BlueXP is now NetApp Console
Monitor and run hybrid cloud data services
(cheerful music plays) Hi. I'm Will. Pleasure to meet you. Cam. Nice to see you. All right. The one thing that people who work for me will tell you is I analyze every situation very carefully and I never rush to judgment. But I didn't like that guy the second he opened his mouth. Will Doucette, huh? "Will Do." Love it. Says here dependable data services I thought you worked for NetApp? Nope. DDS. I'm a GSI. Sounds like a PPIG with 3BoLS. I'm sorry? Just a lot of acronyms. He's a consultant. Yeah. I know what a GSI is. Thanks Cam. Then as you can probably guess we do planning, design, and implementation of cloud data platforms and we are an authorized reseller of NetApp. I guess we do PDI of CPDs because we're Net Apps BFDs. Want me to spew more word salad, Will Do? Okay, cut to the chase. I'm a Fortune CEO. You're trapped in the elevator with me. What's your pitch? Not sure that's how that works. I'd probably ask you what issues are top of mind for you right now? Probably getting out of that elevator. Okay Will. Maybe that some criminal in his mom's basement has just hacked into the corporate database and has now control of all of our most important data. And my web browsing history. We focus on zero trust security architecture for data. (scoffs) That's what we do now. Do you? I mean zero trust is more than just a concept. To apply zero trust principals you need to classify all your data, put it in the right microcores and then kick everybody out. Everybody. Then you allow only the folks who need access to that data back in. And no-one else. So that sounds like a data silo. I thought those were bad. It's not a data silo. A microcore is not a group of physical resources at all. Simply a logical construct. Your data's always connected everywhere. You can apply it to the cloud or shared infrastructure. You can move data to a cloud quickly, you can manage it simply and you can keep it secure. Why are you talking about security? He's a storage admin and you work at a data management company. Okay. What is your attacker after? Your data, right? It's your most valuable asset. Zero trust places the greatest controls closest to the data and so denies access to all unauthorized parties including insiders. As long as I get access. I'm the IT Director. Actually zero trust means that you don't get access to it. So you don't think I'm trustworthy? It's not about you,I never said it was.Spence acted so odd around Will Do. Odder. Like he felt threatened. No-one's going to bench me in my own house. No-one. Cam, you're the storage admin. Right. Okay so even you don't get access to the data. Uh, see you only need to manage the storage. Only the application owners need to access data. Like me. Like you. Like that! And where's your backup admin? Out in his car, typically. Well he need only recover the data, not have access to it. Okay, look, um imagine your data's a rockstar. Like Beyonce. Like St. Vincent. Like who? Guys please. Like Josh Groban. Is he really a rockstar? Doesn't matter. So when Josh Groban plays a concert, he needs more than one level of security. There's uh, front gate security, audience security, backstage security,to the dressing room. They all work there but don't actually have access to Josh Groban. Only his security guards get to ride with him to the venue. And that's me. That's you. And the other employees have backstage passes but anyone trying to break that close perimeter could be a threat or a stalker. So you let no-one in. That's zero trust. Okay, now I'm a stalker. No, just an extra risk. You could delete the data, or corrupt it. Why would I delete or corrupt Josh if I work with him and love him? Mmmm. See that right there? Big red flag. Well stalkers are unstable. I'm the security admin, I should protect Josh Groban. And you are, from the outside. The way outside. You don't have to touch the data, you just have to protect the containers holding the data. Like the venue security? Yeah.Do I have a gun and badge? More like a yellow t-shirt and a flashlight. What's this guy even talking about? I'm not stalking Josh Groban! (laughs) That's so what a stalker would say. Or a creeper, at the very least. I got this cloud architect coming in here today like the PPIG Mouth of Sauron and now this jackalope's out here telling everyone I'm stalking Josh Groban?! The old security paradigm is trust but verify. Trust the users on your network but verify that they're doing what they're supposed to. Exactly. We should do that. We dothat. Mhmmm. You dothat? Do... Zero trust means verify the users but never trust them. That just sounds so dystopian. I mean is that the type of work environment we want to live in? This is the bank right? So you probably have very strict security rules around PII. We probably do. Pop quiz everybody, what's PII? Personal Identifiable Information. Correct,As you know, there are strict regulations around what data you can store, how long you can store it, who can access it, etc. A zero trust architecture ensures those regulations are met. It also gives you the ability to monitor for anomalies. With differing levels of security credentials everyone backstage will notice if something seems off. Like Spence getting too close to Josh Groban. Exactly! Oh no. That's right Mr. We're on to you. I'm not even talking about that, I've got much bigger problems. The Mouth of Sauron has just landed.
Third Banks calls in a consultant in the wake of a ransomware attack. The consultant, who is an authorized NetApp reseller, recommends a Zero Trust architecture.