A very good morning to WSS stakeholders from the ITU headquarters in Geneva, Switzerland. We are on the fourth day of the WSS Forum 2017 and we all welcome you if you are participating on-site or following us remotely. The high-level track of the WSS Forum 2017 is moderated by high-level track facilitators and these high-level track facilitators represent the different WSS stakeholder types that have selected them to be presented out here. That is the government's private sector, civil society, the technical community and the academia. I have here with me today the 14 high-level track facilitators who facilitated the different sessions on inclusiveness, on capacity building, on 2030 agenda and various other interesting sessions which were multi-stakeholder and had a very interesting discussion and the outcomes are already online on the WSS Forum website. Good morning Shernon. You are representing the technical community here at the WSS Forum high-level track. What were the main outcomes and the key takeaways of your session? Okay, first of all I would like to thank ITU and you all for giving us the opportunity to be here to serve. Actually most of the times when we are talking about ICT and services in my particular session we have been focusing on climate change as well. This is one area that normally we don't focus much on but we believe this is very important because while we are focusing on making money, while we are focusing on continue developing ICTs, it is very important for us to conserve this very important asset that we are living on which is the planet. So our focus has been in addition to the other technical areas to focus on the climate change as well. Thank you. Focusing on climate change and saving our planet is our joint responsibility. Dr. Grinn is representing the private sector and they had some very interesting panelists on their high-level session. Let's hear more from him about the key trends that were captured during his session. Thank you Kitanjali. There are a number of them and all of them fortunately are positive. One which impressed me quite strongly is that now we all or most countries moving from building infrastructure to efficient use of it. So it's e-government, e-health, other services are reality now. Second trend which is very interesting, it's new one, like role of such invention like artificial intelligence or cognitive sciences which can be available already right now for developing country and can greatly enhance efficiency of and use of knowledge which is everywhere in the world. And maybe the last one which did impress me, it's presentation from Facebook. So they are going from content providing, also taking care on different ways how to serve and the serve population and it was really impressive. Thank you. Thank you Dr. Grinn. Indeed you had a very interesting panel discussion. The recordings are all available online so we request you to please go to the WSIS forum website and listen to the recordings out there. Good morning Mavish. You had a very interesting discussion and dialogue and in fact a lot of participants as well you know joined into your dialogue. Can you please share what happened during your session? Sure. Thank you Ghitindjali. It was very interesting. We had two panelists present and the case studies they presented were very interesting and quite disparate. One presented on the National Digital Library in Russia and the other talked about e-health technologies in Bangladesh so they were very different but what was interesting was that they both talked about fostering a more robust information society and they talked about it in very similar ways so what they said was whether you're talking about fostering innovation or generating better more efficient knowledge extraction it really needs to be drawn from the local context and address local needs tap into local capacity and so that was a really interesting discussion and as you said the audience got involved and it was wonderful. It was a great dialogue. Thank you Mavish. The most important aspect of WSIS forum is to be inclusive and to ensure that everybody gets a chance to participate in the dialogues. I have here with me today Ms. Gayathri from APC. She's representing the civil society community. Gayathri, I heard that your panel was extremely multi-stakeholder and there were great discussions around the aspect of linking the WSIS action lines with the SDGs. Can you share some of the key outcomes of your session? Thank you Ghita and thank you for having us here because I thought it was a really interesting dialogue. The session that I managed to facilitate related to ICT applications and services and that was great because it's really ICT applications and services that make the internet relatable and experiential for the people beyond the infrastructure and that's what makes the internet real even for the people and during the session we had really interesting dialogue between the government as well as the private sector. There were very interesting examples for instance in Facebook and Bangladesh where people are mobilizing on Facebook for really interesting initiatives like for instance people got together to plant 200,000 saplings, clean up the rivers as well as Bangladesh has also been using these e-filing services that's been saving them a lot of cost in terms of physical infrastructure but it's also been improving their efficiency. And another very important case study we looked at is in the case of Liberia and the very tragic situation of Ebola and the key role that ICTs played in tackling and to a great extent mitigating that situation. One of the key things that came out of that session however is that it was not all one sided. The participants and the speakers were very aware of and cognizant of the challenges that we have with ICT applications and services because the two main challenges are that the world is increasingly getting connected but there are many people that are still unconnected and as we keep moving to ICT applications it's very likely that those people who are unconnected will become even more marginalized. So that kind of highlighted the need to push and make sure that they get connected soon. And the second issue that was highlighted was in terms of cybersecurity and the need for states to be able to trust each other when it comes to cybersecurity but also to have a human rights based approach to make sure that we put users first and that their privacy and personal data remains safe. So they had very interesting discussions about how to go forward but civil society was able to present the challenges as they saw it and the ministers were able to respond to that and that was great. Thank you Gayathri indeed. That's the purpose of the WISIS forum to provide a equal and just platform for all multi-stakeholders to come and talk together and to forge new partnerships to ensure that ICTs play a crucial role in enabling the sustainable development goals. Andhrae good morning you were the youth representative of the high level track facilitators. I want to hear more about what you captured as you know the young person attending the WISIS forum. What were your key takeaways from your session and from the WISIS forum in general? Yeah I was very surprised in my session because I feel that I would see a very formal session but we achieved a very informal dialogue and we see a very concern about the not just the regulation problem and a fight between the private sector and the public sector but a real concern about the multi-stakeholder model and concern about the necessity about the change and the urgency of the question about the digital divide and about other divides about the gender divide, about the youth divide. So I think that it was a great experience to be here in the WISIS forum and represent the youth. It was a great step in this forum. So it was a pleasure. Thank you. Thank you. The pleasure is all ours and we hope that we will continue to engage with the youth. During this WISIS forum we had students from different schools and universities of not only Switzerland but all over the world participating in the hackathon and also a virtual reality experience that connected the schools in Switzerland with various other schools in parts of the world. Good morning Jessica. Can you share some key takeaways from your very interesting high-level session? Sure. Thank you and thanks for this opportunity to be a high-level track facilitator. My session was on the knowledge society capacity and e-learning and some of the takeaways were that there's been a lot of progress in how to extend learning opportunities using digital technologies but there are still some challenges particularly with literacy, both digital literacy and traditional literacy. Some of the solutions that were sort of proposed were that by expanding digital literacy sometimes traditional literacy can also make progress. Another key takeaway was that we need to be thinking about new technologies like big data, artificial intelligence and how they can be integrated into capacity building and e-learning and the building of knowledge societies along with smart cities as learning environments and centers of excellence where as long as there's some horizontal learning that takes place between these smart cities that this would be sort of a next step in how we continue to build the knowledge society. Thank you Jessica. Dr. Habib's session was the last one in fact on Tuesday and even though it was the last session I could see the excitement and all the participants were engrossed because it was such an interesting topic and such an excellent discussion had emerged in that session. Dr. Habib could you please share some key challenges and opportunities that were shared in your session. Thank you. Good morning. So this is my first time in the WISIS forum and as academia member it was very exciting opportunity to discuss and make some cooperation and it was a great dialogue with ministers from Iran, from Uganda, from Vietnam and representative from Mexico, Moldova and 50 more ventures. The speakers highlights the need to focus more on how we can solve the problems of digital divides and they also present their plan for the next years and the new strategies that they should make plan. So what I also like in this forum, in the WISIS forum, it is mainly the international networking. So thanks for ITU, for inviting me to this forum and congratulations for the success of WISIS forum 2017. Thank you Dr. Habib. You were also a mentor at the Hackathon, Hack for Health on the first day of the WISIS forum. How was it to have so many young people here at the WISIS forum and develop applications in the area of e-help? Yeah, it was very amazing. Two days just before the WISIS forum. So during more than 24 hours, continue time, the teams make a great challenge and presented some great work projects and I hope that they will continue to develop them and congratulations for the winners who are from Poland, from Norway, and from Tunisia. Thank you very much. Hello, Suchita. Suchita was moderating the panel on gender and streaming and in fact, one of the achievements of this WISIS forum was a lot of women speakers, panelists. In fact, even in the participation, there's an increased participation from women at the WISIS forum. This is a great thing to see and let's hear more from Suchita because she had an excellent panel on gender and streaming and ICTs. Thank you so much, Kitanjali. And thank you so much for having me here. My panel was absolutely fascinating. So I think they also opened by speaking about the WISIS forum itself and how you're making strides in including women participation. I think 38% this year were the targeted 50% in the years to come. I think the HLTFs also have nearly 50-50 participation but they also highlighted that there are many parts of the world that have much more severe problems. The gender digital gap is rising in LDCs. More developed countries also have fairly significant problems when it comes to equal pay for equal work. There were lots of really interesting ideas about how to improve that. But the challenges remain, the barriers to education, lack of access, stereotypical representations, tokenism, just a whole host of others. Some particularly interesting ideas that I thought came out of the discussion were the increase of auditing of programs that introduced promoting personal branding for women in earlier stages so that they can progress well through the stages, bridging the skill gap is, of course, incredibly important. The encouraging note that I think everyone struck was that gender mainstreaming is actually at the top of a lot of national and global agendas right now. So there's a whole lot of scope to actually make positive change going forward. I'm hoping we get to see that sometime soon. Thank you very much, Suchita. Today we heard from all the high-level track facilitators who were nominated to represent their different stakeholder types here at the WSIS Forum 2017. They did an excellent job of capturing the key trends, the opportunities, the challenges, and the key linkages of their session with the sustainable development goals at their respective high-level policy sessions. We thank you for listening in, and we hope you enjoy the next two days of the WSIS Forum 2017. Thank you very much.


Well to the very buddy Jason for Jatsby's case breaks.com we're giving away five football mixture spots with this 2020 prism football mega box One box break random teams number one And again 32 total spots. I already get to run a team name and then it fell around my customer names and teams It should be the hits out member no veteran common ship after the mega box break will take all 32 customer names randomize them and The top five out of the 32 will win a spot in the football mixture the next one's up number two Let's get that one rolling as well. So good luck guys. Here's a dice roller Roll it and it's a one to six seven times. Good luck one two three four five six and seven seven times Gale down a Kenneth seven times one two three four five six and Seventh and final time Denver Broncos down in the Los Angeles Rams All right again stick to what you got guys this quick little mega box But of course some of the bigger teams chargers You know bangles dolphins of course like caring at the chargers Bangles Colin dolphins Tony, let me quickly just think this one or title that I should All right, we won't see the team number no trades So here we go It's my first time breaking a mega. So I don't know what to expect out of here. I don't know what the mega exclusive is Neon green nice. I love the neon greens This is break number one. Yeah CD lamb and McKeel Harry is that an autograph? Wow. Nice Haches it's gonna Joshua Cherry very nice. Zack Moss Neon green of Devon DuVernay Love neon greens actually and a Brian Dawkins a silver Melvin Gordon T Higgins and And the whiskey and Denzel Mims Yeah, I think I think there was a little glitch to Robert because I went through the orders and yeah I think I might have showed number one for you, but for some reason. Yeah, you were number two Because I always double-check the orders and I was looking at that to your name popped up right at the end But yeah, you're number two Yeah, so like my on my side It shows that you're number two although the skew number is number one But for some reason it might have just glitched and didn't change I mean, I can send you a screenshot of it, but it's when you buy your crown Royale Yeah, it says number two in the title, but for some reason the skew site is said number one I mean, maybe the system was still changing as you bought it. So Yeah, you're number two.  I'll switch scenes and again Let's give away some spots in the break. It's number top five get in guys Here's a dice roller Roll Six and a five eleven times. Good luck one two three four five six seven eight nine ten and eleven the final time Boom eleven times five six and a five eleven top five get in and it is Jeff David Colin Colin and Chad Meyer There you go after eleven times top five get in congratulations guys Another way to win is on the website guys. Let's get the next one rolling. It's already at 23 left I do a couple of those but I do four megas. So three left plus some spots straight up We got to do two more contenders plus ten spots straight up And we have some giveaways for those breaks too as well. Appreciate you guys. Jasper's case breaks.com


The governorship candidate of the National Rescue Movement, Aki Bitwit, has described the chain of thogry in Nigeria and how it has been implemented before and during the elections. On plus politics, tonight on our station, he said there may be violence in the forthcoming election. Part of what I discovered was that, there's even a term for the thogry angle. So they have different options. And thogry is referred to as option A4. But so you have option A1, A2, A3. I'd never concentrated on that because they're the usual standard thing. Now, A4 is triggered when, at a certain point, there's an organization around it and a structure around it. So there are guys who are kept, particularly during this season, they are taken into some sort of group where they are looked after, catered for feds, this and the other. So they become dependent on whoever is their minder. It's almost like what the terrorists do, all these arcades that are absolutely got it. So you have these cells and these guys are fed all this stuff and then they are indoctrinated heavily. Say, look, listen, you got to, by all means, necessary. You must make sure that. And they're given steps, very, very organized. And then they are triggered. So when option A4 is triggered, it means that's code red, everything goes, you know. They are supplied. Those who are supplying them with the cutlassies and whatever on the knives do that. And some may be supplied with guns and what have you. And then they push the alarm and, you know, especially with modern technologies, it's easy to just, you know, wake everybody up and then they get into the fray. Some are told, yeah, you don't, you know, they're told the extent to which they need to get violent and some are told, look, even if it means taking their life, we'll protect. News updates.


Hey everybody, Matt here for Layton Sports Cards, ripping 2022 Panini Select football hobby, 12 box full case break number 18 random divisions. All right, here we go. Eight names, eight divisions, let's do it. We're randomized six times. Good luck. One, two, three, four, five, and six. Jeffrey H down to Joel B and six times on divisions. One, two, three, four, five, six. AFC West and NFC North. All right, we have Jeffrey H, AFC West, Stephen S, NFC East, Rory C, AFC East, Jeffrey H, NFC South, Logan H, AFC North, Felix N, AFC South, David K, NFC West, and Joel B, NFC North. Post those results and we'll get this started. Yeah, you're welcome, Jonathan. That's awesome. Congrats. That's a heck of a card, man. There's a link to the results. All right, here we go. Box one. Force is stepping out of the room. That's good news for us. One of one. This is Giants, Rookie Jersey, White 75, Kavon Tibido, that is NFC East, Tyler Linderbaum, Rookie Silver, DJ Moore, Sweet Level Silver, and Allen, Eden Hutchinson, Adams, Tom Brady, Justin Fields, Light Blue, Gino Smith, we're not ready for you yet. Go grab a beer or something. Kwonu, Rookie Red, and Sauce, Sweet Level Rookie. The secret manager beer fridge to have that at the National booth. Garrett Wilson, Phenomenon Rookie Silver. Except no way that's allowed to bring it alcohol into the convention center. Traylon Burks, Rookie, and Tideye, Allen Robinson to 25 rams, or NFC West. This is AFC North to 10, Gold Patch Auto, and Kwon Bolden. That's a cool hit for the AFC North. Don't see him much. That's pretty cool. Sam would be Jones and over that one. I don't know what Sam would have to say about that, but I'm sure it would be loud. Yeah. I mean, everything he says is loud. Tom Brady, Justin Jefferson, Field Level Silver, Josh Pascal, Rookie Silver, and Christian Watson, Rookie. Four, Supercup, Tri-Color, Drake London, Rookie Silver, and Tom Brady. Jack Jones. This is Falcons to 10, Gold Rookie Patch Auto, Tyler Algier. Nice. I'm sorry, NFC South, Jeffrey H. Who? Gold Patch Auto's in the first box. Let's keep that going. I would say me leaving still helps, even though you didn't pull one gigantic hit. You got the train rolling. There's George Kittle, Blue, Robinson, Rookie Silver. It's just the appetizer. All right, box number two.  Can't be that hard, but actually, like, not a chance. I have to study this joke. Knock, knock. Trent McDuffie, Rookie Light Green. Old lady. Oh, I see where this is going. Old lady who? Now you can. Garrett Wilson, Rookie Silver. No, this is all card ship. Well, my one top loading ship was one.  You want to hear my favorite joke of all time. All right. ASC West to 99. Jersey, Austin Eckler. Yeah, I do. Jack Sandborn, Rookie Silver. It's not even that funny. Just so I can use it against you. Knock, knock. Who's there? Interrupting Cal. Interrupting. Oh, man. That was a... I heard that on, I think, South Park and I laughed and laughed and, like, to a point where I was uncomfortable with how much I was laughing. There's Joe Montana, field level. Hollywood. I don't know where I saw, where I heard that one the first time. Field level white. Bailey Zappy, Sweet Level Rookie. Jefferson. I can't do the move. The move sounded very well right now. Bailey Zappy, Neon Icons. And Desmond Ritter, Sweet Level Rookie Silver. Breeze Hall. Force Buckner, Tri-Color and Bucks. Super Bowl, Otto Silver, Chiquil Barrett. That is NFC South. Charlie Alexander. Phenomenon. Rookie Silver, Chris O'Lave. Chris O'Lave, Rookie Silver. Forrest, notice this. There's a thumbnail on the... We're going to send an empty box for you, NFC South. Patrick Mahomes, Silver Snapshots. Patrick Sirtan. Derek Carr, Blue. Hamilton. Alger, Rookie Silver. Tyreek, and this is NFC South. The 49, Rookie Jersey Otto. Chris O'Lave. Kind of a color match, the bronze. Maybe not quite. Bronze and gold aren't quite the same. 49. Logan Hall, Rookie White. The difference in the tie-ties and this are pretty big, which is weird because we're not bringing it so close. Like with the tie-ties, it's going to get patched. Usually, yeah. It's Isaiah Spiller, Rookie Blue. Kind of a Gordon Rookie Silver. And Hutchinson Neon Icons, Rookie Silver. Traylon Burks, Sweet Level Rookie. O'Lave and Neon Icons, and Frankie Luhu. Is it Frankie Luhu? I guess so, yeah. One of his first Rookie Cards, I think. That's a field level Rookie Silver. Scooter they have, Super Bowl Radios, but they're so short-printed, they've been in like flawless and stuff in the past. Yeah, hasn't signed a ton of them. But they exist, but those Super Bowl Autos are inserted into like a lot of different products. NFC West to 99, Jersey, Keenan Allen. Jay Moore. Like you can pull them in and pack a bowl. I think you can get them in NT as well. Oh, Don. Oh, man. That's what I was thinking. I need to go home. Christian Wilkins, Field Level Tydyde, 25. I think I'm sick. Tyquan Thornton, Rookie Silver. Parsons and Devo. This is always fun. The celebrity, I'll start a softball game. That's actually King Felix. I think it is. Yeah, he's the coach of one team, and then Jenny Finch is the coach on the other. That's pretty cool. Check, Mooma. To the best pitchers I've ever do it. Logan Hall, Rookie Silver, Aiden Hutchinson. They ain't trying to lose. This is NFC East to 199, Rookie Auto Silver, Johan Dotson. Oh, I wonder if this guy can hit a bowl. And Howard, he better hit it like, out, out. Not just.  No, they didn't. Never mind. How does he not hit one out? He's just one of the first thing. Jalen Ramsey. Purple, 75. NFC West, Jersey Auto to 199. Cam Chancellor. Cholula, I would probably throw Tabasco in the trash. I don't. It depends on, it depends on what it's on. So if it's on like, boy, a mafe, like if I'm trying to spice up some Mexican food, I'll take the cholula. Desmond Ritter, Rookie Silver, if I'm putting it on like eggs or hash browns or something, definitely Tabasco. I'm selling you like barged in. Right, it's by side. Oh, no. Looks like laying a stale for the national. Oh, if that's the case. Jumping off the roof. If I could take my apartment with me to Chicago, I'd probably enjoy the national a little more. Kenny Pickett, NFC West, Rookie Jumbo, Jersey to 99. Boy, a mafe. Skymore, Rookie Silver.  No, I actually. There's nowhere like that. It's like makes it decently. So I've never had like one of the orders. The Breezeway in Sanford. Really? Yeah. Been there before. I just never ordered that. Yeah, it's just they call it the Sanford Special. That's why I never ordered it. James and Williams, Rookie Field Level. Sanford also got some. At least downtown Sanford. Yeah. This is NFC East, 8 of 10. Rookie Gold, Wandao Robinson. Nice. There you go. NFC East. Kevon Tibido, Rookie Silver. Well, Leak Willis, Rookie Sensations. And Falcons to 99. Prime Selections, Rookie Jersey Auto. Drake London. That is NFC South again. Jeffrey H. What is it? Tonkatsu pork? I don't know that I've had that. Yeah, Tonkatsu. They do it like it's like I think it's Japanese, but it's like do it a lot of ramen places. Brian Robinson, Rookie Maroon, 149. This is not of a night. Rookie Silver. Japan is like the opposite of where Bredaport, Tennessee, comes from. Yeah, that was born in Indiana. So I'm a member of the pursuing the pursuing Bredaport, Tennessee sandwiches, Facebook group, Traylon Burks, Rookie Snapshots. This is the whole group. I'm no kidding. I know, I believe you. There's a group for everything. It's just money. Hello. What's up? Sir, you're ringing the bell. Name's Fridge. Fridge. Damion Pierce. Fridge, are you doing here? Rookie Silver. Fridge, yourself. Can't say those words on stream. Fridge. Joe Burrow, Silver Sensations. Sweet partner, Rookie Silver. Did it throwback Thursday? Throwback to 2020 with a stand-in right here. Couple of nice golds. Yeah. A few nice golds. Micah Parsons. It's been good so far. Red, sweet level. That is to 49. Every time I leave the room, that pulls big cards off the get-up in a second. Yeah, look at that. Patriots card from the last break. That's O'Lave. I read the bottom middle. Miles Garrett. Is that the Chronicles? Bernard and White. This is to 35. Mom Brady. NFC South again. Jeffrey. That's nice. Brady White. Cool one behind it too. I kind of glimpsed. Quarterback, Brady White. Probably. AFC North. Die cut. Otto Green to five. Justin Tucker. That's a nice one. That's a nice one. Pack him a pack. He actually is a decent selling kicker. Yeah. Joe Mixon. All the Ravens, there's like three Ravens at self-surveillance. Like him and Ray Lewis. I'm like Sugs and Reed. They all sell super well. For being non-QB, non-receiver. Because they never have a good selling quarterback. Lamar, I guess. See their best franchise. I guess he could maybe it was Flacco because he won a certain rule. I don't know. Selling wise? Sell. Oh no, not selling wise. Never approached Lamar. Clark. Right. Not even close. Martin Emerson. L.A. Dela Cruz is a 500 average in the last six games. Seven steals ran in time. Seven steals. Garrett Wilson. Take one. Star saving up for the Reds. Look at this pile of view of homeless. Tom Brady. Yeah. Sweet level. Of course he's been put in work. Skyler Thompson. Even now we've got cage organized. We come in, the breaks are gathered through like Monday right now. Back there. Commanders, this is the 75. Jersey White. Terry McLauren. That is NFC East. Steven S. Terry. Back it up, perverse. Hang on, Terry. Veggie, I actually thought that was something made up. Like somebody actually was talking about it like last week. Telling me about Vegemite sandwiches. J.C. Horned. I thought it was just like something new. Messing with you? Like from a song. Traylon Burks, Rookie Silver. The Men At Work song. Yeah. That's the only time I've ever heard of it. I feel like they made it up. I think it's the only song it's mentioned in. I could be wrong. Robinho Dobbs. There you go. Any songwriters out there? There's a market for a song. That's not a bad idea. You could do like lyrics search. A whole album was just because of Vegemite sandwiches. Robinho Dobbs, Rookie Silver. Every song is about just that. A level Tom Brady. It's a Vegemite sandwich. Yeah. Is it made of like vegetables or something? Is that what it's called? Vegemite? I don't remember that. It's just right. I truly don't know what it is. I blocked it out because I wouldn't need it. Cam Taylor Britt. Trichella Rookie and Breez Hall. Sweet level Rookie. What was that? We just flipped the bomb. Was he circled the bases? Who is that? Egger. Is that it? Oh yeah, that is Egger. Jerry Judy Silver. Rocket shot. Thicky. Is that Bob Boone? Dozen Ritter. The Marvin Leal. It's probably Brett Boone, right? He played for the Mariners. Marvin Leal, Rookie Maroon. This is... Yeah, that's not Egger. No, that's Brett Boone. This is NFC North. The 25 tie-dye patch Otto Harrison Smith. Smoked one there. Cool hit for the NFC North. 11 of 25. I don't know who this is, but she just whipped hard. Oh, Cam. And that's two. She's athletic, just not in this... Two of us. I'm not worth a bet. You'll love us all. I don't know. Oh! Oh, okay. We should do a late and all star softball game. We don't have enough people. Hallie, Hallie, we totally do. We totally do. We could have nine on nine. No, Hallie's got to get content. She can't play. Yeah, give on to it on rookie silver. I want Hallie's team. Hallie, we hit a ball. I was like, ah! I want Hallie's team. 100%. Mike White, Joe Mixon, and NFC South. Rookie Otto, Matt Corral. Hallie's going to be like... Another hit for the NFC South. Is Rich Hassegah on my team? It's like, yes. I organized this. She just hummed the fastball in there. Did she? It's Felix. Oh, they're the team captains. It's like an actual fastball. Josh Jenkins. Two of the best pitchers ever right here. That's a pitcher. That's a pitcher base hit right there. Yeah, it is. Box number six. They were really running the secondary. Kickball. There will be... I will not be participating in kickball. I think Rich and I can both disqualify ourselves from that one. If I get an automatic runner, I'll play kickball. Oh, dude, I'd probably... Like, I'll just stand at the plate and kick. Yes, I can do that. I'd probably break my spine doing the kicking part. I'm not hustling out of double. That was my rule in slow pitch. I hit it round and first. That was my rule in slow pitch. If it stays in the park, it's a single, no matter what. Unless I can walk to second base. Prescott. K. Dotton. Rookie silver. Gorgeous swing. Solid swing, for sure. Gorgeous swing. UK. DeMar Hamlin. Field level rookie silver. Who is that? Felix Hernandez. No, the leading hit. I don't know. NFC West in 1999. Jersey. DeBo Samuel. Who was? Evan Lloyd. Rookie silver. Dude, he was really good for a while. I remember that catch he made at the wall in the World Baseball Classic. I know. Crystal Lave. That's Zach Levine. Garrett Wilson. Sweet level rookie silver. Mike Cameron. He used to hit bombs. I think Jenny Finch has given up a career high two runs in this game. It's a mere white. Rookie white. Where does that throw? Where does that go? Corral rookie silver. This is more entertaining than the All-Star game, I think. Deck. Trey Griffin. Wow. Lefty Leg is dead. Oh my God. Didn't he go to school and the ball was crushed. Tom Brady. Tri-Color. And NFC West in 1999. Jersey Otto. Cam Chancellor. It's a foul ball. Or Toluca could run. Cologne could run the bases. You know, he's an athlete, right? Yeah, I would need it. Jahan Dotson. Rookie blue. Marche Silver. Chris Hall. Oh, it's gross. It just went right by the set up field. George Pickens. Neon Icons. Can you watch those guys in like slow pitch softball that like like specialized in hitting all 400 feet? You ever seen that? NFC East. Rookie Otto Silver. Jahan Dotson. There's a guys on TikTok that just mash softball like so softball. It's insane. Like all roided out. Oh my God. I'm cool with it as long as they don't say boom when they hit the ball. Especially if it's coed. Doing backflips. Yeah, I will get beat up making fun of those people. Make a Fitzpatrick. Tri-Color. Rashid Shahid. Rookie Silver. My camera. Who looks the same? Count to Ingram. Dak. Cam Acres. Bartolos in the game. Izzy. Lottley. I just see him. That's gone. I might be gone in the regular part. Oh my God. Warding track. Slow pitch softball. Warding track hit.  Who was that? My camera. Oh my camera. Tom Brady. Racisi. I thought he was done already. ANC South. The 99. Jersey Christian Kirk. He's got like double knee braces. That's former professional athlete right there. And that's how it goes. Just from that shot. He's going to have to go ice down now. Chris O'Lave. Chris O'Lave. Sensations. Rookie Silver. Do you know that? And there's a field level Drake London. Who's Jojo? You mean like Jojo from Casey and Jojo? Yeah. But they said she- Jojo, the circus boy. Chris O'Lave. Neon icons. Jay Brown. Who's this? I don't know. But he's actually kind of scooting a little bit for somebody that runs away. He runs. We're blessed. Is that what that said? Oh. Matt Jones. Purple. Absolutely. Scorched. You know, Smith. I feel like if you have major league baseball experience, you should have to hit it over. Like if you hit it over the little fence, it's a ground rule double unless it clears the big wall. That's not fair. Then let him hit it with a baseball. It's just an exhibition software game. XRC, Prism Draft Redemption. Here it is. Matt can't read it. Can have this pulled up. Should have had it pulled up already. Yep. That is card number 509, RB3. Zach Charbonnet. This is Charbonnet. I say Charbonnet. Like a nice bottle of Charbonnet. All right. Zach Charbonnet. His name was RB3. That is NFC West. He thought his name was RB3. RB. Johnson 3. NFC West. They are R-B-I-E. Oh, my God. Sponte Williams to Sean. Can he pick it? Nice. As soon as Rich left the room. Field level. Tie-dye. Tom Brady. Ready to go. NFC South. This is 19 of 25. Like that one for you. Jeffrey's crushing it in that NFC South spot. This is the 49. AFC East. Light blue auto. Cedric Wilson Jr. Color match-ish. The tree is RV. Josh Pascal. Rookie Silver. Colt Kmet. Tri-color. Tippin'O. Rookie Silver. Alvin Cook. Patrick Sertan. Cameron Jordan. Tri-color. All the kids love JoJo. I don't know who that is. I don't have TikTok though. Wasn't she like Disney Channel or something? DJ Moore. Tri-color. Drake London. Rookie Silver. YouTuber sounds right. Definitely does something more like a show. Oh, wait. A YouTuber. I don't know why I had TikTok. Stuck in my head.  Yeah, I don't have that TikTok. Herbert NFC West 75. Rookie Jersey Auto. Danny Gray. American Dancer Singer. Actress and YouTuber. Had some like kids type like pop type songs. Oh.  She hit a homerun? She got to be some sort of athletic. She's a dancer. And she's only 20. She's got youth on her side. Yeah. Land Jack Maroon. She's got youth. I got to work on them on the next day. Trevor Lawrence. Silver. That's me when it comes to athletic feeds now. So Steve. Derek Henry. This is NFC East 49. Rookie Jersey. Or yeah. Rookie Jersey Auto Purple. Kavon Thibodeau. NFC East. Chanel. This is AFC North 99. Jersey. Marchase. Justin Herbert. Silver. Gino Smith. Oh, we appreciate it. Scooter. Sauce. Mahomes. Neon Icons. Kway Walker. Rookie Silver. Tua. Kyron Williams. JC Horne. And Damian Pierce. Field level rookie. Come on. Let's see some more huge hits. We have two mags so far. Let's see if we can at least double that in this case. A con quo. Tri-color. Jefferson. Trevor Lawrence. Silver. Stingley. Panche Sanders. Rookie Silver. Here's JG guys. XRC. Prism Draft Redemption. This is card number 505. QB5. That is Hendon Hooker. Lyons goes NFC North. QB5. Yeah. QB5 for the NFC North. Candy Picket. Going on. Rookie and Desmond Ritter. Sweet level rookie. Silver. Desmond Ritter. Chacoin Bricker. Rookie Tri-color. And AFC North 299. Silver Auto. Terrell Edmonds. Dalton Cook. Tri-color. Pyreon Davis Price. Rookie Silver. Imagine doing this, like breaking, and trying to explain to people what it is you do for a living. It is not easy, is it? No chance my mom knows what I do and I that color a few times. Desmond Ritter and Neon Icons. Jonathan Owens. Rookie Silver. Next time I see like people that I like talk to about, I'm like what do you think I do? Can the walker sweet level rookie? Explain what it is I do at work. Pyre Illum. Rookie Silver. We've had people in the past that have been in the chat, like participating in the chat everything for like a month and then they're like all right so how exactly does this work? You know? They're just here to chill. Yeah, that's cool. We're here for the vibe. We're happy to have everybody. We have people that don't join and talk all the time. We have people that join all the time and don't talk. So I mean. And then there's Kyle. Dude, if you ask me, he joins way too much. Breeze Hall. Kyle, your time off is not just your break from us. It's our break from you, too. Kyle is setting up over there, I guess. Derek Carr. Sweet level red. That's to 49. Face fuchsia tongue out. Face fuchsia tongue out. That is the emoji, I guess. Face red heart shape. That's a good one. That's a ton of positive. Patrick Mahomes. Sensations and NFC West 75. Rookie Jersey auto white. Danny Gray. White Gray for the Niners. Jones XRC prism draft redemption. Nice. That is car number 504. QB4. Will Leviss Titans. That is AFC South. Jalen Tolbert. Rookie Silver. Tolbert. I always think it's major league. Not you, Tolbert. Crystal Lavey Rookie. Zeke Tri-Color. Kyler Silver. And Damian Pierce. Nick Chubb. Marvin Leal. Rookie Silver. Canny Pickett. Rookie Maroon. Rashad Bateman. Gino Smith. Joe Burrow. Sensation Silver. Eckler. And Brees Hall. Field level. Rookie Ford. And NFC West 99. Rookie Jersey. Tariq Wollin. Kim Taylor Britt. Rookie Tri-Color. Caffrey. Isaiah Likely. Rookie Silver. And Olavey. Rookie Light Blue. Chris Olavey. And this is a 99. Nice one. NFC South. And NFC North. To 99. Blue Auto. Deandre Swift. Nice color match auto. And box number 10. Steve you joined our party and we were like oh what's up Steve? How's it going? And then you left like 10 seconds later without saying anything. Yeah. We'll finally get to see for sure. That's just the way of the Packers. Get your hole.  Is she the one that hit the single earlier? No. Tindall. Who's it? Chase out of the zone too. How about that? Hit it off her back foot. Oh god pass the runner. Joe mixed the trouble. Brother Joe Joe. Blocker. Damian Pierce. Rookie Silver. Couldn't see her dirty. She sat down at third base when she got there. She moved well. They needed an athlete. Visionary. Gold to 10. Breeze Hall. That is AFC East. Nice one Rory C. That's nice. Ah that's a mag. Nice one. Christian Kirk. Pretty consistent case. Yeah it's been solid. There's Justin Fields. Field level white 35. Nice one for the NFC North and AFC East. Super Bowl auto Dante Hightower. AFC East. Tim Hightower won me first place in a fantasy league one year.  Not more than names I thought I was going to hear at work today. Snapshot snapshots Josh Allen. Kenneth Walker and Neon Icons. George Kittle. Silver. That's really couldn't hear us. We were definitely we're definitely as soon as you joined. See we're like oh Steve's here. Josh Allen and AFC East 75. Rookie Jersey Auto Blue. Breeze Hall. Here you go Rory. Good marks for the AFC East. Yep. A couple of Breezes. Breeze aplenty here. Hey there's a Breeze Hall Baseball or a football card. That's a sweet level blue. Rookie to 99. Vontae White. Rookie Silver. Logan Hall. Rookie Tri-Color. Julio. AFC East to 75. Jersey White. Amade Saus Gardener. Zonovan Knight. Rookie Silver. Man. Jets all over this box. LaVe. DJ Moore. And Malik Willis. Field level Rookie. Tri-Color. Jamar Chase. Vontae. High Tower Police Academy. Yeah Bob Smith. Yep. Those police academy movies. Through number four. Really good. I think I've only seen five ones. I own at least at least one through four. On a like a multi DVD set. This is Green Rookie to five. Drone Bland. NFC East. That is one of five. Kenny Pickett. Rookie Silver. Tyree Silver. Yeah. High Tower was awesome. Police Academy. Charles Cross. Rookie White. Breeze Hall. Sweet level. I thought the funniest guy in Police Academy was Proctor. It was awesome. It's Jordan Poyer. Zebra. Sweet level. AFC East. AFC East coming along here in the last couple boxes. Tom Brady. Sensation. Silver and Patrick Mahomes. Silver. Out of box and a half left. Let's see our biggest hit of the day. Here at the end. Mac Jones. Lung Green. 49. Kevon Timidow. Mac Jones. Redemption. This is AFC South. Rookie Otto. Silver. Thamion Pierce. AFC South. AFC East. To 10. Rookie Patch. Gold. Skyler Thompson. Another gold. Nice. Desmond Ritter. Rookie Silver. Rookie QV. Never a bad hole. Nope. Never know he can end up going to the Cowboys. Me and the starting QV. Fonte Williams. Yeah. If he starts two games and does just okay. They're all going to think he's the savior. Sauce. Blue. Jonathan Taylor. Nice Colts color match. Any gray Rookie Silver. They already got the guy that did that. They got Mike White as their backup now I think. The Dolphins. Oh, today. Yeah. So they already have that covered. Dresden Evner. Is that another green? Shoes. Marshawn Lattimore Green for the NFC South. Nice. Nice. Nice. AFCE to 75. Blue. Auto. Tyree Kill. Spots coming in quicker than right now. Yeah. Grab a few spots for tonight's break. Kyle goes live at five Eastern and then it's Sam in the morning. Yep. Sam will be breaking tomorrow morning. Kenneth Walker. Silver Rookie Snapshots. Joshua Izudu. Izudu. Rookie Silver. And then Forest will be live tomorrow night on the main channel with group breaks. I'll be live over on the Layton 2 channel with Personals. Tom Brady. Sweet Level. George Carloftus. Rookie Silver. Yeah, we're going to need some work. 260 foot foul ball. Yeah, we're going to need some work. Got him over on the swing. Warning track power. That felt so bad the year the Cardinals not to fill his out of playoffs and how is it for his ACL or whatever on the last out. Fonte White and Deshaun Watson. Field level white. 35. This is NFC West. Super Bowl Auto Silver. John Taylor. One of the best wide receiver twos ever. My humblest of opinions. Thanks for wearing a kimono. Retail on Burks. Rookie Snapshots. Still homerun kimono now? Yeah. Reese Hall. I like the samurai hat that the Angles have for the homeruns. That thing is sweet. Homes? Should we get a one of one chain? Every time we pull a one of one you get to put the chain on. Yeah. I thought about getting like going to Party City and getting like a crown. Pretty good one too. I've said something like that I think it'd be kind of cool. NFC North. 75. Rookie Jumbo Jersey. Villas Jones Jr. Like biggest head of the week he's just wearing at will. Yeah. We'll workshop it. We'll workshop it. I'll pick something up in Chicago. T. Higgins. Rookie Silver. The one of one hot dog hat. Something like that. The one of one propeller hat. Chante Williams. Joe Burrow. Silver. What about a celebratory pinwheel? I'm down. We'll get like we'll get party poppers. It's a Jonathan Taylor tri-color. And he got a vacuum over the confetti. Justin Herbert Silver. Josh Allen. Malik Willis. Sensations. Rookie Redemption. That is NFC East. Rookie Signature. Memorabilia Prism. Sam Howell. You go NFC East. Car. All right. We have four packs to go. Let's finish with a big hit or two. That's weird that that's the redemption because he's also live in this. Yeah. Straylon Burks. Ed Ingram. Rookie Blue. Strange. Kenyan Green. Rookie Silver. My home silver snapshots. Herring of Lauren. Tri-color. Tom Brady. Quang-quang. Rookie Silver. Green. Rookie Wondale Robinson. Regigillian. Dylan. And Kyle Phillips. All right. We had a Zebra Jordan Poyer for the AFC East. Rookie Gold. Wondale Robinson. NFC East. Rookie Green. To five. Duran Bland. NFC East. That's a Green. Marchand Latimore. For the NFC South. XRC Prism Draft Redemption. RB3. The NFC West. QB5. For the NFC North. We had AFC North. Jersey. Jamar Chase. These are all relics in this stack. NFC West. Rookie Tariq Wollin. NFC West. Rookie Boyer Maffei. AFC South. Christian Kirk. AFC West. Keenan Allen. NFC West. Devo Samuel. AFC East. Austin Eckler. NFC East. Kavon Tibodeau. NFC North. Villas-Jones Jr. NFC East. Montsauce Gardner. This is NFC East. Terry McLauren. NFC East. Rookie Patch Gold. Skyler Thompson to 10. Autos. And AFC South. Damian Pierce. NFC East. Sam Howell. Patriots. Dante Hightower. That's AFC East. NFC South. Shaquille Barrett. AFC North. Terrell Edmonds. NFC East. Rookie Jahan Dotson. NFC South. Rookie Matt Corral. NFC East. Rookie Jahan Dotson. NFC North. NFC North. Blue. Deandre Swift. AFC East. Tyree Kill. AFC East. Cedric Wilson. NFC South. Crystal Lavey Rookie. NFC West. Cam Chancellor. Twice. AFC South. Drake London. NFC. I'm sorry. AFC East. Breeze Hall. NFC East. Kavon Tibodeau. NFC West. Danny Gray. Twice. NFC North. TyDye. Patch Auto to 25. Harrison Smith. We had NFC South. Gold Rookie Patch Auto. Tyler Algear. AFC North. Rookie Patch Auto. I'm not Rookie. Patch Auto Gold. Anquan Bolden. She was. Yeah, they were. They were awesome William. AFC East. Visionary. Gold. Breeze Hall. Rookie Insert. Ten. AFC South. QB4. XRC Prism Redemption. AFC North. Justin Tucker. That is green die cut to five. And NFC South. Tom Brady. Field level. TyDye to 25. That'll do it for the break. Thank you everybody.


Thank you, everyone, for joining us here. I'm Neeta. I work on outreach and communications at Haskeek. Before we get started, and I hand it over to Sonali, who is our moderator today. I'm just going to briefly give some context for this final discussion and some introduction of the conference in Haskeek. So, on 28 April, the Indian Computer Emergency Response Team issued new directions for information security practice and procedure and the prevention, reporting, and response to cyber incidents. On 4th May, in the root confidelogram group, we discussed the key concerns in implementing these directives from the perspective of business operations and also privacy. This is a follow up on that conversation to build on how the industry can engage with this intervention and others in the future to provide meaningful feedback. Root conf started as an annual conference for practitioners from DevOps and now SRE to share approaches to solve infrastructure-related challenges. It has now diverged into a continuous community engagement program with focus on data security, cloud ops, data ops, and more. Privacy mode is a growing community on data privacy with a focus on engagement with policy and improving the overall privacy ecosystem from consumer and maker standpoints. You can find the work we've done so far under haskeek.com slash privacy mode. Please take a look at our topic map, which is published at the end of the page. Root conf and privacy mode are hosted by haskeek.com, a platform for collaborations across practices surrounding technology, including design, law, policy, systems, and data. We collaborate through user-generated content with the aim to enable discovery and elevation of ideas and individuals. Haskeek.com and Haskeek Media Division provide the underlying infrastructure, tools, and services to facilitate these collaborations. Thanks to our partner, FOSS United Foundation for supporting us through this event. FOSS United Foundation has monthly meetups in Bangalore. You can keep up with these meetings and participate on their telegram channel. The links to all the pages and telegram groups I have mentioned will be shared on the chat on Zoom and YouTube. And, okay, that's it. I am now going to hand it over to Sunali, who is an associate at 9.9 Insights, strategic advisor of Albright Stonebridge Group, and will be moderating this discussion. Before we get started, please note, you can leave your questions in the chat box on Zoom or on YouTube. We do have a dedicated time slot for Q&A, during which participants on Zoom can use the raise hand feature to get our attention, and then you can ask your questions. Over to you, Sunali. Hi, thanks, Nita. Good evening, everyone. So, like Nita already mentioned, over the course of next hour or so, we'll be discussing the certain guidelines. These guidelines were released on April 28, and they're aimed at enhancing the cyber incident reporting and security practices. This session will primarily focus on understanding two aspects. The impact that these directives have on privacy and business operations today, and the potential methods for stakeholder engagement to alley concerns. The latter would, of course, not only focus on certain guidelines per se, but we'll also sort of look at the other emerging regulations and how we can approach stakeholder engagement for tech regulations at large. Our panelists for the session include Mr. Srinivas Podali, an independent researcher, Ms. Ruchha Mukherjee, the director of Public Policy and Corporate Affairs at PAYU India, and Mr. Pratik Vagri, the policy director at the Internet India Foundation. Welcome all. So before we delve specifically into the certain directives, it is important to note that these guidelines, of course, do not emerge in a vacuum, right? So they've been released in the backdrop of a regulatory revamp of sorts of the tech ecosystem with the draft data protection bill, a non-personal data framework, a data governance policy, a potential amendment to the IP Act, all being delivered simultaneously. The IT rules for 2021 and, of course, the various draft policies released in the past year or two, cumulatively indicate a trend towards increasing compliance burdens for business entities. These, of course, are likely to raise costs and operational challenges. The certain 2022 guidelines in that sense adds to the slew of such onerous regulations, right? So this is, of course, this is not the first time that certain has issued cybersecurity directives. We know that the 2013 IT rules that mandated data storage and reporting requirements for cybersecurity, those guidelines can be seen as somewhat being the precursor of the 2022 directions. Certain also issues advisories from time to time and its 2021 advisory on preventing data breaches and data leaks also discuss similar issues. However, the concern with this specific 2022 directive is that the proposed compliance is not only more onerous compared to not only the previous guidelines, but also the global best practices. It introduces requirements like reporting cyber incidents within six hours of becoming aware. Sorry, I think I got dropped there for a minute. So yeah, like I was saying, the certain 2022 guidelines introduce compliance requirements. Some of them include things like having to report cyber incidents within six hours of becoming aware. What is reportable incident has again been expanded broadly to include things like unauthorized access to social media accounts. There are time synchronization requirements. Entities are also mandated to designate a point of contact to sort of interface with the certain. We have to maintain blogs of ICT systems for a rolling period of 180 days. And there are many other such requirements, right? These are only some of them. And while we will be discussing the specific implications of these requirements as we progress with our session this evening, it is worth noting that the industry has already been responding to these directions and most of them have conceived them as being cumbersome and unclear. And most of them have lots of lack concerns around issues like heightened compliance costs, questionable implementability scope, especially given how these directions sit with global data privacy laws like GDPR and also the potential privacy implications of this direction in itself. While we understand that some of these ambiguities have been clarified by the FAQs released earlier this week during the course of the next 50, 55 minutes or so, the analysts will discuss the challenges and questions that businesses face if these directions were to be implemented as is. The Minister of State Rajiv Chandrasekhar has of course publicly stated that compliance is mandatory and entities unable to comply should not operate in India. He's also claimed that these directives are less stringent than many other jurisdictions and that the requirement are imperative for ensuring cybersecurity. In this slide I think we will also discuss of course mechanisms that stakeholders can opt to engage with stakeholders government for this directive but also for the slew of other tech regulations coming up. We will be exploring options like scope for building coalitions, having consultations and legally challenging directors if at all possible since that's also something entities stakeholders have talked about. So I would now hand it over to Mr. Qadali and I would also request Mr. Qadali to sort of, if you could just highlight the technical challenges that particularly that entities might face in implementing these guidelines, especially with requirements, you know, such as time synchronization, reporting timeframes, love maintenance. Over to you. Hi, so I think the challenge to businesses, primarily implementing some of these guidelines is resources. What cert is asking them to do is constantly log every action of everyone accessing any of their infrastructure, whether it is a legal access and illegal access you don't know right like if you are maintaining a service which is open for everyone you don't know who is actually accessing your services. I'm not saying that there are certain operations that are regulated, there are some operations which are unregulated you really don't know. It depends on the business and the kind of sector the business is in where these businesses tend to store some data for their own internal requirements or tend not to store any data when they're offering it as a service. So, both Direction 4 and Direction 5 of the cert directions. Direction 4 says everything needs to be logged for 180 days and that includes SSH access logs. It includes if you're a cloud service provider. I'm assuming here because these directions are never clear even the cert clarifications of the directions are not clear enough. But if you are a cloud service provider and everything that your client does you're pretty much required to log right now that could be HTTP access logs, SSH logs and there are also error logs and whatnot so pretty much everything needs to be logged for 180 days. Now, the volume of these logs can get pretty high depending upon how big your business is and storing customer logs who are temporary customers who may be using your cloud services for just a day or just few hours for a size of say AWS or even Microsoft Azure could be so high that storing data for 180 days could incur significant costs on electricity for no reason. Right. And it's important to understand here why they are saying 180 days 180 days is again a standard legal requirement when you look at the telecom sector for storing call data records or if you even look at the other judgment and the storage of metadata with other transactions it's limited to 180. It's an assumed standard in India so that's the reason they're saying 180 days a bare minimum of six months now for the industry. It's not the issue of technical requirements it's the issue of the cost of storage and operations right that will be the primary problem here. Now the manoeuvres will go up for compliance and I believe that's the reason they are opposing it primarily but if you look at Regulation 5 which is for VPN service providers that kills anonymity for good. Now while cert clarifying these directions has said that Direction 5 is only for VPN service providers and not for company corporate VPNs right but Direction 4 still applies where cloud service providers who may be offering to individuals to allow to set up their own VPNs like anybody can set up an open VPN if you have a server. You're still required to log all of the transactions that are happening and you're required to give it to cert except the time period is less compared to Direction 5. Now apart from this the most the first direction of time synchronization. I think if you look at global standards right like NIST the National Institute of Standards and Testing in US actually offers a host of time servers like anyone can point their machines time servers to NIST NTP servers. Now that's optional. The issue here is the mandatory nature of it saying that look we need to ensure that any cybercrime instant needs to be responded by cert so we want everyone to sync to Indian time zones. Now the difficulty in doing this is that if you are a multinational firm where you're trying to synchronize your times within your corporate networks. It could be challenging to sync it only with the Indian network servers right the NTP servers that cert and India is providing. It would be near impossible unless you isolate it and have your own internal network for India only. If corporates and like business structures have already done this great. But if you have to move away to something like this it could be again resource intensive and it is something that companies may not be looking forward to do so. Like if say even some certain cloud service providers like Google cloud or Azure or even AWS have to do this particularly for India. I think they have to change and change their entire business operation mechanisms for India specific only. Now for smaller firms this could be a challenge where doing all of this is so hard that they'll just quit and comment of India saying why don't you do that like we don't really care if you're so small and for the big businesses they're going to force them to comply somehow. And we have to wait and watch where this is going to go. Thank you. Thank you, Mr. Godali. I would not. We'll of course discuss this in more detail and bring in some questions after we're through with introductory remarks but I would now like to bring in Richard, which I feel could just highlight a little about how pay you and its peers are thinking about sort of complying with these guidelines. And you know given a 60 day timeline the minister is saying that it's adequate time, you only have to comply with the reporting requirements in 60 days and there's no real resource that you have to build or infrastructure that you have to institute to sort of get this going. So as pay you what are some of the key challenges that you are envisioning? How do they compare with prior regulations and do you think you'd be able to comply with this? Sure. Thanks Sonali for setting the context and thanks Haskig for having me in this discussion. Very pertinent, very important that we are having this discussion today. First of all, I would want to start with certain cert ends and they were to both to the cyber security, you know, ecosystem in India. I mean I've been interacting with certain for last so many years and they've been really instrumental along with the National Cyber Security Coordinator's Office etc. So these guidelines have come I mean and they also have a history of why they have brought in these kind of guidelines because there were certain segments which were not directly accountable to certain because they said the customers are the ones who are directly responsible for certain. But nevertheless, let me just start by what these directions are and how it's going to impact the fintech ecosystem since I represent the fintech. So let me just broadly talk about the fintech and ecosystem. So the guidelines as they came out on April 28 have a stringent applicability of within two months so that leaves us with about 40 days time to implement. And just now only we have started to have discussions internally within pay you are within any organizations because. So I would say, with all the guide with all the circular, even though certain is not a regulator or certain is not a regulatory body. It is still has its role as a quasi regulatory body just like NPCI is and all the guidelines that they have laid out if they are implemented in the current form they will have wide ranging unanticipated impact on the internet ecosystem in India. While I do understand the well intentions of the certain but I really feel I see that it can dramatically increase the administrative burden both for the industry, as well as for certain. Like, as I will just talk about in my subsequent things that how it's going to, you know, increase the burden for certain as well. The guidelines it covers just about anybody who is connected to internet whether it is a service provider corporates companies having data centers cloud service provider government organizations, and even the foreign companies with serve Indian customers so my first question is whether my my organization is covered under this. So I'm assuming it is because we are the service provider in whichever form and so. So for us for the FinTech ecosystem there are Sonali broadly for three to four points I would want to highlight I'll just call them out and also talk about the justification sorry the challenge that it might have for the ecosystem. So first and foremost is the report incidents within the six hours. There's any entity has to report report the cyber security incident of within six hours of noticing the incident. This can be done via email fax phone, etc, as per an extra one that is what the guideline says. Now here I want to emphasize that while the initial view of the incident or the notification can be reported within six hours but detailed RCA will of course require quite tough time in hand. There have also been talks in the industry that why the six hours is being stipulated because normal the global standards as this is about 48 to 72 hours and I think we were till this point of time we were going by that time time frame of within three days within 72 hours of coming into notice. So six hours looks like stringent one and also sometimes what happens is if it is a very sophisticated ransomware you just spot it but you cannot report it immediately because you do not know how it will manifest. So six, six hours I would say is a very short window to actually understand that what sort of he's to ransomware or malware has impacted you. So it takes. Sometimes I would say most of the time it will take more than stipulated six hours. That is number one. Number two is the circular guidelines that practically covers all the incidents that could possibly happen which needs to be reported. So it is as simple as a spam notification which any individual gets like about so many of them, at least, I would say 50, 60 also sometimes if you look at our email. So that I don't see any point reporting those because that will just, you know, create the logs and logs of it. And of what I was discussing within the pay you and within the industry is that we need to really define the severity methodology where in only the most severe of the most severe of the transactions or whatsoever they are reported within the timelines defined. Third is about the crypto exchanges and wallets crypto exchanges and wallet since we are also operator wallet so the KYC details have to be kept for five years. It's kind of most of the industry is doing at the moment, but still there are some. This is not that much of a concern because you know some of the deadlines which are mentioned here, or the timelines that are mentioned here that is still covered by the sectoral regulator. I don't remember what is it for wallet but that is still not that much of a stringent one. Also, I think we want to understand that when certain says that we have to report all kind of transactions and they have laid out the list of these other things that we have to report it. What is the certain going to do with those transactions or with those kind of reportings, what will be the incident log look like and what would be the audit mechanism and what happens after that so we want to as an industry as a fintech ecosystem player we want to really understand that. Next is, I would not dwell much on that is on the cloud service provider which the previous speaker Srinivas had. You know he covered that I was earlier working with the cloud service provider and I really understand where these notifications is coming from that all the data all their blogs they have to be reported because it was essentially the customers thing that that the certain was asking for. So, I will skip that part on the next one is a maintaining logs for 180 days in India, in all the fintechs they have to mandatorily enable logs of their ICT system now ICT system is what what is that exactly that has not been elaborated upon. And they have to maintain them securely for a rolling period of 180 days. So this again is kind of covered under the under the RBI guidelines. So it's it's it's doable it's challenging but it's doable as such. The next thing is a certain can order actions and demand information in the real time basis. So just don't understand the, you know, what is the logic of that. Really, we would need that what is a certain going to what kind of information they are going to demand if it's going to be real time. It's it's going to be a challenge. My last point is on the point of contact that's a very valid point and I think in all my interactions with RBI supervision department and even with certain and even with NCSC, they have always been saying that point of contact is something each organization should have should should pass it on to the regulators that essentially you know helps in if there is any kind of a he's to run thing goes wrong. So that can be contacted and things can be done. Things can be audited very well and incident response management can be taken care of well. So that is one thing which is which is a good practice, I would say. Should I highlight some of the concern areas now or shall we move to the next speaker Sonali. We can discuss that in more detail when we come up with the questions. I would now move on to Prateek Prateek. You know, we've been hearing about these two divergence schools of thought almost about the legality of the directions. Now, could you shed some light on that and of course also elaborate on what the common perception of industry has been so far vis a vis these guidelines. So let me first point out that I am not a lawyer, right, so you should not take to take it from from from that from that perspective. I do want to highlight some of the broader concerns that that you know that we as IFF had with these with the directions when they came up right the first was the whole the fact that these came around without any sort of public consultation right I think and this is this is a general trend it's not it's not restricted to these we also had the minister of state statement saying that this is not required because it doesn't affect the arm of me and I think we differ with that with that because it may not be directed. Okay, my video is frozen. Can you see me. Okay. So yeah, so you know, we can have a line in the FAQ saying that this is not meant for individual individuals but it does affect individual users and that's where our a large concern for us comes from. The other one was about ambiguity in with no with its scope and in the phrasing of the direction and I think both both cinema science which I have pointed out some of the things that were ambiguous that that seemed like they were hard to interpret. Yes, there is an FAQ that has been released I think officially finally. But even even with that, there are there are still, you know, a lot of question marks in terms of the NTP synchronization they've said okay you don't have to synchronize with IST, but you don't but you have to still ensure that there is no deviation. How does that work. These are these are these are complex process right these are things that would have ideally come out in an open consultation kind of process. So the area is around, you know, penal provisions right which is, and if tied back to ambiguity right so when you have a set of directions that have a lot of, you know, ambiguity and people are generally unsure of what applies to them what doesn't apply to them how to, you know how to respond, then when you add penal provisions in there which includes which can include a prison term as well. So in this case, based on the section of the idea that they've that they refer to. That's also a huge, huge area of concern. And of course, you know, the final point is again, and this is again not the secret research direction that's happening with with with most regulation is coming out right now is that they're all happening in the absence of a data protection bill. And so from an individual user perspective from a privacy perspective. That's certainly an area of concern as well. Thanks. Thanks for the just to follow on for what you mentioned right now you know, the government had said, we did have closed door consultations. And we didn't make it available for public consultations. The reason being that it's not something that in impact citizens per se. One from what we understand, there were only like three to four companies who were invited to this close the conversation. However, in your experience, not only the certain guidelines but you know other regulations also what wouldn't ideal process be like we've seen in BBB, they have been iterations of the draft itself but they've also been like series of stakeholder right. We saw there were a bunch of actual depositions before the Joint Committee, there were ministry was made it was officially open for comments. Now we know that the ministry has since about December January has been receiving informal submissions. So what would I do I do the situation. How should it be like. So, you know, so there's no single good answer for that right but having said that, I think it's understandable for someone to start with, you know, with the smaller group for the initial consultation to just to frame and have something in place. But then, you know, with that as a working example that that's when you open it out for for public consultation to get feedback. And, you know, it's easy to interpret public consultation not only as you know not only a member of the public but even companies that haven't had the opportunity to provide feedback into the process would have come would have done so via public consultation process right so it's again, it's not a man right it's also it's also the company that would have that that would have come in. Right, so ideally you know you do want to open it up for public consultation that is a pre legislative consulting policy that's in place. Yes, you can say that this is not really, you know, legislation from that perspective, but it that has certain guidelines that are your principles that you can adhere to in terms of providing people enough time to respond right then being transparent with the with the responses that you get right posting that again that stuff that the practice that we've seen is not is not really being being followed right even. They also cite that sometimes this the the responses themselves are confidential and things like that right to a to a public consultation process you need to be transparent about about things like that right and you know it then working through that to that incrementally of what's inside is it can also turn out sometimes the way the some of the consultation for the data protection bill has there is gone protected and it's gone across multiple years and we're still not sure when that bill, you know, will actually be passed. But, you know, it's about finding that that middle ground in between them but certainly coming out without certainly coming out without any sort of public consultation is definitely not the right way to do it. That that makes a lot of sense actually following on from that which I you know as a member of the industry who was not invited to the consultation. Um, have, hasn't like have industries stakeholders actually been in the process of developing the submission have a coalition's being made. We know that some industry associations are planning to submit comments on the on the guidelines but given how short the timelines are and given out. It's supposed to come into force in about a week's time. What, what is the scope to engage also after the comments that Minister Chandrasekhar is meeting. So, definitely in this industry consultation and industry submission is a must. And what I'm seeing is most of the chambers and the associations, they are getting ready to make the submission and we are also in the process of sending our submission via the associations. And I think as a, as a part of the tech ecosystem, all the possible association whether it is IMA I S H M NASCOM India Tech DSCI we are all going to give our submissions we are all going to raise our concerns and challenges with this kind of guidelines. So that is the first step and and then there are of course there are certain organizations which are deeply impacted by this. They can also think of having a direct engagement with a certain as such. That makes sense. Yeah. Thanks. So, she never, you know, there have been one of the most. I think a clause which is attracted the most media attention is the success reporting requirement right now. The ministry has said that, you know, look at jurisdictions like US, Singapore, which have these three days, 72 hour time frames, but the minister has come back and said, you know, why don't you look at Indonesia, which is a one hour reporting requirement of France, which is a foreign reporting requirement. So I think the question is now not about who does what I think it's about what is technologically viable and to what is absolutely essential for mitigating any potential risks. From a physical perspective, like, how are you thinking about it do you think it's actually possible to implement that six hour timeline. See, I think it's definitely feasible if you're a large organization which has the three shift stuff, which is doing your eight hour eight hour shift 24 hours.  We have some hacker in the US attacking you at 1am in the night. I don't think he can report to you by 7am in the morning. Okay. Well, so it's it's a question of operations and how big you are. Now, I think the minister statement is actually directed against large players. And large players are usually the ones who have not been compliant and when I say large players also multinational platforms who have kind of ignored the Indian regulatory setup for a really long time. Now, whether it's six hours 24 hours or 72 hours, the matter of fact is what will certain do with it. Okay, so for a long, for a longer time, the cybersecurity community has been actually reporting incident to search, hoping it will actually respond to an emergency. Okay, it never does. And like, as someone who has sent some of these instant reports, I know the reply time period can range from few hours to few months. Unless you send in a journalist to search saying, look, I've sent this important emergency incident vulnerability report to search, but they haven't reacted to it. One day a journalist goes for a quote and they realize we're going to fix it. I mean, so the way cert operates, they're not equipped for it. The entire cybersecurity industry is kind of self regulated cert kind of empanels a host of cybersecurity organizations who then go provide services to a lot of these companies. Cert as an organization is not equipped to handle these emergencies. I mean, they're trying to do that now there's a lot of pressure on them to address a lot of cyber fraud instance specially fintech related fraud if you're, if you have seen the kind of APS fraud that's happening people losing money, social engineering, there is a host of host of cybersecurity instance that are happening. Also, we have become an increasingly digital society with COVID everyone went online. There's a huge pressure on government of India to do something about it. But the way they are trying to respond to it is something that may not yield in anything good. What you might eventually end up with is a lot of noise with every minor incident being reported to them and they don't know what to do with it. No, that makes sense. And also, you know, when you're thinking about this six are reporting requirement on something that's also worth thinking about is, what is it that we have to report within those six hours, right? Because if, if sure it's a bigger attack that we're talking about, then it might make sense. However, we know that the list of reporting reportable incidents is almost doubled from 10 to 20 now. And, you know, Richard previously talked about how something like a spam email, like how do you report that and how frequently you report that because of the high frequency of such incidents. And then globally, another thing that's been talked about is unauthorized access to social media accounts. You know, sometimes entities might not have the visibility of such incidents. How do you tackle with those cases? So does it then become only a small company issue or can, like, you know, say a bigger entity, bigger social media for the Facebooks and Twitter of the world. Can they also not implement these in the letter of spirit, letter and spirit of the directives? See, I believe what they're trying to do is actually prepare for a cyber warfare kind of scenario. But right now, if there is actually a cyber war on India, cert would never know it. It would be companies and all these people who get affected by it, like our enemies who actually get affected by it, they would know it, right? Now, there are no systems in place for cert to actually understand what's happening over the cyberspace. So it has never in the last decade of its existence since 2008 when cert was formed out of the idea of amendments. We really don't know what they have done, right?  So many incidents have occurred, but we don't know what they're doing about it. And I think there was a news report today that they're going to make a cert, like not to reply to any RTIs, exempt from RTIs. Okay, so what you're doing now is you're trying to prepare a national security apparatus, which will potentially actually respond to cyber warfare scenarios. But to do that, they're saying every other entity needs to prepare for emergencies and allow only ask you these logs when there is an actual emergency. So to know there is an actual emergency, you will have to consistently reply, respond to every single incident. So if there are a parallel set of instance, there are probably 100 instance of particular kind, they know there is something big going on. So cert is not making this part clear. I mean, for anyone who has followed cert for a longer time and the government of India's policies, it is very clear they're trying to ramp up infrastructure. But they can work with the Indian cybersecurity community and even the Indian corporates to do it the right way. What they're doing is not actually going to help them. So which is why it's important to ask some of these questions and bring some accountability on them. Because even if there is a cyber war, they don't want to be accountable and they don't want to tell you what went with it. Understood. You know, and having a national security apparatus sure sounds good and maybe it's need of the hour as well. Pratik, I'd like you to come in here and you know, because the timing of these guidelines is very interesting to me. So I'm thinking there is a data protection bill that's been in the works for very long. There are severe privacy related risks with this direction as well that emerged from these directives. For example, DPP talks about data minimization, but this is anything but that right you're talking about 180 days worth of logs, etc, etc, etc. Also, it contributes with some of the provisions from the data protection bill. It talks about the DPP, for example, it talks about reporting a breach within 72 hours to the data protection authority. This has a very different provision for the same thing. So do you think they should perhaps have waited for the data protection bill to kick in and then sort of brought in this guidelines. You're also talking about the IDAC amendment that might also have been another avenue through which some of these would have been brought in. So is timing something that is making sense to you or how do you see all of these parallel? You know, that's an interesting question and a tricky one, right? Because in the sense that, look, the issue of, you know, let's say the reporting to DPA versus to the certain, they're essentially two different authorities. So theoretically, yes, you can have different timelines of reporting to each of them. That in itself is probably okay. Now, there have been, you know, I think we've spoken enough about the duration of the timeline and potential for gradation of different types of attacks, etc. That you should report that. But I think what, again, what's important here was, you know, as you might just point out, right? In terms of process, this should have happened the right way, right? It could have happened in, yes, you know, you could have done it before you overhauled the IDAC, you could have done it after you overhauled the IDAC. Obviously, the government saw some pressing need to do this now.  But it, again, goes back to the method, right, of doing this, that instead of taking, you know, the industry into account, instead of going to a broader consultation process, it's been pushed out like a dictate, right? And I think that's where the fundamental issues. That makes sense. Now we have questions coming in from the YouTube live stream. Someone's asking, are companies allowed to disclose to their users that their data was sent to certain and the reasoning and for why? Which are, what is your understanding on this? Do you think someone like a pay you will have to disclose to his customers that the data was sent to certain? So it really depends, ideally, not just pay you in my past experiences in various organizations. Suppose if any government, not government, the law enforcement entity seeks the customer data. Until unless it's a terrorist-related thing, we normally inform the customer that your data is being shared. So I think that is the stand that the organizations are going to take. But I think we don't have any clarity in these guidelines. It also depends on the company's policies. But this is what I'm assuming, that the organizations will have to report to the customers that your data is being shared. Yeah. Also, there's another question on- Sorry, Shahebas has something to say. I just want to add, like, I think there were a couple of statements which were made by some insiders. They were saying that, look, all this logging that we're asking you to do, even though the directions actually say we want real-time data. But they're like, we only need it when there is an incident. So when there is an incident, we're going to get a court order or issue directions under section 69 of the IT Act. Section 69 of the IT Act allows a set of government agencies to decrypt any encrypted information and intercept information, essentially. It's a very national security provision. Now, if you're being issued a section 99 order under section 69 of the IT Act, I don't believe you can disclose them to your consumers. A lawyer could give you a better opinion, but we haven't seen any section 69 orders. I believe the first kind of censorship orders that we are seeing is through IFFs, one of the cases. And these are encryption, decryption-related orders, which they don't want to ever disclose. So it's very unlikely to see them. That's quite interesting. So in that case, users will be oblivious to the fact that their data has been shared by with certain amount. Also, someone's asking if there is going to be a transfer in process and reporting on how this data is requested, used or stored by certain. And you know, with Srinivas, what you mentioned earlier about certain being excluded from the ambit of RTI, that might again be a question to look at, but any idea about how transparent this process would be? I mean, for the past 10 years, none of the certain operations were transparent. I mean, if you look at some of the major breaches that happened during the COVID period, BigBasket, MobicWake, AirIndia, Dominos, cert never reacted to any of them. So the question is, forget transparency, is there any accountable answer? None. And it kind of extends to multiple other organizations, but we haven't seen cert being accountable or doing anything significant unless you go to court. Right. Right. That's interesting. Richa, one question for you. You know, Srinivas was earlier talking about how the big versus the small company distinction and being able to comply with these guidelines. You know, as Peu, how do you see it? And you were talking earlier about some of the concerns that Peu specifically has with these guidelines. So would love to hear more on that. Yeah, sure. So I think some of the, there are two to three concerns that I would see any fintech organization would have. First was of course, as we have been talking about the six hours thing that six hours is too short a window. You are not able to analyze what is a specific SLA, how what details you can conclude and you definitely need to have, you know, carry out root cause analysis. So six hour window is definitely a concern area. Second point is, normally what we do in the fintech sector is with respect. So each of you each of the organization it defines its severity mechanism severity methodology in terms of what they will be sharing with RBI. And this is why a PCI also. So can, is it fine that the companies which I have been defining severity to the cyber incidents, this will be applicable and acceptable to, to say certain, just like we share it with RBI, or what sort of incidents we are going to share. I mean, it cannot be all, I mean, it cannot be all right. Number three is, what is the expected to be reviewed and approved by the auditors expecting benchmark, what will be, what will it be, now that the audit will happen, as we say it is all certain and paneled auditor. Public consultation I think Srinivas had already spoken about. There was one more thing I wanted to talk about was, yeah. In terms of there is no clarity on the processes and the grievance redress mechanism in place, if after an incident has been reported to certain so what will happen after that. That's those are the some of the questions and the concerns that we have from the fintech perspective. Understood. And what about the ease of compliance, you know, within a week's time from now. No, it is two months right so April, May, June we have 40 days right. Yeah, sorry, from by June 28. Yeah. Yes, so that is again a challenge I think that will have some amount of cost dedicated resources have to be employed for that particular thing so of course it has the administrative burden compliance burden. All those things are of course into the picture now. Understood. Um, you know, since the FAQs were released earlier this week, there has been talk about the good and the bad of it. So if you could just shed some light on if the FAQs have been helpful at all. And if so, are they exhausted. And maybe each of each of you could talk a little bit about what clarity the FAQs bring if any at all. Yeah, sure. So, look, it's hard to characterize, you know, a 40 odd question document as good and good or bad. But you know, I will say that yes on certain points they have added some clarity, but as I was saying, a lot of questions still remain still remain open. Right. And for example with the, the bit about the NTP synchronization right what does it mean to say yes you don't have to sync it to to IST but you also have to ensure no deviation now again outside many of expertise and timing is a very complex process. But how does that work, you know, etc. So there are, there are still a lot of questions that remain unanswered. I'm struggling to remember to recall one at this point one that that's still left, you know, left me asking more questions but you know on the balance of it some added some clarity, but we have you know we're far away from having clear clarity and then there's also the point that look the FAQ the supporting document it's not it's not a legal document by itself it has no standing as such right so yes it can it can add some clarity but ultimately it's the directions themselves and the wording of the directions that that really matters right and I think and and that's where most of the challenges. She never stops. Okay. Yeah, I'm one of those people who was actually asking sir to do something. Because when, when they will, these large scale data breaches we actually wrote to search saying why are you not investigating this. Right. Now, suddenly sir does like oh I've woken up I'm going to investigate everything. I'm looking at two ends of the spectrum right and neither of it. Now, how can people oppose this what do we do with this. I think a lot of companies are going to oppose this, which has already made it clear there are associations which are trying to send some responses. But whatever you do as a citizen at this stage, unless you're going to courts, or unless you're actually going to show up in front of mighty office. I don't think they care, because the last time we sent them letters asking to take some action at least tell us if there was a breach do some audit. They didn't respond at all. And then when we send them a legal notice, the official in charge, so it has a citizen coordinator like they have a citizen charter. And the citizen charter has a citizen coordinator who actually supposed to reply to you for any queries that you have in 30 days. He sent a reply saying that you don't have to tell us what we have to do. When this was put in front of a judge in Delhi High Court, the judge was furious. What sort of replies this. Okay, so they are very, I don't know what sort of experience Richard has as representative of a company, but if you're an arm of me, so it really doesn't care about you. And if you're a cybersecurity researcher, I believe everyone's pointing to the 2014 guidelines, but there were 20 21 guidelines last year, which talks about how cybersecurity researchers can report to cert. There is a clause where it says that, you know what, even if you report as some of the security instance, it doesn't mean that we are not going to arrest you. Okay, so it's like, we don't care what you do. So none of the processes in any of the setup have been accountable. Now, if the question is who should make cert accountable, there is something called the Parliamentary Committee of IT. Unfortunately, the parliament's not working. So it's back to the people to pressure them saying this is going to affect us, go to court, shout, the max you can do is this, but businesses do have a leverage saying this is going to impact us. And I think at the end of the day, it will be what businesses say. Well, we certainly do hope so. Richard thoughts on the FAQs. Yes, so I will just tell you to Srinivas's point. You know, I was interacting most with certain when I was with my first 12 company called Swift, and they had to open up a joint venture and I was part of it now at least. So that was the time 2016 to 2017 2015 to 2017 when most of the cyber he's were happening, not only in India but outside India also starting with the Bangladesh Bank Central Bank. And then in India Union Bank of India and several other bands so that was the time and I was most interacting with certain because of the cyber he's so it was also like we were informing of the whatever incident that was happening when Swift was name was there and we were reporting to them, but it was also only of our own like Swift came out with a cyber security program so it was up to an individual organization, how they protect its consumers how they protect its customers, because at that time so it came out with customer security program the incident response mechanism the five pillars etc etc. That is one part. Second part if whether the FAQs have helped the ecosystem or not. I don't know, I really don't have an answer to this because after I saw the guidelines and then I read through the FAQs. That does not give me much of a clarity I would say, you know, so to speak, I have read it like twice. There are a lot of questions, there are still a lot of clarifications and uncertainties there. I think the best thing would be to have multiple public consultation because one consult one or two or consultations would not suffice so I think and for any healthy ruling or any directions to come out at such a scale, we need open consultation so that is my take on this. That's a very valid point. Next we have a question in our chat box from Sergei Shmati who's asking and who's qualified it by saying that he know that there's no lawyers here, but what are the legal grounds on which this directive could be challenged. Now, we've seen in the case of IT rules, the question of whether how helpful legal challenges can be questionable. However, why this is helpful, like the entities were saying that you know section 87 to ZF, because these are not being formulated within that specific clause, that could be a potential reason, but if anyone would like to take this question and sort of respond to this. I have no idea, no legal background as such. Okay. I think we're citrating this as well, no, like these directions are not like a cert is not a regulator, quasi regulator so it's a mere directions. Now the penal provisions, how we don't know like only when they issue these orders, there's a judge or judge who is ordering you to do something or there's the section 69 orders. But I don't think government of India has the power to force you to log without a lot like there are a host of laws like if you have. We do this thing called digital certification right like digital science. The Office of the certification control authority makes it mandatory for all digital signature logs to be stored for seven years. Okay, even RBA has few provisions, each regulator has few provisions right now. These directions don't have the backing of a parent act from the way I see it. So they can't force you to start logging. Now in terms of challenging, like you cannot comply. But then, then there is always this threat of going to jail. You can challenge it. In terms of challenging on the grounds, I think privacy is one of the grounds of the customers. But you can challenge few parts of the directions which is mandatory reporting. I don't think you can say that all of these directions are bad and I want all of them gone. Some of them can be taken away completely like the VPN can be taken away for good logging. What is likely going to happen is more clarity timeframe and the costs. Right, like that is something that the industry is going to negotiate. They can't say no to it entirely, but some level of agreement or compromise will happen but I don't think any court is going to take this away because if you look at the other judgment where the idea of metadata and controlling regulating metadata and allowing governments to have metadata for a period of 180 days is going to influence any legal challenge. Now, I don't know if there is any good ground to challenge direction for. Yeah, the NTP, again, if you can, if you're an Indian company, I think you'll be forced to.  So it's not like we can challenge all of the directions, not going to happen. That's very helpful. I think we are almost done with our time, but before we close, I wanted to take quick remarks from all of you about, you know, what are the next steps? What should be the next steps in the stakeholder engagement? How should companies be thinking about it? How should business entities be thinking about it? And especially in the light of the fact that, you know, we discussed how certain is a very unique stakeholder in that sense. It's not even though it's part of maybe it's not one of those usual ministries that you have to deal with. So from that perspective, what do you think the next steps should look like? Pratik, over to you. Yeah, I mean, I think I'm just going to reiterate, right? A lot of what we've said is that, look, I think there needs to be a transparent consultation process, right? With more industry involved, with arm log, who care about their arm logs also involved, right? Perfect. I think there needs to be a lot of pushback, demand for a what cert is doing in terms of both transparency and accountability. But I think it's not going to happen. I'm being very realistic here. Yes, companies do have some power here to negotiate, but the MRP might be on the road for good.  But I think, as I was saying before, certain has a citizen charter, go to certain's website. If you're a citizen or any cybersecurity researcher, you're not a company where you're not implementing these rules, but you're concerned with it. Then I think the only way to engage with certain is through their citizen charter. Well, companies know what they have to do. Perfect. Richard? Yes. So as I mentioned earlier also, I think the technical submission to certain via associations, all possible associations, whichever organization one is part of, one should give. And I think along with the challenges and the concern one has to raise with certain, if possible, leveraging their experience, global experience or local experience. One can also put forward the suggestions or the global standards or the best practices as well in the submission, so that we have the holistic picture that what can be done right or what is the proper timeframe, timelines, etc. So along with the concerns and challenges, I would say let's put forward some suggestions as well to certain via associations. Thank you. Thank you, Richa, Srinivas Prateek, for your time. It's been a pleasure interacting with all of you. Neeta, over to you, too, for the closing session. Thank you, Sonali.