellor, Professor Abayomi Fascino says, the development is to allay the fears of parents on the security of the wards of the institution. He said security officers in the school have also been directed to improve on intelligence gathering to forestall any breach of security in the campus. The former Registrar of the institution has been the architect of the crisis, the problem of Oye, but lo and behold, shortly the long hand of regulations has started, cut with him, and the Council of the University in their wisdom polished him accordingly. A false impression that some unscrupulous elements, faceless individuals, people who are miscreants, because by the addressing from that media that you saw, you imagine that that is not, that cannot be staff of Federal University. Council, we just want to push these allegations aside. Council want to be here responsible, but responsibly. I want to say, okay, let's look into these allegations, and that is the one that is ongoing, and maybe they conclude they are sitting last. Hello, hope you enjoyed the news. Please do subscribe to our YouTube channel and don't forget to hit the notification button so you get notified about fresh news updates.


へ, Öhılan bagars and Lagas haven't terminology. Washtag the Nigerian government have not done much to reduce the attacks. Party is needed for Remarkat. isn't that the government isn't valuable in the climate, as the Taliban say many changes will be slow.聞 has a good point, Jinji Iv tryna apologize, kāduna trīn. That's the theme of this press conference. It was put together by the Unity Schools Old Students Association Yusousa. The coalition of the alumni of Unity Colleges in Nigeria was also represented by member Lawrence Wilbert. They are worried that some of their members have fallen victim to insecurity. Dr Chene Lumegafu who died in the Abuja Kāduna Trīn attack is one search. Angad by the series of one term killing, kidnapping rape of thousands of innocent Nigerians by iswap, members of the indigenous people of Biafra, iPop and numerous other devious blood thirsty groups within and beyond our national bond boundaries. They are calling on the government to ensure Nigerian safety and sustain the economy. By all means, the wanting killings across the country must stop. Buried one of our own, a young lady, Dr Chene Lumegafu of Queens College, the gruesome killing and abduction of scores of staff and passengers of the Abuja Kāduna Trīn on the 28th of March 2022 is for us an inglorious crossing of the absolute red line. Other members also lent their voice to this message to the authorities with notes bad. In sharper context, the stress indicators that show how bad our situation is because somebody is talking about now more than ever before and this discussion we're having today is not partisan, it's not partisan in that sense, it's about our development, we're talking development here on every stress index of our economy, there's been deterioration. We need our people to be secure. We have a lady, a member who has her four children and her husband. We don't know where they are, we don't know if they are alive, we don't know if they are dead. We have five sisters and so on and so forth. People read and say, oh they spoke about it, who are these people, they're just being sentimental or being political or ex, these are our friends, these are our families, these are who we grew up with. So the reason why now is that it even touches us more now. As in security is still a bane in Nigeria, the group wants Nigerians to correct the wrongs by using their voter's cards at the next election. Paul, George plus TV News.


so I recently turned these pumpkins into pumpkin spice and I asked you guys what should I make well today we're making chicken drumsticks we're gonna take some honey then we're gonna take some yellow mustard pumpkin spice time we're gonna go outside we're gonna fire up our big green egg we're gonna get the cooking all right time to put the chicken on and let it cook it's been about an hour and 20 minutes total look at that my friends all right now that we're done pumpkin around let's go get a bite I already know what you're thinking now I may have burned them a little bit but let's give it a try I give it a eight and a half out of ten I definitely do it again I'm not gonna let this go to waste because it is dang good yum yum get you some


Hello folks, this video is part of a series we're doing where we take a look at Azure Lighthouse and all its benefits from a variety of different perspective. Have you thought about how you can safely provide support to a customer with their Azure subscription? How you can help them manage their environment efficiently and without using bespoke tools and processes? And all the while lightning the administrative burden that comes with managing access levels, invitations and directory listings. Well, stay tuned because today we're discussing exactly that with James Brookbank, Chief Technology Officer at RIPE. Hi James, how are you doing? Great, thank you. So James, you're a Microsoft service provider or MSPs for short. What brought you to using Lighthouse as opposed to other tools? Okay, yeah, we have been managing Azure for our customers for about six years now, since about 2015. And prior to Lighthouse we required a myriad of set of tools in order to manage different customer environments. Predominantly for our automation purposes, we needed to create our own onboarding process using Azure AD application, multi-tenanted application settings, which required us to have a full onboarding web application, which meant the customer had to log in, accept the delegation and then bring our application into their environment at which point we could then delegate access to their resources to provide automations and that sort of thing. Similarly for our own access as engineers, we were required to put guest accounts into customer tendencies, which meant that we would have to switch between customer tendencies, increasing admin overhead, time to get into the environment and actually make any valuable contributions. What Lighthouse did was flip that on its head essentially. It enabled us to onboard the customer through Lighthouse, which delegated their resources into our environment. So we now can log in with our own identities, our parallel identities which have coverage in terms of multi-factor authentication, conditional access policies, all of those sorts of things you have in an Azure AD environment. And that one through those checks and balances, we then had access to customer environments. So they were protected by the fact that we had our full security policies on our own tendencies. And that passed through to when we accessed theirs and had access to their resources. So that increased their security posture and how we interacted with their environments. But it also made it easier for us. We suddenly had a single plane of glass that we could access all customers at once basically or switch between the ones that we needed access to at any given time. And I assume that it makes life easier on both sides. So for example, I'm taking a personal example. I've been invited into a customer's tenant years ago. The persons that I used to deal with are no longer work at that company. I don't have a point of contact at that company, but somehow I'm still in their directory. So it still shows up as part of one of my potential logins. So Azure Lighthouse, that basically takes that completely away. So there's a lot less risk to forget somebody on that way. Is that correct? Yeah, for anyone without a highly comprehensive off-boarding policy for user management or an automated tool that detects these users that aren't logging in or that have been there for a while, that sort of thing. Yeah, those sorts of things can hang around for quite a while. And you're right, from your own view, you will see in the directory switcher multiple tendencies that you have access to.  They'll become just part of the scenery. So they don't come top of mind, which is an obvious security issue there, especially for the customers where you have an account in their environment. So yes, Lighthouse doesn't do that. When a subscription is delegated to the MSP, it is delegated at a behind the scenes sort of level. I can't give you the technical breakdown of how that works, but essentially, yeah, the subscription is tied to... So me, as a parallel employee, has a parallel tendency, or the MSP tendency, and I have an account in that tendency. When a subscription is delegated to me, my object ID, or a group that I belong to, is given delegated access to the customer subscription, which means I'm not part of their tendency that I don't have a guest account. I'm not an object ID in their Azure AD, so there's nothing there for them to clean up. So no, there won't be that trailing user account that gets left behind. It is also quite good for the customer because they can go to a... It's called the service provider page in the Azure portal, and it will show them all of the service providers that have access to their environment, what the delegations are, what permissions those delegations have, and they can simply remove it at any time, and then that's gone, which leads to control back for them as well. It's not often that... I'm talking extremes here. You don't have customers going and removing you that often, unless something really tragic has happened with the relationship, but that control remains with them regardless. Yeah, but it's a great thing for a customer to have because they have control. They retain control over who has access, and they can decide when to revoke that, whether or not in whatever scenario their relationship would go sour, for example. Yes, exactly. So I know you've mentioned that you've been managing environments in Azure for a long time. What about other clouds? And I don't want to go down the path of comparing clouds here, but I want to make sure that the... I want to get your view on what the experience of managing Azure Cloud versus managing other clouds, pros, cons, anything you can tell me on that would be greatly appreciated. I don't have a lot of experience with other clouds. We specialize in Azure. That's the only cloud we work in at the moment. From what I know, the concepts are similar to how I explained it earlier, which is you require either guest accounts or some kind of custom role created in the customer account that you assume as a service provider, which has, I mean, they're highly secure in the way they're implemented, but there's a little bit of, again, when you need to clean up those resources, you have to have an off-boarding process to make sure you capture all the roles that you've created that the service provider uses. Plus, from a service provider perspective, you've got to intentionally assume a role or log into a guest account into their account, again, using that previous method, where I'm going into their account as opposed to their accounts being presented to me under my login. So, yes, from what I know, that is still the same for other providers. All right. In terms of your usage of Lighthouse to manage other tenants or customers, what are the normal tasks that we normally do? What is it that you're most likely to use Azure Lighthouse for in terms of, like, take me to your day-to-day of yourself managing a customer's environment using Lighthouse? Yeah. So, primarily, it's visibility. So, we log into a customer environment and we check their resources for performance issues, security issues, availability, anything like that. So, I guess, from a BAU perspective, it would be login, check the environment, look for any anomalies, look for infrastructure services that might be either overused or running out of storage, you know, those kind of basic infrastructure-level checks. Look at any alerts that have fired. Obviously, critical alerts go to an on-call sort of service, but there are other alerts that are firing that aren't so critical, but may pose a problem in the future, so it's just keeping an eye across those. Going into things like Azure Security Center to check security alerts to see if there's anything that needs attention in there. There's, similarly, Azure Monitor looking at any logs or anything you need to look at. So, it's all that visibility sort of stuff as to sort of starting the day, making sure the environments are all up to scratch. Then there's any particular service requests. There could be anything from assisting a customer with deploying applications. So, helping them build pipelines or even just manually deploy something if it's just a one-off. Doing configuration changes, so your standard move-ad change management. So, that's, you know, resizing a VM or scaling a database or any of those manual tasks that a customer might ask us to do. And then any project work. So, any new applications that are being spun up, any proof of concepts that we're assisting with, anything that is being done inside the customer subscription is for us to access and help with. Then overriding all of that is support. So, we have a close support relationship with Microsoft that we leverage for our customers. So, any issues they have, we then can go in through Lighthouse to the help and support page and log a ticket directly on the resource. So, we don't have to use a phone line and then go through the steps of what service is it and then only after the engineer is involved that we can show them. Using it this way, you get all of the metadata of the resource that's in trouble is automatically included in the ticket because it's presented through the Azure portal. So, you're getting like simplified support of existing environments. Simplified management and overview monitoring of that same environment all within the confine of what the tenant or the customer has onboarded. So, basically, they control the amount of access that you have. Yeah. So, through the original delegation. So, we do have some customers that only want us to have read access to their environments. So, we can still do checks and things on their resources, but we can't make any changes. Others are obviously different. They allow us to have write access. Yeah. So, it really depends what the customer use cases and what they want to leverage us for in those aspects. And you find that managing that environment, for example, are you able to like set policies for them? Yeah. Yeah, certainly. Using the Azure policy framework, we can create policies. We actually use, one of the main ones we use policies for is our own tagging. So, when we roll out onboard a new customer, we use a tagging policy that basically defines what sort of service tier an object has. So, for instance, if it's a highly critical production resource, then we tag it appropriately. And that way, the alerts that get created for that go 24-7.  Then we have other resources that are only really business hours. So, we tag those appropriately as well. And then we use policy to track those, so that when new resources are deployed or something like that, the policy will then show us that we need to attend to those and retag them, those sorts of things. Okay. And as a service provider, are there things that you wish that Lighthouse would do better? Like, give us the real nitty-gritty here of what you think in terms of we've hit the mark on here, but we still have work to do on here. Yeah. I think predominantly right now, the biggest gap is role-based access control management. So, access to resources or resource groups in Azure controlled by roles. As a Lighthouse, as a delegated subscription through Lighthouse, we don't see the actual role-based access control list for what the customer has access to. When we come in from a Lighthouse perspective, we see what our groups and users have access to, but we can't assist the customer in setting their own access policies there. So, if a customer says, I don't have access to this resource, will we say, well, we either need to log into your tenant directly, going back to the August account sort of version, or you guys need to do it, unfortunately. Okay. So, that's probably the biggest gap at the moment. So, it's almost like a byproduct of that delegation. So, they've decided how much access you have to their environment, but that negates you being able to help them in a certain situation where you have to check how much rights they have in their own environments. It's actually a little, the system doesn't support it. The highest role you can be given as a Lighthouse delegated service provider is contributor level, which by default in Azure doesn't have the ability to change permissions. So, only an owner can change permissions on a resource, and Lighthouse delegation doesn't allow the owner role. So, it's actually, I mean, when Lighthouse was first conceived, I can see that it was probably a good thing to do, but customers want that level of management from their service providers. So, it does, yeah, there is a little bit of a gap there. Okay. You mentioned earlier that before we started recording that you had possibly a demo on policy or update management. Yeah, policies. I've got one open here, and it's the one I just mentioned before about auditing for tags. Yep. So, this is just a simple Azure policy screen. I'm currently scoped to a customer subscription, and you can see that we've got 87% of resources that are compliant with policy, and there's a few that we actually need to check out. So, just at a glance, we can see that for the subscription in particular, we're not completely compliant, so we'll need to go through and look at what resources are not tagged appropriately in here. What we will then do is once we're tagged, we have an automation that will roll and deploy alerts for resources that need the alerts to be put on them. So, that's, yeah, really quite a simple way of doing it. We can actually, I won't do it now, but if I scoped to all customers at once, which we have over 150 subscriptions, so it might take a little while to load, but we could see at a glance how many customers we actually need to just give us an idea of how much work would need to be done to go through and re-mediate all of this. So, for you as a service provider with multiple customers, this is really a really great way of seeing your entire scope of what your to-do list is going to look like, whether you're seeing all of the alerts or everything that's not compliance, but across all your customers, not just against one. What about automation? What about, like, dashboard? Is there a way that you've, is there a secret sauce that you have to, like, have a global viewer or a single pane of glass view of all of your environments? Yeah, so for each customer, we have a dashboard, primarily infrastructure-related. It's looking at CPU, memory, disk space, that kind of thing, and we generate this through an automation that we've built that leverages Lighthouse to gather all of it, so basically we can either do a single customer at a time or we can do a total customer refresh. So the script will basically go through, log into each customer environment, run through all of their resources, and pull out the ones that we want to have a look at, grab their metric data and build this whole dashboard for us. So depending on what resources they have, that's what you'll see in here. So these are single customer view at a time, but they are built through an automated process that leverages Lighthouse to do it in a really efficient way and quickly. So, yeah, if we ever need to add a new resource type or a new metric that we want to view, we just need to update the config for the script and then rerun it, and it will go and pick all of that up for each customer and regenerate the dashboards. Your dashboard, are you sharing that with each customer or is that for internal consumption? We do use it internally. We have used it to build specific customers when they've wanted this kind of information for themselves as well. So we don't hoard it for ourselves, but yeah, it's just a really, by default, the past 24 hours. So it's just a really quick way of viewing to see that there's no anomalies here, to see that, you know, that CPU hasn't gone out of control for a particular resource or something like that. Or, for instance, when there's storage usage, and you can see that it's creeping up over time and if it continues on that trend, it's going to hit 100%. So it's kind of a proactive check to make sure that we're not going to have anything fall over. One of the really powerful things about Lighthouse is that aggregated nature. I can go into Security Center, for instance, and it will actually aggregate all of my customers up into a single security score, for instance. So as a service provider, we can look and say, oh, we probably need to have a bit of a, I don't know, a task to go through and explicitly increase score for some of this. Obviously, we have our own subscriptions and we have our dev subscriptions and that sort of thing, so the score is a bit up and down, but it is really powerful to be able to see and it kind of allows you to benchmark in a way and say, look, this is industry best practice and we're above it, for instance. So across all customers, we're doing really well from that perspective. Similarly, alerts and monitoring, we can get an aggregated view of everything that's going on at once. I know that a lot of Microsoft service providers are also what we call CSPs or cloud service providers. How does Lighthouse help with a CSP or the differences or tell me about that. Okay, yeah. So CSP, obviously, Cloud Solution Provider, it is primarily a partnership between a reseller and a or CSP and a customer, primarily for Azure Usage selling Azure licensing. When you create a reseller relationship between a customer and a partner, by default, the partner gets full admin privileges to the tenancy, so that's everything. It's Azure Office 365, basically the Azure AD and everything that it's connected to. And that delegated, that delegation allows service providers to fully administer the environments. But the admin on behalf of is quite of a, it's a little bit of a back door mechanism, for one better term. Yeah. What happens as a CSP subscription has a secret, not a secret, but it's a group that's given owner access to the entire subscription that is managed by a group on the service provider side. So the visibility to the customer isn't high as such, and the service provider can go through that. So again, there's no guest accounts in the tenancy, but through that back door, you can access a customer subscription, almost without them kind of knowing. There's still, you know, activity logs and that sort of thing, so things are audited, but it's just a little bit less visible to the customer. Okay, so a little less transparent, a little bit more nebulous in terms of figuring out who's got access and when something was done, unless you have to go through all the logs and the activity logs, you wouldn't be able to just say, oh, here's the list of who's got access and so and so has access to it. Yeah, yeah. So using that as a mechanism to access, obviously it raises questions like when a customer needs to complete a security questionnaire for when they're bringing a new vendor or something like that, or a new customer of their own, they would need to explain that process and how it works. And so, yeah, just a little bit more complicated. And since we're talking about access and privileged identities and so on, so where does PIM come in in this whole thing? Like privileged identity management? Yeah. So PIM's a great addition. So it's been in Azure for a while. It's been in part of Azure AD privileged identity management for Azure AD related role elevation, I should say. So you could be a standard user in Azure AD and then if you need to do something at a global admin level, you can request and elevate your access to global admin for a period of time to do the work and then it gets revoked. So that's that whole zero trust that are just in time management.  So that concept has been implemented into Lighthouse now, as we know it's in public preview. So you can now, when you do a delegation from Lighthouse, you can specify that a role is read-only, for instance, but with the ability to elevate to a contributor access for read-write. So any time of day, standard operation is just read-only access for any customer under this delegation and then you go to a process whereby you go to the PIM console choose which subscription you need to elevate to what you need to elevate to contributor, for instance, if you need to do any writing activity and then a period of time a justification for it and hit the approve button. At that point, depending on your process, it could go for approval to a management person or even potentially to the customer for approval and then once that approval happens you get elevated to that permission and you can do your work and then after a period of time that elevation gets revoked. So it's really peace of mind for the customers that protection against accidental things for one thing. We're all human so people not intentionally but may do something that's disruptive to the customer availability or the application availability. So it protects against that. It's very intentional. You have to intentionally elevate which is also audited. So it's protection on all sides really. It protects the customer primarily but it also protects the managed service provider. And I would think that I used to be a consultant and working for a service provider years ago way before the cloud was a thing but I do know that the time having any kind of mechanism to protect both the partner and the customer was was a very welcome piece of process and tooling. So now that's PIM is going to be in preview right now as you mentioned into it's going to give you the best of both worlds of the two types of customers that you have that you mentioned before. The ones that only let you read stuff and then the one that gives you contributor access to everything. Yeah, exactly. And it's a much better model these days because traditionally and you may have had this when you were consulting but a traditional model was to have two user accounts standard day-to-day work and then one for admin. So again coming back to that whole admin overhead of having multiple accounts and certainly when they're browser based you then either have to log out all the time or use a separate browser or an incognito mode or something like that. So all of those little operational problems kind of go away because now we're able to use a single identity but also have the protections that you're not always an admin you only elevate when you need it. So yeah, again it's just a far better way for everyone to work on these kind of procedures. Well, James, those are all the questions I had for you. I want to extend a very warm thank you for answering those questions and giving us your personal view and experience of using Lighthouse as a Microsoft service provider to manage your customers tenant. So again, thank you very much. No worries. Thank you.


marked a great day in the life of their nation. The 20th anniversary of the Ascension to the Throne of His Royal Highness, Grand Duke Jean. Your Highness, on behalf of all Americans, permit me to give you and your people our heartfelt congratulations. It's a deep honor to welcome you to the White House as you begin your visit to our country. Permit me to add that when you reach California, Nancy and I would like you to give that great state our love. You see, as the result of a certain political exercise that concluded a week ago, it looks as though we won't be living back there for maybe not till 1989. Luxembourg possesses 1,000 years and more of national history. It's a beautiful and a varied land, ranging from the forested hills of the north to the fertile plains of the south. It's a prosperous country with a mighty steel industry and dozens of new industries and services gathering strength. And it's a nation of self-confidence and charm with a gracious way of life based on an abiding love of family and freedom. Luxembourg is a proud and alluring country. Yet Luxembourg acquires still greater strength than vitality as an active member of the family of nations. It was a founder of both the North Atlantic Treaty, Organization, and the European Community. In your free and fair world trade, Luxembourg has set an example for all nations to follow and shown the world that prosperity comes not with less but with more international trade. Individual Luxemburgers have rendered outstanding diplomatic services. Robert Schumann, one of the leading advocates of a united Europe, was a native of your country. Joseph Beck was instrumental in bringing the European coal and steel community to Luxembourg in 1951. And men like Gaston Thorne and Pierre Werner have played memorable roles in world diplomacy. Over the years, relations between Luxembourg and the United States have been those of close and abiding friends. We view with the deepest respect your contributions to NATO, including the registration of AWACS aircraft in your splendid efforts during the enforcer exercises. And we look forward to consulting closely with your government when Luxembourg assumes the presidency of the Council of the European Community during the latter half of next year. Your Highness, we in the United States are convinced that the Western world faces a future of strength and prosperity. In recent years, the Western allies have stood together against the bluff and bluster of our adversaries and become more firmly united than ever. And although all of us have passed through difficult periods of economic adjustment, many of our basic industries are becoming more efficient. And breakthroughs in high technology and other new fields are leading our nations into a time of sustained growth. For Luxembourg, America, and so many other free nations, today our future promise is not stagnation and decline, but opportunity and hope. And tonight, as we look to the future, it's fitting to remain mindful of our past. 40 years ago, your Highness, Americans and Luxemburgers fought side by side to liberate your nation. Throughout America today, there are thousands of men who can still recall the tear-streaked faces of your people when they realized that at long last they were free. To me, the most memorable story is about a strapping young American named George Murgenthaler. For several weeks, George was stationed in the village of Eichweiler in World War II. He had a winning personality. And before long, the good people of Eichweiler took him into their homes and hearts. They told him what life in the village had been like before the war and then during the Nazi occupation. George, in turn, opened his heart. He told the people that he was an only son, told them all his hopes for when the war was over. And in those few weeks, a deep bond formed between the people of that ancient village and the amiable young Yankee. Some time afterward, the people of Eichweiler learned that George had taken part in a fierce battle on the plains between Luxemburg and Belgium. It was called the Battle of the Bulge. And it cost George his life. Today, 40 years later, there is still a plaque honoring George Murgenthaler in the Eichweiler village church. It reads simply, this only son died, that others sons might live in love and peace. Your Highness, today, our sons and daughters know that peace. And the bond between our nations is truly a bond of love. Now, ladies and gentlemen, if you would please join me in a toast to the Royal Highnesses, the Grand Duke and Duchess of Luxemburg, our friends. The Grand Duchess and I would like to express our sincere gratitude for your invitation, your gracious hospitality, and your kind words regarding our country. May we express our great pleasure at this opportunity as the first head of state to congratulate you personally on the overwhelming result of your reelection to a second term as President of the United States. As a matter of fact, Mr. President, we had never any doubt about the outcome. We are confident that this great nation and their able leadership will continue to give the necessary guidance to all the countries of the free world and encourage democracies in their endeavor to promote freedom. There are no problems which separate the United States and Luxembourg. How could it be otherwise when America on two occasions played a paramount role in the liberation of my country? In 1918, as well as in 1944, young Americans gave their lives in order to free the Grand Duchy from foreign oppression. These sacrifices are recalled at a particularly appropriate time. At this year, 1984 marks the 40th anniversary of the liberation of occupied Europe, including Luxembourg, and the final victory of the Battle of the Ardennes. The people of Luxembourg will never forget the generous help of their American friends, which twice preserved our freedom and our independence. Corresponding to our national motto, we wish to remain what we are. This is the reason why, after leaving Washington, I will visit Colorado Springs in order to pay tribute to the American Army and Air Force. Mr. President, we all know relations between our two countries are excellent. I am convinced that we could improve them even more as mutual understanding upon which friendship is based exists between us. There should be no difficulty to proceed successfully in this way. Back home, my countrymen follow with interest and pride this visit of their head of state. They know it is a token of sympathy of a great nation to the Grand Archie of Luxembourg. I beg you to accept, Mr. President, along with all my thanks my countrymen's best wishes of happiness and prosperity for your nation and yourself. May I add a special thanks to you, Mr. President, for having mentioned my 20th anniversary, which took place yesterday on the 12th of November when I took over from my dear mother. It is really awfully kind of you to mention it this evening. Thank you again. May I ask you now to rise for a toast to the President, to the United States of America, to the well-being and the prosperity of the American people, and to the friendship between Luxembourg and the United States. Without exemption, I planned each charter course, each careful step along the byway. And more, more than this, I did it. Yes, there were times I guess you knew when I could choose my share of losing. But now, as tears subside, I find it all so amusing to think they say, not in a shy way, I did it. It's at great risk that anyone tries to say anything after what we've seen. But Twila Tharp, for 20 years now, has been doing so much in modern dance and has been in demand by movie producers and TV producers and has contributed so much to classical ballet companies and this, her own company, she has, I think, has created and made over 70 programs of dance. Am I right? Yes, she has. But with all the demand and everything, I just think we've been so fortunate. And I hope that I'm speaking for all of you. I know I am. When I say that we're deeply grateful for a wonderful evening of entertainment, I, Twila's company, all these brilliant young people, and the choreographer herself, Twila Tharp.


Hi guys, welcome back to my YouTube channel, this is Daniel Rossell here. I wanted to do a video about a supplement that I have been, that I purchased from the internet from iHerb that I've been taking recently. It's the second thing that's made a substantial difference to my life recently. I did a few videos about my new shiny low fat diet, well not so shiny because there's not fat in it. My low fat diet and it's been tremendous. It's the first thing since I had my gallbladder surgery two years ago that's actually made a legitimate substantial difference in my quality of life, in eating. I can eat pretty much normally at the moment if I stick to low fat foods. If I do not stick to low fat foods, I have problems. I went for lunch yesterday, ordered a, I'm a rookie at this, so I'm making rookie mistakes. I ordered a white cheese salad and I could just tell it was like fatty cheese and a couple of hours later, boom, problems. If I prepare my own food, I know it's like 3% cheese, bulgur and good. Anyway, second thing that's supposed to help for post gallbladder stuff if you have problems. If you don't, there's no need to be taking supplements, but it's this one called bile acid factors and this particular one is by Jarrow formulas. What this is is people who've had their gallbladder, I'd probably know this, but the gallbladder stores and concentrates bile and bile is used when you digest fats to make that digester process easier.  This supplement is intended to artificially give you more bile if that makes sense. It's literally concentrated bile in a pill format and it's derived from bovine. This supplement is commonly called ox bile, so it's commonly sourced from ox. This is sourced from bovine sources. Clearly these aren't vegetarian or vegan supplements, although I think you can find a good one. In any event, I want to say a couple of things about this supplement because there are a couple of user tips that I've learned and that other people using this have learned. Firstly, I find this very effective. It actually definitely works. What I do is if I'm eating a fatty meal, so let's say I'm eating a steak. My current policy is I'm eating a low fat diet 80 to 90% of the time and if I feel like having a cheat day, I have a cheat day and I eat my steak and my pizza, but I eat, I take one of these supplements, these bile acid factor pills. Now, as I said, usage is essential. What I've discovered is that you want to eat these. You want to ingest one of these pills. They're fairly big as soon as you start eating.  So I find if I have a fatty meal, steak, pizza, burgers, falafel, shawarma, whatever, this actually does reduce my symptoms for sure. It's like not even, it's not even a query in my mind anymore. This actually works. Not amazingly, but it works quite well. So that's number one is you want to take it with the food. That's extremely important. If you do not do that, if you take this after you eat, you're going to get horrible reflux or that's been my experience because the food's already gone down.  So I've made that mistake once or twice when I was new to these. I said, ah, you know, I forgot to take the, but whatever, I'll have it afterwards and it was not a fun time. So that's number one. Second thing is to be conservative about the dosing. So this says four capsules per serving size and I, if you go on, if you read the reviews on iHerb, you see what people say on YouTube. That's crazy in my opinion. I've tried to, I even found too, too much. Now what happens if you have too much? Well, you're going to have too much bile, more bile than you actually need.  You might get that horrible acid. You'll just know about it. I, I've never attempted for two. I could tell it was a little bit too much. I find one helpful. Another thing you could do is if you want to start with 0.5, you could buy yourself empty capsules or just, you know, pour half of this out, open up the capsule and dispense half of it. That would be another option. Now in terms of how I use these, because they're supposed to be taken before food and their entire purpose is to assist with digestion, I don't want to carry this supplement thing around with me.  So I went for a big one because the pills are, or the pills are quite big. And if I can get this thing open, I'll show you, I'll show you what it looks like. I can fit approximately six to eight of these bile acids pills into the key holder. So I just keep them on my keys. And if I'm out and I decide, you know what, I'm going to have a hamburger. I just pop out one of these and eat it with the first bite of the meal. And so far, so good. The only thing is you have to remember to refill this periodically. Someone knows a better idea, please drop it as a comment. This is just a system I figured out so far. So yeah, this supplement has worked really, really well for me. I don't, I'm not a supplement person. I've taken a multivitamin for about one month of my life and that's about it. This is the first thing I've sort of regularly taken and I've read so many good things from people in exactly my situation. They had their gallbladder out. They got all these problems and they said that this bile acid stuff just made a real difference and I find it helpful. So between that and the low fat diet, I think I've made like a ton of progress in the space of one month and I'm doing a lot better than I was a month ago when I just didn't know what to eat, what was problematic, it was all causing problems. So I wanted to put that up there, Bile Acid Factors by Jarrow Formulas. There's other ones and that's everything I know about it so far.


Authorised law reports are the official and preferred law reports. Cases published in an authorised report are the version of a judgement that has been approved by a judge or their associate. If a case has been published in an authorised report, this version should be used and cited. The AGLC tells us, if a case has been published in several different reports, there is a preferential order. First, other authorised reports. If a case has not been published in an authorised report, the preference is Generalist unauthorised reports Subject specific unauthorised reports Unreported medium-neutral citation Unreported no medium-neutral citation A medium-neutral citation is a citation system that doesn't depend on a publisher. For example, decisions published on the court website that have a judgement number instead. Judgments with no medium-neutral citation just have the name of the court, the judge and the date. See the AGLC for a full list of law report abbreviations. Reports marked with an asterisk are the authorised reports. You can use a case citator available on the law guide to quickly search and see the list of places a case has been published. If you need help finding an authorised report, ask us at the library.


from San Francisco, it's theCUBE. Covering RSA Conference 2020 San Francisco, brought to you by SiliconANGLE Media. Hey, welcome back, everybody. Jeff Frick here with theCUBE. We're at RSA 2020 here at Moscone. It's a really pretty day outside in San Francisco. Unfortunately, we're at the basement of Moscone, but that's because this is the biggest thing going in security. It's probably 50,000 people. We haven't got the official number yet, but this is the place to be, and security is a really, really, really big deal, and we're excited to have our next guest. I haven't seen her for a little while, since Day to Privacy Day. I tried to get Scott McNeely to join us. He unfortunately was presposed to couldn't join us. It's Michelle, a fitter in identity. Just as good. Get her new job, the CEO of Drumwave. Michelle, great to see you. Great to see you too. I'm sorry, Ms. John, Privacy Day. I hope you celebrate it. I know, I know. So Drumwave, tell us all about Drumwave. Last we saw you, this is a new adventure since we last spoke. So this is my first early stage company. We're still seeking Series A. We're a young company, but our mantra is we are the data value company. So they have had this very robust analytics engine that goes into the heart of data and can track it and map it and make it beautiful. And along came McNeely, who actually sits on our board. Oh, does he? And they said, we need someone, it's all happening. So they asked Scott McNeely, who is the craziest person in privacy and data that you know? And he said, oh my God, get the identity woman. So they got the identity woman and that's what I do now. So I'm taking this analytics value engine. I'm pointing it to the board. As I've always said, Grace Hopper said, data value and data risk has to be on the corporate balance sheet. And so that's what we're building, is a data balance sheet for everyone to use to actually value data. So to actually put a value on the data. So this is a really interesting topic because people talk about the value of data. We see the value of data wrapped up not directly but indirectly in companies like Facebook and Google and those types of companies who clearly are leveraging data in a very different way. But it is not a line item on a balance sheet. They don't teach you that at business school next to capital assets. Right, so how are you attacking the problem? Because that's a huge, arguably, will be the biggest asset anyone will have on their balance sheet at some point in time. Absolutely, and so I go back to basic principles. The same as I did when I started privacy engineering. I look at, I say, okay, if we believe that data is an asset and I think that at least verbally, we all say the words yes, data is an asset instead of some sort of exhaust, then you have to look back and say, what's an asset? Well, an asset under the accounting rules is anything tangible or intangible that is likely to cause economic benefit. So you break that down. What is the thing? Why you got to map that thing? So where is your data? Well, data tells you where it is. Instead of bringing in clipboards and saying, hey, Jeff, my man, do you process BII? We don't do that, we go to your system and when you go on drum wave, you're automatically receiving an ontology that says what is this likely to be using some machine learning and then every single column proclaims itself and so we have a data provenance for every column. So you put that into an analytics engine and suddenly you can start asking human questions of real data. Do you ask the questions to assess the value of the data or is the ultimate valuation of that data in kind of the categorization and the ontology and knowing that I have this, this, this and this or we know what the real value is, the soft value is what you can do with it. But when you do the analytics on it, are you trying to get to kind of unlock what the potential underlying analytic value is of that data that you have in your possession? Yeah, so the short answer is both. And the longer answer is, so my co-founder Andre Veloso believes, and I believe too, that every conversation is a transaction. So just like you look at transactions within the banking context and you say, you have to know that it's there, creating a data ontology. You have to know what the context is. So when you upload your data, you receive a data provenance. Now you can actually look at, as a data controller, you open what we call your wallet, which is your portal into our analytics engine. And you can see across the various data wranglers, so each business unit has put their data on because the data's not leaving your place. It's either big data, small data, I don't really care data. Everything comes in through every business unit, loads up their data set, and we look across it and we say, what kind of data is there? So there's quantitative data saying, if you took off the first 10 lines of this column in marketing, now you have a lump of data that's pure analytics. You just share those credentials and combine that data set. You know you have a clean set of data that you can even sell, or you can create an analytic because you don't have any PII. For most data sets you look at relative value. So for example, one of the discussions I had with a customer today, we know when we fail in privacy. We have a privacy breach and we pair lawyers and so on. Do you know what a privacy success is? Hopefully it's like an offensive lineman. You don't hear their name the whole game, right? Because they don't get a holding call, right? Until they put the ball in the hole. So who's putting the ball in the hole? Sales is a privacy success. You've had a conversation with someone who was the right someone in context to sign on the bottom line. You have shared information in a proportionate way. If you have the wrong data, your sales cycle is slower. So we can show, are you efficiently sharing data? How does that correlate with the results of your business unit? Marketing is another privacy success. There's always that old adage that we know that 50% of marketing is a waste, but we don't know what's 50%. Well now we can look at it and say, all right, marketing can be looked at as people being prepared to buy your product or prepared to think in a new persuasive way. So who's clicking on that stuff? That used to be the metric. Now you should tie that back to how much are you storing for how long, related to who's clicking, and tying it to other metrics. So the minute you put data into an analytics engine, it's not me that's going to tell you how you're going to do your data balance sheet. You're going to tell me how dependent you are on digital transactions versus tangible building things, selling things, moving things, but everyone is a digital business now. And so we can put at least the intelligence on top of that. So you, the expert in value, can look at that value and make your own conclusions. And really what you're talking about then is tying it kind of to my own processes. So you're almost kind of parsing out the role of the data in doing what I'm trying to do with my everyday business. Exactly. So that's very different than looking at say something like say a Facebook or an Amazon or a Google that are using the data not necessarily, I mean they are supporting kind of regular processes, but they're getting the valuation bump because of the potential. Right or selling it or doing new businesses based on the data, not just the data and support of the current business. Exactly. So is that part of your program as well do you think? Absolutely. So we could do the same kind of ontology and value assessment for an Apple. Apple assesses value by keeping it close. And it's not like they're not exploiting data value. It's just that they're having everyone look into the closed garden and that's very valuable. Facebook started that way with Facebook circles and way back when and then they decided when they wanted to grow, they actually would start to share. And then it had some interesting consequences along the line. So you can actually look at both of those models as data valuation models. How much is it worth for an advertiser to get the insights about your customers, whether or not they're anonymized or not. And in certain contexts, so healthcare, you want it to be hyper-identifiable. You want it to be exactly that person. So that valuation is higher with a higher correlation of every time that PII is associated with a treatment to that specific person with the right name and the same sort of junior or a senior or a missus or doctor, all of that correlated into one.  Whether you're selling that data or what you're selling is services into that data which is that customer's needs and wants. What, in doing this with customers, what's been the biggest surprise in terms of a value, of a piece of value in the data that maybe just wasn't recognized or kind of below the covers or never really kind of had the direct correlation or association that it should have had? Yeah, so I don't know if I'm going to directly answer it or I'm going to sidewind it. But I think my biggest surprise, wasn't a surprise to me, it was a surprise to my customers. The customers thought we were going to assess their data so they could start selling it or they could buy other data sources, combine it and rich it and then either sell it or get these new insights. And that's what they brought you in for. Yeah, I know, cute, right? All right. All right. So I'm like, okay. The aha moment, of course, is that first of all, the, oh my God moment in data rarely happens. Sometimes in big research cases, you'll get an instance of some biometric that doesn't behave organically. But we're talking about human behavior here. So the aha, we should be selling phone data to people with phones should not be an aha. That's just bad marketing. Right, right. So instead the aha for me has been a how eager and desperate people are for actually looking at this. I really thought this was going to be a much more steep hill to climb to say, hey, data's an asset. I've been saying this for over 20 years now and people are kind of like, yeah, yeah, yeah. Now for the first time I'm seeing people really want to get on board and look comprehensively. So I thought we'd be doing little skinny pilots. Oh no, everyone wants to get all their data on board so they can start playing around with that. So that's been a really like a wake up call for a privacy go. Right, well it's kind of interesting because you're kind of at the tail end of, you know, kind of the hype cycle on big data, right? With Hadoop and all that that represented it and went up and down and everyone, nobody had. Well we thought more was more. We thought more was more, but we didn't have the skills to manage it and there was a lot of issues. But and so now you never hear about big data per se but data's pervasive everywhere. Data management is pervasive everywhere. And again we see the crazy valuations based on database companies that are clearly getting that. And data privacy companies. I mean, look at the market in BC land and any DCs that are looking at this, talk to mama. I know what to do. But we're seeing one feature companies like blowing up in the marketplace right now. People really want to know how to handle the risk side as well as the value side. Am I doing the right thing? That's my number one thing that not CPOs are because they all know how crazy it is out there. But it's Chief Financial Officers are my number one customer. They want to know that they're doing the right thing. Both in terms of investment but also in terms of morality and ethics. Am I doing the right thing? Am I growing the right kind of business? And how much of my big data is paying me back or going back to accountancy rules. The definition of a liability is an asset that is uncurated. So I can have a pencil factory because I sell pencils and that's great. That's where I house my pencils. I go and I get, but if something happened and somehow the driver disappeared and that general manager went away. Now I own a pencil factory that has holes in the roof that has rotting merchandise that kids can get into and maybe the ceiling falls or the fire. All that is, if I'm not utilizing that asset is a liability and we're seeing real money coming out of the European Union. There was a hotel case where the data that they were hoarding wasn't wrong. It was about real people who had stayed at their hotels. It just was in the 90s. And so they were fined 14.5 million euros for keeping stale data. An asset had turned into a liability and that's why you're constantly balancing. Is it value? Is it risk? Am I taking so much risk that I'm not compensating with value and vice versa? And I think that's the new aha moment of really looking at your data valuation. Yeah, and I think that was part of the big data thing too where people finally realized it's not a liability. Thinking about I got to buy servers to store it and I got to buy storage and I got to do all this stuff and they just let it fall on the floor. It's not cheap. But it's got a great, but it does have an asset value if you know what to do then. Absolutely. So let's shift gears about privacy specifically because obviously you are the queen of privacy. So GDPR went down and now we've got the California kind of version of GDPR. We do. Love to get kind of your update. Did you happen to be here earlier for the keynotes and there was a conversation on stage about the right to be forgotten? Oh dear God, now tell me. And is it even possible? And very steam group of panelists up there just talking about very simple instances where you know I searched on something that you did and now I want to be forgotten. Yeah. Your search gets pretty complicated. And it gets pretty complicated. Did no one watch Back to the Future? I guess not. Did we not watch that show Back to the Future where all their limbs start disappearing? Yes, yes. It's hard to implement some of these things. This has been my exhaustion with the right to be forgotten since the beginning. Humanity has never desired a right to be forgotten. Now people could go from one village to the next and redo themselves, but not without the knowledge that they gained in being who they were in the last village. Speaking to people along the way. Right? I mean, you become a different entity along the way. So the problem always was really differential publicity. So some dude doesn't pay back his debtors. He's called a bad guy. And suddenly any time you Google him or Bing him, it does Bing still there, right? So you could Bing someone, I guess. And then that would be the first search term. That was the harm. Was saying that your past shouldn't always come back to haunt you. And so what we tried to do is use this big, soupy term that doesn't exist in philosophy and art. The Chimera Rues had a great right to be forgotten plan. See how that went down? That was not very pleasant. No, it was not pleasant. Because what happens is you take out knowledge when you try to look backwards and say, well, we're going to keep this piece in there. We are what we are. I'm a red hot mess. But I'm a combination of my red hot messes. And some of the things I've learned are based on that. So there's a philosophical debate, but then there's also the pragmatic one of like, how do you fix it? Who fixes it?  Right. And what is the goal? I mean, that's probably the most important thing, right? Is what is the goal that we're trying to achieve? What is the bad thing that we're trying to avoid versus coming up with some kind of grandiose idea that probably is not possible, much less practical? There's a suit against the Catholic Church right now. I don't know if you've heard this. And they're not actually in Europe. They live in Vatican City, but there's a suit against about the right to be forgotten.  Then I should be able to go to the church and erase my baptismal records and all the rest. Oh, I hadn't heard that one. I find it, first of all, as someone who is culturally Catholic, I don't know if I can be as saintly as I once was as a young child. What happens if my husband decides to not be Catholic anymore? What happens if I'm not married anymore but now my marriage certificate is gone from the Catholic Church? Are my children bastards now? Michelle's going deep.  Like literally what the hell?  Is the data value of deletion proportionate to the data risk? And I would say the right to be forgotten is like this. Now having an index ability or an erasability of a one-time thing, or I'll give you another corner case. I've done a little bit of thinking, so you probably shouldn't have asked me about this question, but in the US, when there's a domestic abuse allegation or someone calls 911, the police officers have to stay safe. And so typically they just take everybody down to the station, men and women. Guess who are most often the aggressors? Yes. Usually the dudes. But guess who also gets a mugshot and fingerprints taken? The victim of the domestic abuse. That is technically a public record. There's never been a trial. That person may or may not ever be charged for any offense at all.  Now she turns her life around, she leaves her abusers, and it can happen to men too, but I'm being biased. And then you do a Google search and the first thing you find is a mugshot of suspected violence. Are you going to hire that person? Probably not. Well, begs a hold. Are you supposed to do that? Of course not. This is the generation where everything's been documented all along the way. So whether they choose or not choose or want or don't want and how much of its based on surveillance can be predicted you didn't even know. I thought you were going to say, and then you ask Alexa, can you please give me a recording of what really went down, which has also been done. Well, that'll happen too, right? It has happened. Yeah. It has happened, actually. Which then you say, well, is having the data worth the privacy risk to actually stop the perp from continuing the abuse? Exactly. And one of my age-old mantras, there's very few things that rhyme, but this one out that does. But if you can't protect, do not collect. So if you're collecting all these recordings in the domestic, think about how you're going to protect. There's other people that should have hired you on that one. We won't go there. So much stuff to do. All right, Michelle. Unfortunately, we have to leave it there. But thank you for stopping by. I know it's kind of not a happy ending. We're building things to fix this. But good things with Drumwave. So congratulations. Thank you. We continue to watch the story evolve and I'm sure you'll be nothing but phenomenal success. It's going to be a good time. All right, thanks a lot, Michelle. Thank you. Michelle, I'm Jeff. You're watching theCUBE. We're at RSA 2020 in San Francisco. Thanks for watching. We'll see you next time.


How do you test your faith? Refusing to consider the possibility of wrong is admitting you're not going to find out. Jesus commands his followers to be skeptics. He says, in the Sermon on the Mount, beware of false prophets.   Jesus commands that we not be skeptics that we believe credulously. And he criticizes people who ask for evidence. He says, you Thomas, you ask for evidence, but blessed is he who has not seen and yet believed. So, and you will not put the Lord by God to the test. That's what Jesus said. Jesus said, do not be a skeptic. Believe what I said because I said so and for no other reason.