TopPodcast.com
Menu
  • Home
  • Top Charts
  • Top Networks
  • Top Apps
  • Top Independents
  • Top Podfluencers
  • Top Picks
    • Top Business Podcasts
    • Top True Crime Podcasts
    • Top Finance Podcasts
    • Top Comedy Podcasts
    • Top Music Podcasts
    • Top Womens Podcasts
    • Top Kids Podcasts
    • Top Sports Podcasts
    • Top News Podcasts
    • Top Tech Podcasts
    • Top Crypto Podcasts
    • Top Entrepreneurial Podcasts
    • Top Fantasy Sports Podcasts
    • Top Political Podcasts
    • Top Science Podcasts
    • Top Self Help Podcasts
    • Top Sports Betting Podcasts
    • Top Stocks Podcasts
  • Podcast News
  • About Us
  • Podcast Advertising
  • Contact
Not in our directory?
Add Show Here
Podcast Equipment
Center

toppodcastlogoOur TOPPODCAST Picks

  • Comedy
  • Crypto
  • Sports
  • News
  • Politics
  • True Crime
  • Business
  • Finance

Follow Us

toppodcastlogoStay Connected

    View Top 200 Chart
    Back to Rankings Page
    News

    State of Cybercrime

    Join us for State of Cybercrime, where experts discuss the latest trends and developments in the world of cybercrime and provide insights into how organizations can protect themselves from potential threats.

    Sponsored by Varonis

    Advertise
    • Apple Podcasts
    • Google Play
    • Spotify

    Latest Episodes:
    Attorney and Data Scientist Bennett Borden: Find Insider Threats (Part 2) Sep 27, 2016
    Show notes

    In this second podcast, Bennett continues where he left off last time. Borden describes his work on developing algorithms to find insider threats based on analyzing content and metadata. Transcript Cindy: Hi, everyone. Welcome to our Inside Out Security Podcast. Andy and I are very excited to have Bennett Borden. He plays many roles. He is an attorney, a data scientist, and also a partner at Drinker Biddle in Washington D.C. So welcome, Bennett. Andy: Thanks, Cindy. And again welcome, Bennett. Thank you for joining this call. So we're really excited to have you, and mostly because you have this unusual background that bridges law and data analysis. You've also written some really interesting articles on the subject of applying data science to e-discovery. I'm wondering for our non-lawyer readers of the blog, can you tell us what discovery is and how it has led to the use of big data techniques? Bennett: Sure, absolutely. And Andy and Cindy, thanks for having me. So discovery is a process in litigation. And it's a process when two or more parties get into litigation. These rules about discovery require the parties to trade information about whatever the case is about. So if you think of a patent infringement case or a breach of contract case, the two parties ‘serve discovery’—that’s what it's called--on each other. This is basically a game of Go Fish. And one side says, "Give me all your documents about the formation of the contract," and then the other side has to go and find all those documents. As you can imagine, in the information age, that could be anything! You've got to go find all the emails about that and all the documents like Word or PowerPoint. Depending on the case, it could be things like server logs or financial or HR data. It becomes quite the hunt in this modern age.Varonis: Right. So it has become e-discovery or electronic discovery. Bennett: That's exactly right. Varonis: The problem is finding relevant documents. And this problem of finding relevancy and how to decide whether a document is relevant would seem to lead to some ideas in data science. Bennett: Yes, and that's what's been really great about the advent of the information age and big data analytics in the last few years. Discovery has been around since the 1960's, but it was initially a paper endeavor. You had to go to file cabinets and file rooms and you'd find stuff, and copy it, and hand it over. But as we’ve gotten into computerized systems and databases and especially email, it's become really quite burdensome. Millions of dollars are spent trying to find and locate these documents. It began as an issue of search technology, having to search these different repositories, document management systems and file servers and email servers. Then as data analytics came online, we have these advanced machine learning search capabilities. As I find something that I'm looking for, it's basically a “more like this” search, and analytical tools can help us understand the characteristics of what they call responsive documents and help us find more like that. It's greatly increased the efficiency of the discovery process.Varonis: Right. So it seems like some of these ideas of using data science started with e-discovery, but it has branched out from there. And I know you've written about how data analytics was used, for example, in other legal transactions like a mergers and acquisition case that you wrote about. Can you tell us more about how it's expanding from just e-discovery? Bennett: Yeah. This is really what's one of the most interesting parts of data science and its convergence in the legal sphere, because if you think about it, a lawyer's most fundamental product is really information. As a litigator, as a corporate lawyer, what we're trying to figure out is what happened and why: sometimes it’s whose fault it is or even trying to understand the value of a transaction or the value of a company, or the risk that's associated with certain kinds of securities transactions. All of that is based on information. The easier it is and the more accurately and quickly you can get at certainty of information, the better legal product you have. We started playing with these techniques. It’s the same techniques that were helping us find information that was relevant to a case, and tried to apply these to different settings. One of the most obvious is investigation settings, like a regulatory investigation or even an internal investigation. It's the same kind of principle, you're looking for electronic evidence of what happened. And that kind of pushed us into some interesting other areas. If you think about how a merger or acquisition happens, company A wants to buy company B, and so company A asks a bunch of questions — what they call due diligence. They want to know what your assets and liabilities are, what risks you might face, what are your uncollectible accounts, and, say, do you have any kind of environmental risk or litigation going on. The information provided by the target company is used to get an understanding of the value of the target, and that's what determines the purchase price. The more certain that information is or that value is, the fairer the price. When you start getting fluctuations in price, it really reflects the amount of uncertainty over the value of the company. Often when these companies trade information, they don't have a clear picture of the other side. We started using these electronic discovery and big data techniques in the due diligence process to get clearer information. Varonis: Right. As I recall from the case, the company was sold, and then as part of verifying the company's disclosures about what they were doing were accurate, you actually went and looked at the file system. Bennett: Yeah. And this is what's interesting! When we were talking to our M&A lawyers, as one of the endeavors, we were going around to different practice groups in the firm, and we were saying, "Look, I have this skill set where I can get you information. And so how would that be valuable to you?" One of the lawyers I was talking to, the head of the M&A group, said, ‘Look, our biggest problem is that we don't have about what they're telling us and how accurate it is.’ Every M&A transaction has a provision, which they call an indemnification provision, that basically says, ‘You're going to tell me about your company, and then I'm going to give you some money for the company, but if I find out that what you told me was not accurate, then to the extent it wasn't accurate, I get to adjust my purchase price after.’ In other words, I get a refund of whatever the differences in value are. The problem with these indemnification provisions is that they are only open for like 30 or 60 days. Usually it's very hard to figure out whether the information is accurate within that very short period of time. So in this particular case, our client, the purchaser, had some doubts about the veracity of some of the information coming out of the other side, but really couldn't prove one way or the other. Literally the day that the purchase closed, we owned all the information assets at the company we bought. We swooped in and did a data analysis, looking at all the information they had given us, and then walked it back through time. How did they come up with these figures in their disclosures? What was the internal discussion going on with their internal people and their outside auditors? We were able to show there was a pretty wide variance between what they told us and what is a reasonable basis for the valuation. We got millions of dollars back on that purchase price, and we've been able to do that over and over again now because we are able to get at these answers much more quickly in electronic data. Varonis: Right. Yeah. It's fascinating that you're able to find the relevant files, you connect them over a period of time, and then sort of walk it back as a way to learn that the disclosure was not quite right. We're definitely on the same page about there's a lot of information on file systems, and data science can help pull it out! Back in December, we heard you speak at the CDO Summit here in New York City, and you also mentioned a system that you helped develop that can spot insider threats during and even before the actual incident. And I think you said you analyzed both the actual content and meta-content or metadata. Can you talk a little bit more about that system? Bennett: Sure. You know, this is one of the most intriguing things that I think we've done. And it sprang out of this understanding that electronic data inside of a company, and really anywhere, is really evidence of where someone has been at a certain point in time, and what they thought or did or purchased or communicated. So you can actually watch how decisions are made or how actions start to be undertaken. All of us go through our everyday lives, especially at work, leaving trails behind of conversations with people, emails back and forth, and how we come to decisions. All of these things are now kept in this electronic record. We have this sociological record-- more than we've ever had as a species, really! If you know how to get at those facts and how to put them together, you can really find the answer to just about how anything came about. I came out of the intelligence community before going to law school, and so figuring out what happened and why has been my background for my entire career. What we figured out in data science is we are pretty good at being able to predict what people are going to do as consumers. For example, this is why your Amazon suggestions, your gift basket, or your Netflix suggestions on movies, or the coupons they spit out at the local pharmacy are based on predictions of what you’re going to do. I thought if we can predict what someone's going to like or what someone's going to buy, surely I can predict if someone's going to do something wrong, because just like there's patterns in all human conduct, there's patterns in misconduct as well. So we tested this. We took a number of data sets that we had basically found in a discovery process-- a litigation or a regulatory investigation that was about corporate misconduct, something like financial statement fraud-- and all of these documents had already been analyzed by teams of lawyers to figure out which ones of those were relevant to the underlying misconduct. I had a target variable that a document was or was not related to the underlying misconduct. We built algorithmic models, predictive models, based on these underlying data, across all sorts of different kinds of misconduct, and it turned out that misconduct is actually highly predictable. We worked with some of my colleagues back at the intelligence agencies, some folks at the FBI, and some social scientists who worked with the psychology of fraud and the psychology of wrongdoing, and developed this algorithmic model that had aspects of text mining--- words and phrases people used. Some of it was based on social network analysis—looking at who was talking to who, and when, or strange patterns in communication, especially outside of work hours, people that don't normally talk to each other, or siphoning off communications outside of the network to personal email accounts. A significant part of this was conducting sentiment analysis. It turns out that the sentiment analysis actually was a large proportion of the predictive algorithm. After putting all of these features together into a model, it was stunningly accurate that we could find patterns as it began to develop, that people were either engaging in some kind of misconduct, or a situation was ripe where such misconduct could occur. Varonis: Right. There's some really interesting research about what they call precursors of insiders, and it sounds like you're spotting that in your algorithms. It also seems like you have a training set of data and you build it up, creating profile, a statistical profile. Bennett: Yes, that's exactly right. We looked specifically at the temporal aspect of misconduct. Catching someone after they've done it or kind of after the horse is out of the barn, that's easier, but what's harder is can we actually see the misconduct coming? So we built this model where we had a test set of data, some of which we used to build the model, and of course some of which we used to test it on, and we focused specifically on the behavior leading up to the misconduct. So could we catch it earlier? And that's where it's really interesting to see the dynamics, the sociological dynamics of how a corporation works, and people's frustration level and feelings of acceptance and support--was there some kind of loyalty severancing event? It was really quite an interesting sociological effort.Varonis: Absolutely, yeah. The researchers talk about trigger events that will push an insider over the line, so to speak. But we've also learned, as you suggested, that the insiders will actually try it out, they'll try to do some test runs to see how far they can get. And it sounds like your algorithms would then spot this. In other words, stop them before they actually do the act of copying or destruction or whatever it is. Bennett: That's exactly it. Varonis: Yeah. We call that user behavior analytics, or UBA. That's the industry term of it. So it sounds like you think that's the right approach. Not everyone follows that way of finding these behaviors, or catching insiders, I should say, but it sounds like behavior is something that you're very interested in spotting. Bennett: It is. You know, it's fraught with very interesting issues. One of the things that I speak about quite often is the ethical use of data analytics. And there are certainly issues here. A lot of the triggering events or the triggers that come into misconduct situations have to do with people's personal lives, some kind of personal crisis or financial crisis, drug or alcohol dependencies, and a lot of it has to do with their interaction with their colleagues and superiors, stressful situations and feelings of ingratitude or not being recognized for their worth, and those are very personal things. And one of the things that we tested this on as part of a graduate program that I was involved in at New York University is what could you tweak this algorithm to find? We actually did some test runs. Could you find all the Republicans? Could you find people of a particular political belief or such? And you can! And it's very disconcerting that to realize that these kinds of algorithms can really find just about anything. So then the question becomes, "What's the right thing to do?" What responsibility do we have as a company or especially a public company to monitor behavior and to monitor compliance, and yet not interfere with people's personal lives? It's a very interesting question that the law is really not settled on, and is something that we have to consider as data analysts.Varonis: Yeah, that's very interesting. The question is, "When do you turn it on?" Should it be on all the time or do certain conditions justify it? So yeah, I absolutely agree that is an issue for companies. I have one last question for you, and it has to do with, again, the insiders let's say who go bad, they're in a powerful position, they actually have created the content, they feel like they own it. And these people are sometimes very hard to spot because they're the creators, they could be high level executives, they own the conte…

    Full show notes at the publisher

    Attraction of Repulsion (to Ransomware) Sep 22, 2016
    Show notes

    When it comes to ransomware, we can’t stop talking about it. There’s a wonderful phrase for our syndrome, “the attraction of repulsion,” meaning that something is so awful you can’t stop watching and/or talking about it.

    How awful has ransomware been? According to the FBI, in the first three months of 2016, ransomware attacks cost their victims a total of $209 million. And it doesn’t stop there. It’s impacted many businesses including financial firms, government organizations, healthcare providers, and more.

    In this episode of the Inside Out Security Show(IOSS), we cover three types of ransomware: CryLocker(impersonates the US government), FairWare(targets Linux users), and yes, fake ransomware.

    While some might disagree on whether or not to pay the ransom, we can all agree that ransomware is the canary in the coal mine.

    The post Attraction of Repulsion (to Ransomware) – IOSS 23 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    Attorney and Data Scientist Bennett Borden: Data Analysis Techniques (Part 1) Sep 14, 2016
    Show notes

    Once we heard Bennett Borden, a partner at the Washington law firm of DrinkerBiddle, speak at the CDO Summit about data science, privacy, and metadata, we knew we had to reengage him to continue the conversation. His bio is quite interesting: in addition to being a litigator, he’s also a data scientist. He’s a sought after speaker on legal tech issues. Bennett has written law journal articles about the application of machine learning and document analysis to ediscovery and other legal transactions. In this first part in a series of podcasts, Bennett discusses the discovery process and how data analysis techniques came to be used by the legal world. His unique insights on the value of the file system as a knowledge asset as well as his perspective as an attorney made for a really interesting discussion. Transcript Cindy: Hi, everyone. Welcome to our Inside Out Security Podcast. Andy and I are very excited to have Bennett Borden. He plays many roles. He is an attorney, a data scientist, and also a partner at Drinker Biddle in Washington D.C. So welcome, Bennett. Andy: Thanks, Cindy. And again welcome, Bennett. Thank you for joining this call. So we're really excited to have you, and mostly because you have this unusual background that bridges law and data analysis. You've also written some really interesting articles on the subject of applying data science to e-discovery. I'm wondering for our non-lawyer readers of the blog, can you tell us what discovery is and how it has led to the use of big data techniques? Bennett: Sure, absolutely. And Andy and Cindy, thanks for having me. So discovery is a process in litigation. And it's a process when two or more parties get into litigation. These rules about discovery require the parties to trade information about whatever the case is about. So if you think of a patent infringement case or a breach of contract case, the two parties ‘serve discovery’—that’s what it's called--on each other. This is basically a game of Go Fish. And one side says, "Give me all your documents about the formation of the contract," and then the other side has to go and find all those documents. As you can imagine, in the information age, that could be anything! You've got to go find all the emails about that and all the documents like Word or PowerPoint. Depending on the case, it could be things like server logs or financial or HR data. It becomes quite the hunt in this modern age.Varonis: Right. So it has become e-discovery or electronic discovery. Bennett: That's exactly right. Varonis: The problem is finding relevant documents. And this problem of finding relevancy and how to decide whether a document is relevant would seem to lead to some ideas in data science. Bennett: Yes, and that's what's been really great about the advent of the information age and big data analytics in the last few years. Discovery has been around since the 1960's, but it was initially a paper endeavor. You had to go to file cabinets and file rooms and you'd find stuff, and copy it, and hand it over. But as we’ve gotten into computerized systems and databases and especially email, it's become really quite burdensome. Millions of dollars are spent trying to find and locate these documents. It began as an issue of search technology, having to search these different repositories, document management systems and file servers and email servers. Then as data analytics came online, we have these advanced machine learning search capabilities. As I find something that I'm looking for, it's basically a “more like this” search, and analytical tools can help us understand the characteristics of what they call responsive documents and help us find more like that. It's greatly increased the efficiency of the discovery process.Varonis: Right. So it seems like some of these ideas of using data science started with e-discovery, but it has branched out from there. And I know you've written about how data analytics was used, for example, in other legal transactions like a mergers and acquisition case that you wrote about. Can you tell us more about how it's expanding from just e-discovery? Bennett: Yeah. This is really what's one of the most interesting parts of data science and its convergence in the legal sphere, because if you think about it, a lawyer's most fundamental product is really information. As a litigator, as a corporate lawyer, what we're trying to figure out is what happened and why: sometimes it’s whose fault it is or even trying to understand the value of a transaction or the value of a company, or the risk that's associated with certain kinds of securities transactions. All of that is based on information. The easier it is and the more accurately and quickly you can get at certainty of information, the better legal product you have. We started playing with these techniques. It’s the same techniques that were helping us find information that was relevant to a case, and tried to apply these to different settings. One of the most obvious is investigation settings, like a regulatory investigation or even an internal investigation. It's the same kind of principle, you're looking for electronic evidence of what happened. And that kind of pushed us into some interesting other areas. If you think about how a merger or acquisition happens, company A wants to buy company B, and so company A asks a bunch of questions — what they call due diligence. They want to know what your assets and liabilities are, what risks you might face, what are your uncollectible accounts, and, say, do you have any kind of environmental risk or litigation going on. The information provided by the target company is used to get an understanding of the value of the target, and that's what determines the purchase price. The more certain that information is or that value is, the fairer the price. When you start getting fluctuations in price, it really reflects the amount of uncertainty over the value of the company. Often when these companies trade information, they don't have a clear picture of the other side. We started using these electronic discovery and big data techniques in the due diligence process to get clearer information. Varonis: Right. As I recall from the case, the company was sold, and then as part of verifying the company's disclosures about what they were doing were accurate, you actually went and looked at the file system. Bennett: Yeah. And this is what's interesting! When we were talking to our M&A lawyers, as one of the endeavors, we were going around to different practice groups in the firm, and we were saying, "Look, I have this skill set where I can get you information. And so how would that be valuable to you?" One of the lawyers I was talking to, the head of the M&A group, said, ‘Look, our biggest problem is that we don't have about what they're telling us and how accurate it is.’ Every M&A transaction has a provision, which they call an indemnification provision, that basically says, ‘You're going to tell me about your company, and then I'm going to give you some money for the company, but if I find out that what you told me was not accurate, then to the extent it wasn't accurate, I get to adjust my purchase price after.’ In other words, I get a refund of whatever the differences in value are. The problem with these indemnification provisions is that they are only open for like 30 or 60 days. Usually it's very hard to figure out whether the information is accurate within that very short period of time. So in this particular case, our client, the purchaser, had some doubts about the veracity of some of the information coming out of the other side, but really couldn't prove one way or the other. Literally the day that the purchase closed, we owned all the information assets at the company we bought. We swooped in and did a data analysis, looking at all the information they had given us, and then walked it back through time. How did they come up with these figures in their disclosures? What was the internal discussion going on with their internal people and their outside auditors? We were able to show there was a pretty wide variance between what they told us and what is a reasonable basis for the valuation. We got millions of dollars back on that purchase price, and we've been able to do that over and over again now because we are able to get at these answers much more quickly in electronic data. Varonis: Right. Yeah. It's fascinating that you're able to find the relevant files, you connect them over a period of time, and then sort of walk it back as a way to learn that the disclosure was not quite right. We're definitely on the same page about there's a lot of information on file systems, and data science can help pull it out! Back in December, we heard you speak at the CDO Summit here in New York City, and you also mentioned a system that you helped develop that can spot insider threats during and even before the actual incident. And I think you said you analyzed both the actual content and meta-content or metadata. Can you talk a little bit more about that system? Bennett: Sure. You know, this is one of the most intriguing things that I think we've done. And it sprang out of this understanding that electronic data inside of a company, and really anywhere, is really evidence of where someone has been at a certain point in time, and what they thought or did or purchased or communicated. So you can actually watch how decisions are made or how actions start to be undertaken. All of us go through our everyday lives, especially at work, leaving trails behind of conversations with people, emails back and forth, and how we come to decisions. All of these things are now kept in this electronic record. We have this sociological record-- more than we've ever had as a species, really! If you know how to get at those facts and how to put them together, you can really find the answer to just about how anything came about. I came out of the intelligence community before going to law school, and so figuring out what happened and why has been my background for my entire career. What we figured out in data science is we are pretty good at being able to predict what people are going to do as consumers. For example, this is why your Amazon suggestions, your gift basket, or your Netflix suggestions on movies, or the coupons they spit out at the local pharmacy are based on predictions of what you’re going to do. I thought if we can predict what someone's going to like or what someone's going to buy, surely I can predict if someone's going to do something wrong, because just like there's patterns in all human conduct, there's patterns in misconduct as well. So we tested this. We took a number of data sets that we had basically found in a discovery process-- a litigation or a regulatory investigation that was about corporate misconduct, something like financial statement fraud-- and all of these documents had already been analyzed by teams of lawyers to figure out which ones of those were relevant to the underlying misconduct. I had a target variable that a document was or was not related to the underlying misconduct. We built algorithmic models, predictive models, based on these underlying data, across all sorts of different kinds of misconduct, and it turned out that misconduct is actually highly predictable. We worked with some of my colleagues back at the intelligence agencies, some folks at the FBI, and some social scientists who worked with the psychology of fraud and the psychology of wrongdoing, and developed this algorithmic model that had aspects of text mining--- words and phrases people used. Some of it was based on social network analysis—looking at who was talking to who, and when, or strange patterns in communication, especially outside of work hours, people that don't normally talk to each other, or siphoning off communications outside of the network to personal email accounts. A significant part of this was conducting sentiment analysis. It turns out that the sentiment analysis actually was a large proportion of the predictive algorithm. After putting all of these features together into a model, it was stunningly accurate that we could find patterns as it began to develop, that people were either engaging in some kind of misconduct, or a situation was ripe where such misconduct could occur. Varonis: Right. There's some really interesting research about what they call precursors of insiders, and it sounds like you're spotting that in your algorithms. It also seems like you have a training set of data and you build it up, creating profile, a statistical profile. Bennett: Yes, that's exactly right. We looked specifically at the temporal aspect of misconduct. Catching someone after they've done it or kind of after the horse is out of the barn, that's easier, but what's harder is can we actually see the misconduct coming? So we built this model where we had a test set of data, some of which we used to build the model, and of course some of which we used to test it on, and we focused specifically on the behavior leading up to the misconduct. So could we catch it earlier? And that's where it's really interesting to see the dynamics, the sociological dynamics of how a corporation works, and people's frustration level and feelings of acceptance and support--was there some kind of loyalty severancing event? It was really quite an interesting sociological effort.Varonis: Absolutely, yeah. The researchers talk about trigger events that will push an insider over the line, so to speak. But we've also learned, as you suggested, that the insiders will actually try it out, they'll try to do some test runs to see how far they can get. And it sounds like your algorithms would then spot this. In other words, stop them before they actually do the act of copying or destruction or whatever it is. Bennett: That's exactly it. Varonis: Yeah. We call that user behavior analytics, or UBA. That's the industry term of it. So it sounds like you think that's the right approach. Not everyone follows that way of finding these behaviors, or catching insiders, I should say, but it sounds like behavior is something that you're very interested in spotting. Bennett: It is. You know, it's fraught with very interesting issues. One of the things that I speak about quite often is the ethical use of data analytics. And there are certainly issues here. A lot of the triggering events or the triggers that come into misconduct situations have to do with people's personal lives, some kind of personal crisis or financial crisis, drug or alcohol dependencies, and a lot of it has to do with their interaction with their colleagues and superiors, stressful situations and feelings of ingratitude or not being recognized for their worth, and those are very personal things. And one of the things that we tested this on as part of a graduate program that I was involved in at New York University is what could you tweak this algorithm to find? We actually did some test runs. Could you find all the Republicans? Could you find people of a particular political belief or such? And you can! And it's very disconcerting that to realize that these kinds of algorithms can really find just about anything. So then the question becomes, "What's the right thing to do?" What responsibility do we have as a company or especially a public company to monitor behavior and to monitor compliance, and yet not interfere with people's personal lives? It's a very interesting question that the law is really not settled on, and…

    Full show notes at the publisher

    Chief Data Officer Richard Wendell: Skills to Cultivate (Part 2) Sep 12, 2016
    Show notes

    In this second podcast, Mr. Wendell continues where he left off last time.

    He explains the skills you’ll need in order to be an effective Chief Data Officer and we learn more about MIT’s International Society of Chief Data Officers.

    Transcript

    Skills a CDO Need: Information Technology, Mathematics, Change Management

    Inside Out Security: You've given many examples how the CDO has a relationship with a CIO, the CMO, the CEO, and so you need a whole bunch of different skillsets. What are some skills you need in order to be an effective CDO?

    Richard: Yeah, there are really three category of skills.

    The first category is what I'll call an IT skillset, traditionally. The second is more of a math skillset, and the third is really, like you mentioned, around communication, and even HR and change management. So I could talk to each of those briefly.

    Information Technology

    It's an interesting role, right, because typically, people who are strong in IT may not have as much background or expertise in math or HR, and you could say that about the other two as well. These are the three different areas of skills that often do not overlap, and to be a good CDO, you absolutely must have all three skills areas.

    The IT skillset is all about new data technology. So I think the number one, if you go online and you look at search terms, the number one phrase that's most commonly associated with the chief data officer is data science.

    Data science, if you look at, again, it mean a lot of things to a lot of people. But chief data officers, chief analytics officers manage the data science function.

    Data science takes place in most companies now on top of newer data technology stacks. There are so many new technologies emerging every day that are absolutely critical for managing the function of data science, data integration.

    And so being able to go in and work with IT department on building out that technology suite, and even occasionally standing up IT infrastructure with these new kinds of tools that, you know, maybe the IT department is typically focused more on very, very proven technologies that are enterprise scale that could be deployed and maximized their IT ROI, that is what they should be focused on. That's the perfect focus for IT.

    But if that's all you do as a company, then you're never going to experiment with somebody's new technologies that are really required to do data science well, and this is where a CDO comes in.

    So, you know, it's really important to be able to stand up and manage some of these new IT technologies, and you have to be a hacker to make it work. I mean, a lot of companies I know spend a year and a half just trying to figure out how to productionalize their hadoop cluster inside their firewalls. So you have to know how to hack through these things and hack around them. I find a lot of my peers in the CDO community grew up as hackers, and you really have to have that hacker mindset and enjoy problem solving.

    Mathematics
    Secondary of math, I mean, this is really all algorithms so you need to understand machine learning. You need to know what are the different flavors of machine learning and how is it applied. And you need to be able to, I think in order to be good, you need to be able to get down to a fairly detailed level with your data scientist to talk about different packages, and how they're applied in different parameters that they're using in their model. Machine learning is just one area that's really hot right now but I think of advanced analytics, some statistics all have many different models that are used to solve different types of problems.

    And operations research, frankly, is an area that's often overlooked. There are many powerful quantitative techniques that come out of operations research, and increasingly now, computer science that are all really important and all have their place, and they're just different tools for different jobs. So we need to have that tool kits of algorithms to know which one or ones are best applicable to different business use cases.

    If you want to do a cluster analysis with a huge dataset, maybe you want to do a simple k-means. If you have a smaller dataset and you think you can get more insight out of it, then maybe you can do a hierarchical. It's just one simple example, but you need to be able to match the business use case to the scale of data to the algorithm.

    Change Management
    And then the third area, I mentioned the HR skillset, is really around change management. This is where most companies I see really fall down because most companies focus on insight.

    Insights are great. Insights don't make money.

    And this is where I'm talking specifically about like 20th century companies that are looking to be 21st century companies. Companies like that, they are filled with a lot of really great talent that's just not used to being data driven in their workflows. And quite often, sometimes, there's resistance to data.

    Maybe folks, at the end of the day, feel that their gut is going to give a better answer than a computer or an algorithm, and look, I'm not saying let's throw away gut feel. There are still many cases where we have to use gut feel, but I do believe that increasingly, over the next few decades, there are going to be a lot of knowledge workers that...their jobs are not going to be automated but they're going to be augmented.

    They will be using data. They'll be using analytics to more directly inform the decision that used to be made more on gut feel, not replacing them but augmenting. And getting folks who are not used to trusting a dashboard to trust the dashboard is really hard. It's really hard. It's change management, and there are reams and volumes written on change management.

    I've done a lot of this. I did a lot at American Express. You know, change management in business units, to become more data driven, there's a lot of best practices that go along with this.

    And by the way, the skillset though is nothing to do with IT and nothing to do with the math, the first two skillsets I mentioned.

    So, yeah, you're right. It's a very heterogeneous job that requires a very cross functional skillset to be successful.

    Inside Out Security: It sounds like you need to start working when you're 15 years old.

    Richard: You know, it's interesting. There's a lot to learn, I think, to be an effective chief data officer, for sure.

    Importance of Curiosity in Data, Technology and People

    Inside Out Security: And to also be curious about the data, to be curious about technology, and to be curious about people, too.

    Richard: That's a really, really good way of putting it. You're absolutely right. It's curious across all three of those ends.

    But it's something that I don't want to be discouraging.

    I think that folks, more often than not, earlier on in their careers, specialize in maybe the first area, or the second area, maybe IT or math, and then expand over time to have all three of those critical areas checked.

    But there are a lot of folks from data science increasingly are coming from liberal arts background. There's a whole new profession of data journalism. Data visualization is huge, and data science is coming in from that background. I would put that more on the HR communication skill bucket.

    And I think if you're smart and you're really curious, as you said, there should be nothing stopping you from going out and acquiring all the skills that we're talking about.

    Reasonable Timeline for Success

    Inside Out Security: And so if you became a CDO, how much of a timeline would you give yourself? Because sometimes, when you join a company, people are like: "What are you doing there? Are you here to cut costs? Are you here to streamline things?"

    What's a reasonable timeline you would give yourself as a CDO to validate and justify this new role?

    Richard: It's a good question. I think that there are critical checkpoints along the way. I'll start at the beginning. I think that the first critical checkpoint is 90 days before you start.

    And I'm not being facetious.

    I actually believe that a good chief data officer is not going to take any CDO role that's not set up the right way.

    And I've just found, with so many conversations I've had with companies that are looking to be successful in this area, they don't necessarily know how to structure the role for success. They don't know who...should the data warehouse and ETLT be under the CDO or not, or should that stay in IT.

    And so I really think that it's incumbent on a CDO to make sure that that role is structured for success before they accept the job. Almost be a consultant to...and actually, a lot of CDOs who are in their roles were consultants or advisers to companies through this process.

    I think that's number one, and then I think that, so coming in on day one with the right success structure and the right metrics is really important.

    And then, you know, I think that it's interesting. A lot of people argue back and forth about should we be driving quick hits or no, actually, we should be driving transformation.

    And it feels like there's people in one of these two camps, and the answer, I think, is actually both. You have to do both. I believe in taking a portfolio approach. I think that it's really important to very quickly, early on, identify a couple large transformational projects that are going to move the needle for the company, but are going to take more like, a year or two to do.

    But in addition to that, there's got to be a whole hopper full of monthly click hits that come out, and they're just stoking the fire, feeding the engagements of the business. Because if you just do one or the other, then you're either going to lose engagement or you're going to lose the larger potential.

    So I think, short answer to your question, the role needs to be set up for success. I think that within the first 90 days, a CDO needs to quickly assess the company, the situation, come up with an initial version of a road map, use a rigorous prioritization criteria to come up with a hopper of quick hits, data-driven quick hits, as well as a few big transformational projects that get the executive team and the board of directors excited.

    MIT’s International Society of Chief Data Officers

    Inside Out Security: I want to learn more about your role at ISCDO at MIT. Can you tell us a little bit more about this organization and some of the goals and objectives?

    Richard: Sure. So the MIT International Society for Chief Data Officers, it came out of several conversations that a few of us in the community were having with a couple professors in the Sloan school.

    Really, think of us as the IEEE for chief data officers. So, not affiliated with a vendor and really having more of a code of silence around our meetings. Place for folks who...chief data officers, chief analytic officers, really, think of the leaders of the data and analytics for $200 million plus companies, is more or less the range that we're seeing.

    To come together and roll up our sleeves and talk about what's worked, what hasn't worked, which vendors have delivered, which teams within which vendors have delivered, and what are common challenges.

    It always amazes me.

    …. From MIT, we went down to DC, and we were talking to chief data officers in the public sector. And I walked into those meetings thinking, "Oh, these people are going to have nothing in common with us in the private sector."

    They were talking about the challenges of data integration, and the challenges of driving quick hits, and getting engagement. And in the end, it amazed me at how similar so many of our challenges are, and just how many really of the best ideas, or I call them jiu-jitsu moves kind of ways of overcoming these challenges as an executive, really come from outside of our industry.

    So I think a lot of...it's important to obviously work with folks within one's industry to think about, specifics to regulatory issues, for example.

    But I think that it's equally critical to look outside of one's industry to find best practices in areas that other industries may be a little further along on some issues, and maybe they figured out something that we don't.

    So MIT ISCDO right now, I think we're on at around 150 executive members, would invite anyone interested, who thinks they qualify as an executive leader of data and analytics in companies have at least $100 million or so in revenue to apply. And we do screen all the potential members. And if assuming that somebody is qualified to be a member of our community, we would absolutely love to have them join us.

    Inside Out Security: Thank you so much, Richard. I'm wondering, if people want to follow you, how can people contact you or follow you on twitter?

    Richard: Yeah, sure. So I would say, first, iscdo.org. My twitter handle is @reWendell, and my email address if anyone wants to get a hold of me is richard@Wendell.io.

    Inside Out Security: Thank you so much, Richard.

    Richard: Thank you, Cindy. I enjoyed talking with you. I look forward to staying in touch.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    Bring Your Geek To Court Sep 09, 2016
    Show notes

    Last week, Alpesh Shah of Presidio joined us to discuss law firms and technology. With big data, ediscovery, the cloud and more, it’s of growing importance that law firms leverage technology so that they can better serve their clients. And in doing so, law firms can spend more time doing “lawyerly things” and, um, more billing.

    Hallmarks of this episode include:

    • why it’s critical for law firms to leveraging technology
    • why clients demand that law firms care about data security

    and

    • extra steps law firms need to take if they want to work with healthcare providers and financial institutions

    Want to learn more about Presidio? Visit them online. Or better yet, email Alpesh Shah ashah@presidio.com.

    Subscribe Now

    Join us Thursdays at 1:30ET for the Live show on Youtube, or use one of the links below to add us to your favorite podcasting app.

    • iTunes
    • Android
    • RSS

    The post Bring Your Geek To Court – IOSS 22 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    The Vulnerability of Things Sep 06, 2016
    Show notes

    We were thrilled when Pen Testing veteran, Ken Munro joined our show to discuss the vulnerabilities of things.

    In this episode, Ken reveals the potential security risks in a multitude of IoT devices – cars, thermostats, kettle and more. We also covered GDPR, Privacy by Design and asked if Ken thinks “The Year of Vulnerabilities” will be hitting headlines any time soon.

    Munro runs Pen Testing Partners, a firm that focuses on penetration testing on the Internet of Things. He’s a regular on BBC, and most recently, he was interviewed by one of our bloggers, Andy Green.

    Subscribe Now

    Join us Thursdays at 1:30ET for the Live show on Youtube, or use one of the links below to add us to your favorite podcasting app.

    • iTunes
    • Android
    • RSS

    The post The Vulnerability of Things – IOSS 21 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    Go Open Source! Sep 01, 2016
    Show notes

    Whether you’re a proponent of open-source or proprietary software, there’s no doubt that the promise of open-source is exciting for many.

    For one thing, it’s mostly free. It’s built and maintained by passionate developers who can easily “look under the hood”. The best part is that you’re not married to the vendor.

    Yes, there are many helpful open-source security tools as well as awesome projects based on Go. But lately, there has been a controversial case of open-source ransomware. Originally created to educate others about ransomware, it’s turned into a mashup ransomware without a way to backdoor the decryption key.

    In this episode, we discuss the benefits and shortcomings of open-source, a throwback to our passwords episode and more!

    Subscribe Now

    Join us Thursdays at 1:30ET for the Live show on Youtube, or use one of the links below to add us to your favorite podcasting app.

    • iTunes
    • Android
    • RSS

    The post Go Open Source! – IOSS 20 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    Moods and Motives of a Smooth Criminal Aug 29, 2016
    Show notes

    After reading about an IT admin at large bank who went rogue, we put on our empathy hats to understand why.

    And in this episode, we came up with three reasons:

    1. Instead of being recognized as a revenue generator, IT is seen as a cost center
    2. Despite all the tests and certificates, IT people aren’t as valued as, say, doctors or lawyers
    3. And lastly, IT people are often overworked and underappreciated

    Could changing the way you dress and improving your communication style be the answer?

    What do you think? Let us know!

    Subscribe Now

    Join us Thursdays at 1:30ET for the Live show on Youtube, or use one of the links below to add us to your favorite podcasting app.

    • iTunes
    • Android
    • RSS

    The post Moods and Motives of a Smooth Criminal – IOSS 19 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    Excellent Adventures at Black Hat Aug 25, 2016
    Show notes

    Hackers, Executives, Military Folks, IT People who work in Insurance, even Cab Drivers all had something to teach us about security and privacy at the latest Black Hat event in Vegas.

    Subscribe Now

    Join us Thursdays at 1:30ET for the Live show on Youtube, or use one of the links below to add us to your favorite podcasting app.

    • iTunes
    • Android
    • RSS

    The post Excellent Adventures at Black Hat – IOSS 18 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    More Articles on Privacy by Design than Implementation Aug 22, 2016
    Show notes

    Going from policy to implementation is no easy feat because some have said that Privacy by Design is an elusive concept.

    In this episode, we meditated on possible solutions such as incentivizing and making privacy as the default setting. We even talked about the extra expense of having a Privacy by Design mindset.

    What do you think about going from policy to implementation? Share with us your thoughts!

    Subscribe Now

    Join us Thursdays at 1:30ET for the Live show on Youtube, or use one of the links below to add us to your favorite podcasting app.

    • iTunes
    • Android
    • RSS

    The post More Articles on Privacy by Design than Implementation – IOSS 17 appeared first on Varonis Blog.

    Want to join us live? Save a seat here: https://www.varonis.com/state-of-cybercrime

    More from Varonis ⬇️

    Visit our website: https://www.varonis.com

    LinkedIn: https://www.linkedin.com/company/varonis

    X/Twitter: https://twitter.com/varonis

    Instagram: https://www.instagram.com/varonislife/


    Previous 1 19 20 21 22 Next

    Related Podcasts

    Inside Strategic Coach: Connecting Entrepreneurs With What Really Matters

    1

    Inside Strategic Coach: Connecting Entrepreneurs With What Really Matters Business
    WSJ Your Money Briefing

    2

    WSJ Your Money Briefing Business
    FORTUNE Unfiltered with Aaron Task

    3

    FORTUNE Unfiltered with Aaron Task Business
    FORTUNE OnStage Presents: The Most Powerful Women

    4

    FORTUNE OnStage Presents: The Most Powerful Women Business
    Slate Money

    5

    Slate Money Business
    In The Dark – The New Yorker

    6

    In The Dark – The New Yorker Business News
    footer-logo

    Contact Us

    Toll Free: 844-670-7747

    Links

    • Home
    • Top Charts
    • Networks
    • Apps
    • Independents Podcasts
    • Podcast Advertising
    • Podcast News
    • Contact Us
    • About Us
    • Analytics & Insights

    Stay Connected

      Privacy, Terms of Use & Our Code of Ethics Protecting Content Creators Copyrights