text:
University of Bradford receives £50k from Emerald Foundation
Published: Wednesday 30 November 2016
The University of Bradford has received a donation of £50k from the Emerald Foundation to fund full fee MSc scholarships.
The generous donation has allowed five scholarships to be offered to high-achieving graduates, providing support and encouragement to progress into postgraduate study at the School of Management.
The Emerald Foundation is the charitable arm of Emerald Group Publishing Limited (EGPL), a scholarly publisher of academic journals and books which manages a portfolio of more than 290 journals and over 2650 books and book series volumes.
The Emerald Foundation budgets a significant sum annually for the purpose of supporting charities in the fields of the performing arts and sport, particularly for young persons and animal welfare, within West Yorkshire.
Chairman of the Emerald Foundation, Dr Keith Howard, believes the highest rewards are found when people are encouraged to unlock their intrinsic ability, saying: "It's all about 'intellectual return".
Keith has a long history with the University of Bradford. For five years, he directed the largest and most successful doctoral programme in Western Europe, completing numerous publications in the field of research and management science while at Bradford: "As the owner of Emerald Group Publishing Limited, I realised that the Company and the University would both be celebrating their 50th anniversary in the same year, and so felt this was the perfect opportunity to help others achieve their goals; and I was therefore was inspired to make the £50k donation."
All five scholarship students are now on their way to brighter careers, with their postgraduate study well underway. Aisha Hussain says her MSc in Finance and Investment is giving her insight into the future of finance and improving her career prospects: "If you look at it, everywhere has a finance department, from the smallest to the largest of companies."
Michela Takyie is now on her way to becoming a Pharmaceutical Manager after she completes her MSc in International Business and Management. Milan Patel is enjoying developing a more refined knowledge of international marketing principles with an MSc in International Marketing.
Yusuf Mohammad Ali, MSc in International Business and Management, explained how the scholarship has impacted him: "Being awarded the scholarship has accelerated my career path to becoming a social economist – I can see how technology has impacted on communities and future growth trends."
Elena Kremasta ,MSc in Strategic Marketing, said: "Having previously studied Psychology, I have an interest in human behaviour and, naturally, when combined with a passion for marketing, this translates to an interest in consumer behaviour. This was my main drive, to pursue a Masters in Strategic Marketing at the School of Management. The Emerald Scholarship has provided me with a platform to do this. I will now have the education and foundation to pursue my aspirations, and supports my ambition of acquiring a PhD within Behavioural Economics."
Emerald Publishing's Head of HR, Katy Snell, completed an MBA sponsored by Emerald in 2009: "It was Keith's long relationship with the University of Bradford which encouraged me to undertake the MBA, which has helped me develop a deeper and more business wide knowledge."
Picture shows Chairman of the Emerald Foundation, Dr Keith Howard, at the University meeting students who have been awarded scholarships.


text:
Holistic Approach to Cyber Risk Governance in the GDPR Era
by Matthias Reinwarth Posted on Mar 16, 2018
Log in and watch the full video!
Pressured by the Digital Transformation, corporate networks are becoming increasingly complex, spanning across multiple geographical locations and technology platforms. Unfortunately, even as companies are becoming more open to the outside world, different business units within the same company still remain essentially isolated when it comes to consistently measuring and exchanging security and risk management data across their networks.
Without full and clear visibility into the true company-wide risk posture, executives are bound to have massive difficulties understanding and communicating their current cybersecurity and compliance standing compared to their peers as well as the industry's guidelines and best practices. Unprepared to address a potential data breach, they are inevitably going to face all the grim consequences, which, starting this May, are going to become very expensive.
Upgrade to the Professional or Specialist Subscription Packages to access the entire KuppingerCole video library.
Register your account to start 30 days of free trial access
Subscribe to become a client
Governance & Risk Management
Business GRC
Good afternoon. Good morning, ladies and gentlemen, welcome to this. Copy. A cold webinar holistic approach to cyber risk governance in the GDPR era. This webinar is supported by tech democracy. The speakers today. My name is Matthias ARD, I'm lead advisor and senior Analyst Analyst with cooking a call and I will be joined by two great speakers from tech democracy. We have Ken FA with us who is chief architect, and we have got dev the global managing principle and founding leader. Before we start some information about a coal, the obligatory housekeeping notes, and a look at our today's agenda. ING Nicole was founded in 2004. We are headquartered in Germany with a team of international analysts spread across the world. Us UK, APAC, central Europe. We offer neutral advice and expertise in various areas to companies, to corporates, to integrated software manufacturers. And while I am was our original starting point, we are now working in the areas of information, security, GRC, and governance.
The business area is a quick look in research. We provide a wide range of strategic documents and reports. We have our leadership compass comparing vendors and market segments. We have advisory notes and executive briefs and executive views about the product we do events, and we will have a look on that on my next slide. And the third area is advisory where we provide vendor independent market expertise to customers like end users and vendors ranging from roadmap advisory and product and technology selection to maturity assessments events. There is a range of great cooking and coral events coming up. We have the EIC, the European identity cloud conference coming up in may actually commencing between the 14th and 18th of May, 2018 in Munich. We had the consumer identity world tour last year, and we will do that again because it was a real successful chain of events. And we will do that again in us and Europe and in APAC.
And that will be ranged from September to November this year. And we have the cybersecurity leadership summit in Berlin, also in November then talking of advisory, very short nod, and we are talking about GDPR today. Again is happy to help you in GDPR readiness assessment, understanding where you are with your organization. When it comes to preparedness some guidelines for this webinar, you are muted centrally. You don't have to mute and unmute yourself. We control these features. This webinar will be recorded. And that means that the podcast recording will be available tomorrow, along with the presentations as PDFs. And as we have a question and answer se session, the end, you can enter, enter questions anytime using the questions feature in the go to webinar control panel. And I really like to ask you to, to do so, so that we have some very good questions and your questions by the end of this agenda, I will start up with a introductory part called cyber risk challenges in an era of constantly changing and increasingly harsh data protection regulations.
And that will lay the ground for Ken file, who will then take over in the second part with his section called addressing cyber risk governance challenges in holistic fashion. So this will be the first two times 20 minutes, and then we will be joined by go as well for the questions and answer se session. And then we will get into more detail for your, yeah, for your questions and the discussion. So that's it for the introductory part. So I would like to start with my first presentation, which might be very, very short. It's a very, very quick introduction. First of all, as we are talking about the GDPR era, very quick overview in history, as it's only just a few more months to go till GDPR comes into full force, this is really just a reminder. What GDPR actually is. It is a, a European regulation before that regulation, each EU members, they had their own data protection laws and all these directives that the EU created had to be transposed into each national legal system, which ended up in very diverse and different national legislation.
The GDPR actually was designed to, to, to solve that issue and solve that problem. It came into force by 25, 20 5th of May, 2016, and it has a two years implementation phase, so that it means it's more or less dormant, but it comes fully applicable by the 25th of May, 2008 18. And it will be accompanied with augmenting national laws. So with the GDP answer, what was the aim is actually a harmonization at EU level. So no longer these different national legislations actually strengthen the update data protection standards to make sure that the laws are adequate to nowadays. And an important point is the European standards where have to be applied for all business businesses when they are operating in the EU or EA. So if we look at these actually points that we have to look at when it comes to GDPR, then just to, to show them all the first thing that we really have to know that it's really globally applicable as at least one European citizen is managed within your it systems.
Once this is the case, there needs to be legitimate grounds for the processing. That means that there is either a contract in place, which, which allows the processing of some of attributes of the data, or if there is additional information required from your side, from the organizational side, then there needs to be, for example, adequate consent and consent is one part of what we have when it comes to the extended rights of the data subjects, data subject, that is you and me as European citizens. These are extended and are vastly extended. And they also include, for example, the right to be forgotten to amend the data or the right to be notified about what is stored about you. Or if a data breach happens for many organizations, there will be the need to have a data protection office nominated. And that is something very new for many organizations, data breach notifications are an important point.
So once an organization learns actually that there is a data breach that needs to be notified at least to the data protection authority, and maybe even to the individual data subjects as well. There's the concept of the one stop shop when it comes to DPA. So if you're a multinational organization with more than one office in, in the EU, then you will be able to choose the DPA, the data protection authority within the largest within the country where your largest portion is located. And of course, when it comes to talking about GDPR, an important point is the point of administrative fines. So there is really a substantial threat of being subject to fines when it comes to not being compliant with the GDPR. So that's a very, very quick overview by far not complete, but just to give first introduction when comes to, to GDPR and where we are right now, two months to go, which is not too much.
So the idea for this webinar is to understand what needs to be done and how that can be consolidated into something that is really meaningful for an organization and for the data subjects and for the data protection authority. So doing the right thing is actually what we want to talk about today. So what needs to be done when it comes to implementing measures for being compliant to the GDPR. Again, we are all no lawyers, so this is also a legal part, but I, I think understanding the right thing to do can be also done in such a webinar to explain what needs to be done. And we actually divide that into two main columns. And these, this is on the one hand, the organizational column. So that really makes sure that your organization is well prepared for being GDPR compliant. And that is what is listed on in the left gray box.
It's really understanding your risk, risk exposure. So to execute a data protection impact assessment, this is not fully mandatory, but it really helps in understanding where you are. Maybe you need to adjust your organizational structure, for example, by nominating a data protection or officer a DPO, but also just to make sure that your staff is actually well well aware of what is, what is their duties. And, and that can be done with ex by executing trainings and raising awareness. And as no organization is usually on its own, you need to make sure that there are all contracts and policies and agreements in place that help you in the, in the communication with your partners along your supply chain, for example. So we'll really make sure if there's somebody else processing data for you have the right contracts in place, making sure that everybody knows what needs to be done.
On the other hand, we have the technical parts, and this is really something that we are looking into more in detail today. And these are, I can not only like I cannot enumerate all these points, but it's really important to actually do that all. So from actually understanding where you have personally identifiable information PII, stored and processed within your organization, that is actually really the first step to do to before you can even start thinking about data protection measures. So discover and document PI I, and we will come to this end document part in more detail. And also Ken will have a look at that. Really have the right documentation in place to provide adequate evidence to detect and document data flows, but also on the more technical part to yeah, have patches installed, to have the systems configured and securely whenever possible encrypt data that you're storing.
And of course control access. Once the data subjects give consent for data, then you have to make sure that this consent is actually directly mapped to access control. So that this really means it can only be used for the purpose given or the content given yeah. Protecting and monitoring or administrative accounts, sod rules, and the principle of least privilege and in the final step detect and contained threats. So really understand what happens in your network, what happens to your end points to your users. And if there are any threats, make sure that you can identify them, that you can respond to them and maybe even do the right steps afterwards when something has happened. So I've moved the right box to the left side, and I'd really tried to make sure that we understand what really are the right tools to execute adequate measures for achieving GDPR com or for getting closer to GDPR compliance.
So this is a, a short list of, of potential building blocks when it comes to implementing measures, controls, mitigating controls for achieving GDPR compliance, and that ranges from identity management and access management and access governance, understanding what people actually do with the, with the entitlements that they, but also to secure data transfer platform, encryption even ever possible web application firewalls and all these systems, they are important. And, and yeah, really important building blocks for getting to a technology platform, which is in a situation that can help you in creating that GDPR compliance. So what needs to be done when we have a bigger picture view on that, this is really a, a, a stepped approach for, for getting to GDPR compliance of making the right steps, again, starts with assessing your own organization, but the next step. And that is something that I've already described before, but really embed GDPR compliance into your, into your business processes and your systems.
So this is what I've mentioned before organizational measures and technical measures, make sure that whenever data, subject people, EU citizens hand over their data to you make sure that this is based on adequate legal ground. And that that is usually done by consent management. So gather consent document consent, and use this for processing of the data. And once that is revoked, you cannot long. You can no longer do that. I've mentioned data breaches. Everybody wants to prevent themselves from having a data breach. So you need to have adequate measures in place. And that is usually achieved by really having data protection and privacy by design, if possible in the, in the systems and by default in the systems, but be prepared also for the breach. So make sure that once the breach happens, you are in a situation that you can detect it, that you can notify the right people, the right organizations that need to be notified, and that you are prepared when it comes to having the right communication prepared, brief canned communication. Because once that happens, the last thing you want to think about is writing the right mail, have it prepared. And the last column here is really last pillars demonstrate compliance. And this is something that is really of, I importance. So it doesn't matter if you have a perfectly working solution that is actually GDPR compliant. You are not GDPR compliant, as long as you cannot prove that. So demonstrate compliant by having a framework complaints, have the controls implemented and have all measures that are required her to.
So we coming to my final slide already. So this is really the, the, the final step that I want to go before I hand over to Ken. So again, I again take this list, this mess of individual technological systems that are required for implementing the right technological measures. Although I think Ken will also talk about the organizational measures as well, that as they can be measured within a governance framework as well, but these are the systems and all of them, they have triggers, they have logs, they have communication in any way. They have dashboards reports. And all of this is something that actually all organizations have to look at. And if you have to look at the individual information from all of these systems, the most probably lost. So the idea is how can you pull that together into a single, and, and this is entitled holistic cyber risk governance approach.
So really what can you do to, to get there? So the idea is to put this into a single system, into a single framework that is able to yeah, to compile this information and to get to the, to right level of information, which is adequate for the individual stakeholders that you have, but that is also in a situation that it can actually achieve all these pillars that we've seen in the, in the slide before. So I've taken as an example, the, the missed cybersecurity framework, which actually combines a vast amount of different angles. When you look at the overall cybersecurity topic. And if we go from, from top to bottom, we have the identify detect response and recover cycle that would, of course, again, we reuse when we get back to the identify part. So really identify your, your assets, your business, your governance requirements, your risk assessment, your risk management strategy.
This is the first step you need to lay a foundation layer. The next step would be actually to protect your environment, your data, your data processing, and make sure that all the technical measures that I've mentioned before and much more adequately implemented. So this is the protect part, make sure that nothing happens, but if something happens that you are able to detect it. So you identify anomalies events by having a security monitoring in a continuous fashion, and also have detection processes that the right incidents are identified and reported. And once they are identified and reported, get, go get to the response process. And that is really something that requires an adequate planning, the adequate communication to, towards all involved stakeholders, but also the analysis process, the mitigation and the improvement part. When it comes to the next time, this could happen, really prevent it. So the detection and the protection part should grow over time and recover once it ha has happened.
And once you have responded, make sure that you recover from the individual events or threats or incidents that have been happening by having recovery planning at hand, having adequate communications afterwards. So to tell people, we had a, we had an incident and we, we improved the following measures, and this won't happen again in that, in that way. So it's really also improvements and communication. So this is the approach from, for getting from this mess to the left. Although it's almost seems like quite sorted, but this is really a huge mass of information to really, to get to a cybersecurity framework that helps you in, in getting the right information at the right time at your fingertips, in the ideal world. So, and before I hand over to Ken right now, I just want to make sure that you really enter your questions into the questions and answers panel. So if you have any questions for my part, please feel free to add them and we will get back to the questions later on. And now I would like to hand over to Ken, ask you questions during his speech as well. And we get to the Q and a afterwards. So I hand over to Ken,
Thank you very much Matthias I'm Ken I'm with tech democracy, I'm chief architect there. My background is primarily information security for 20 plus years. I've been a CSO sitting at your seat for quite a long, long time. And so, you know, I've kind of dealt with this year after year after year and, and this new regulation and that new regulation that comes along. And, and as far as being able to kind of do this in a holistic approach, that's one reason that I joined tech democracy was putting together, you know, a framework for not only assessment, but continual assessment and, and making sure you know, that we can do one to many mappings, many to one mappings, that sort of thing. There's no sense in having to reinvent the wheel every time a, a new regulatory standard comes down or, or, you know, the business changes and shifts just a little bit.
And you're left dealing with the data in just a different way. So what we're doing is like to show you a few things about how to be holistic about it, right? And flip to the next slide. This is Matthias slide from before. And, and the reason that I put this up here is let me move this over to the side so I can actually see my screen. Sorry about that. The reason I put this up here is to kind of demonstrate, you know, you have many, many, many, many, many systems in your environment that you're having to constantly do translation for and, and, and find the bigger picture and, and to understand all of that minutia on a day to day basis, right? So, you know, the 16 boxes here, what are you gonna do in order to demonstrate that, all right, I am GDPR compliant or I'm I'm well, on my way, as well as with my global organization, the, the umpteen other regulatory objectives that, that I have to comply with.
One thing that I'd like to have throw out there to folks, when we speak of frameworks, a lot of people, you know, will use nest or they'll use ISO. They're not necessarily frameworks. They, they are standard. They even have the word standard inner name. Unfortunately, you guys sitting out there and sitting in the seats are the ones that have to develop that framework. Luckily, you know, we've, with our years of experience, we've developed a cybersecurity framework that underpins and, and ties all of this stuff together. So you don't really have to, you know, worry, okay, this, this objective says, I'm running with scissors over here, you know, and, and, and the other one says the same exact thing. Now, how do I find out across my enterprise? You know, what it is that I'm doing and how am I dealing with all of these things? So the full cycle here, I love this approach, you know, identify, protect, detect, respond, and recover. That is a full cyclical approach to technology management, especially security technology management.
However, what we wind up with in a lot of cases is a point solution view and, and, and an individual system you into compliance readiness, right? We're having to take all these puzzle pieces and kind of consolidate that for effectiveness and completeness to see if we're meeting a particular objective in this case, GDPR. So you've got minutiae from your identity and access management systems, your, your encryption firewalls, your GRCs, your cloud access security brokerage systems, which, which are becoming very popular. And you're having to call that information on a minutia basis to see, you know, are, am I doing the right thing? Can I demonstrate it? Can I provide evidence? And, and, you know, how does that tie in one thing about any new regulatory objectives in, in my experiences in doing this is that often you've gotta look across all of your existing controls and compliance baselines, and you've gotta find the stricter of those or, or the strongest of those, and then apply those continually throughout the enterprise, or you're gonna be in violation in one particular place or another.
So one of the things, then I'll get into the framework here that we've, we've designed and, and we've implemented into a platform, but one of the things that you have to keep in mind, you know, moving forward is just that you've gotta know where your strongest, where your weakest, where you're making the most of your existing investments, where you can invest more. And that's based on, you know, a few different, and it's not just, you know, compliance and regulatory objectives that you need to make those decisions based on, these are some issues with, you know, kind of doing it in a piecemeal approach and, and as well as the whole time drain and, and, and the burn on, on your average security management staff and, and engineering staff to kind of demonstrate this stuff. So GDPR and, and many other regs they're concerned with the overall effectiveness of your program, not just individual pieces, it's not just okay.
You know, I have my, I have proper change control on my firewalls. Okay, great. You know, one check box. Okay, perfect. But are you compliant in other areas? And, and how is the effectiveness of your whole program, another key issue demonstrating effectiveness at this level, it requires a lot of triage research and individual interpretation for your effectiveness of, of your investments. So, like I said, again, you know, the whole, whole point solution view is kind of the thing of the past. And unless you like Excel spreadsheets and pie charts and, and doing all that good stuff. And, you know, if you love those things, which not, not very many people do, I'd say, stay with them. If not, you know, listen on one thing about constant reevaluation with all of these things, it doesn't lend itself natively to, to your changing business processes or the changing of the technology.
Like I said, cloud is becoming very, very big, you know, in a lot of business minds, if you were to look at it five years ago, you know, especially in, you know, financial services, are you going to the cloud? They're like, no, but your business needs to change your regulatory objectives change and your technology changes. So things get better. Things get a little bit more acceptable, or the risk becomes a little bit more acceptable and you wind up having to shift gears. Now that puts as, as interpret how all the stuff fits together. Another issue is with senior management, you know, and, and, you know, to have to sharpen the crayons because these are business folks, they don't understand security technology, right. They'll come back. How many times have you heard that from, from your senior management staff and say, Hey, what, you know, what are you talking about with this widget?
And going into the board and saying, Hey, we we're, we've decreased our number of vulnerabilities. You're gonna get, you know, just a blank stare from a lot of folks. And so, so, you know, one thing that I've had to do in the past is report to directors around the global separations in 27 countries. And we had approximately 20 or 21 independent legal operating entities. And so, you know, making that case, you know, on, on a decentralized basis and then making it to a point to where they all understand it, you know, completely is quite a task, holistic risk management. Now, what are we talking about when we start talking about holistic risk management? Well, it's certainly not point solution risk management. It's certainly not. Okay. We, we have 150 check boxes. Only 20 of them are important and, you know, and, and are gonna get us fined.
We need to, you know, do those only, but holistic risk management is taking all of that and putting it into one picture and doing a continual real time assessment of your security posture. You have to, you can't lose the ability to, to drill down and, and, and see, you know, how effective you are in one particular area. So that requires that you, you remain technology agnostic, right? If, if you're buying, you know, one particular, you know, solution provider or one particular security solution, chances are, they're gonna layer on the bells and whistles and try and get you to buy more product, but CISOs and, and security management, we buy things and we implement technology based on its effectiveness and how well it's going to do at that particular CA task or that particular use case that we, we subject it to. So holistic risk management will use a framework, inventory controls, pre correlated to industry best practices and regulatory objectives.
I know it's kind of a mouthful, but the essence of that is, you know, making things a little bit simpler, but not losing the details, right. Holistic risk management is not vertical specific. It's not, you know, okay, we have a HIPAA solution. We have a, you know, a FERPA solution. We have a GDPR solution. We have in this solution, we have a O C I E cetera, et cetera. And it applies the metrics to validate and demonstrate all of this effectiveness, our platform. I'm just kind of gonna go into this right here. We use cyber risk security and governance framework, which is a framework that we've developed. And I'll, I'll get into that in just a second, but, you know, over 25 years at doing this, we've, we've come up with, you know, I think a very, very, very effective way to demonstrate that you're doing the right things.
We provide end-to-end situational awareness, what's happening in your enterprise. We're vendor agnostic. You know, we can pull feeds from either file API database, WMI, LDAP, whatever the source is, we're holistic in realtime intelligence. And some of the things that we provide is an estimated financial risk exposure, which I'll get into, you know, very briefly here in a second, as well as breach ability compliance and se indexes. Now, those things are gonna tell you, you know, what is going on in your enterprise and, and the senior level folks we've found, you know, the CEOs and the CFOs and the chief risk officers and, and, and guys like that are more concerned about, you know, one, the compliance index and the breach ability index, which is a scale of one to five, how likely you're gonna be breached based on, you know, correlation to the framework, your regulatory controls and actually everything that's happening in your enterprise.
And then we're able to assign an estimated financial loss to that, right? So we use, you know, a, a, a very complex algorithm of calculations and that, you know, we will get from, from the customers when we, when we do the pre-populate populates, the framework that we have when we've devised is, is consisted of four service pillars, informed, secured, governed, resilient, all right, those service pillars will encompass all pretty much all of technology, risk management, everything from on the informed side that keeping, you know, informed of what is going on in your enterprise. And, and, you know, in your intelligence information, that's coming in the secured services is the actual security of the systems. Things like, you know, endpoint compliance, configuration, those sorts of things, governed services, includes things such as, you know, controlled baselines and, and GRC systems. And the resilient services encompasses not only how you react and respond to an event or your incident response plans and, and services, but also disaster recovery and business continuity and things like that.
And that is how well you are able to, you know, detect, respond and, and, and react to event in your enterprise. The technology part of that, we have six platform modules. So we have entity device, network platform, application, and data, and pretty much all data that flows through your technology systems in, in system security is, is gonna pass through one of those, right? You're gonna have an entity associated with that data. It's gonna pass through device along your network. Chances are, it will hit some, some type of platform and, and application, and then you have the actual data itself. So using, you know, the four service pillars and the six platform modules you have approximately 24 areas where technology could play a difference in, in as far as protecting that data.
This is just a representative sample of, of how things kind of, you know, rotate in a holistic fashion, right? So you've, you've got the business, which is gonna be more concerned with, you know, how informed they are and, and how well we're, we're correlating to not just it business objectives, but, but actually literal business objectives as to how they're doing business, the secured module, which, which deals primarily with, like I said, with, with the technology compliance we'll deal, you know, more with, within the governed aspect and, and risk within the resilience. These are just some of the example activities within those pillars of services. And I think I touched on some of them, you know, very briefly just before, you know, everything from, from infrastructure security and forensics and readiness evaluation, being under resilient to Absec testing and, you know, network security, testing, vulnerability scans, all of those systems are important, but it's more important. I think that you get the overall view of things, the whole picture and not miss anything, because you could have one system telling you, you know, one thing, and, and as a matter of interpretation, you're either gonna think you're effective overall or you're, you are ineffective overall, you know, just put things into the proper perspective, again, more of a, an integrated governance framework and, and how we do things and, and what those, you know, what those security service areas are.
One of the things that we've, we've done and that I've had to do over the past 20 something years is actually come up with the security metrics model, right? Metrics allow you to, you know, not just measure things, but it, it properly interpreted and, and carried through. It also allows you, you know, to tell a picture and to tell a story, right. And your folks at the senior level are gonna be concerned with, you know, what, what is the story, right? Your folks at the senior level are gonna have your top level questions, your top level questions, being things like, you know, are we secure enough for our business? If that, if I had like a, a dollar or a Euro, every time I was stopped in a men's room by a board member to say, and they say, Hey, are we secure today? It's, it's kind of, I'd be a very rich man, but, you know, are we making the right investments?
Are we investing enough? How are we in relation to our competitors? You know, those sort of top level questions that, that every security executive is gonna have to answer to below that, you know, you have the business and it level and the management level questions, you know, am I adequately staffed? You know, you look at, you know, some of the tax preparation services out there, right. I mean, you know, they really ramp up when the taxes are due. And then, and then you look at 'em later in the year, they've probably got five people, you know, on staff total, you know, globally Manning five buildings. So, you know, it allows you the ability to make the right management decision. And then below that you have the operational and implementation level metrics. Those metrics are, you know, the minutiae of things, right? The number of vulnerabilities, the number of port scans, you know, all of that stuff.
And those are good from, from the guy in the seat perspective and understanding, you know, where he needs to kind of invest his time aligning with those businesses, right? You you'll see the four service areas and, and how we do the metrics model is we, we do a bubble up rather than, you know, a filtered down. So all of that minion, all of those information that you're getting in your enterprise is already translated into those for silos to answer, you know, you know, the questions above that, right. Very, very simple there. As far as the translation goes, this is our risk and liability scorecard. And just a, a quick screenshot of that this, our risk and liabilities work hard is, is used for our financial liability estimator. Right? And we have you, you can see all the, the parameters in there from impact and criticality, you know, to integrity as well as, you know, some of the motivational aspects in there. And, you know, as far as, you know, when we configure and, and set up the system, this is very, very simple in order to assign risk, weight, and priority to various systems that, you know, based on what type of data that they're, that, that they're carrying. And so, you know, this will contribute to, you know, what we, we give as far as our, our estimated financial exposure index.
This is just a quick screenshot of, you know, our, our report manager for the executives, right. You know, you click a button, one of these buttons, and it's gonna give you the actual data calculations and, and, and answer the question first off, and then it's going to tell you, you know, what we use to, to measure and to validate that. So for example, here, click on, are we in compliance? Okay, well, yes, we're 98% compliant, and we have two failed controls among 164 total controls. And that, that one, those 164 total controls are just for this particular instance, you know, one, one particular framework or, or one particular regulatory objective, such as like GDPR, we have canned out of the box, we have GDPR, we have DFS 500, we have stocks GBA. We have, you know, all of these different regulatory regulatory and, and, and compliance objectives.
And we have those mapped into our framework. So, you know, that allows us to go very quickly to say, all right, you know, we already have this in place. It's 98%, you know, effective. Do we need to do more? If not, then let's try do an actual drill down into the data, if we do and find out where we need to do more or where we need to make, you know, an additional investment, or you can just go click in, click a few buttons in here and just, you know, do an existing mapping of what you're already using to a new, to a new framework and, and kind of fall where, or see where you're falling short or see where you're very strong at. The thing about it is, you know, we do a continual assessment of this and, you know, and, and there are, I'm not gonna say, you know, many frameworks out there that require that because most folks are, are kind of doing this, you know, as a one shot basis where they're, they're, they're hiring, you know, somebody to come in for a vulnerability assessment, which is basically only one piece of the puzzle, and they're losing the, the whole context of things were, were having to do that extra of, of the translation at the, at the upper level.
If you wanna see this in action, I, I, I really, really would love to, you know, suggest that you get in contact with us. You know, we'll do a, do a demo either with dummy data or, you know, we can prepopulate something, but, you know, the most effective way is to kind of kick the tires and, and see things in action, I think, and I've been tearing through this technology just for, you know, eons and, and one other thing just, just before we get into the questions, we're so serious about the underlying framework of this, that, you know, we've established the Alliance for cyber risk governance, which is to build a technology risk measurement framework. That is, is just as understandable as, you know, reputational risk, operational risk, credit market risk, all the things that executives understand. And we partnered with some of the biggest names, you know, within, within technology, everybody from rapid seven to ellas, to, you know, Rackspace. So we're very, very serious about, you know, getting people to understand what it is that we do on a day to day basis. And, and with that, I'll, I'll turn it over to Matthias.
Okay, great. Thank you very much. So, first of all, thank you, Ken, for this great presentation for our participants. Of course, we are coming now to our Q and a session. So still time to add your question, make sure you have provided all your questions through the questions paneled on your screen. We do have already some, some questions here, but there is space for some more. First of all, for the Q and a, we are also joined by Gordon Def global managing principal and founding leader of tech democracy. And let's start with a few questions. First of all, some, some very quick questions that arrived during my presentation. The first thing was a to which missed domain can we map GDPR awareness and training? For example, maybe, maybe I give a short shot at first and maybe can, you can add to that. If you look at the missed domains, we have these five identified, protect, detect response, and recover. And as GDPR awareness and training actually directly also maps from its requirements to, to site security as well. Not only, but also I would really say that in the, in the protect domain where training and awareness are, are really anchored there. So I think that really fits into the, in this domain of, of protect. What do you think, Ken,
Can you, can you repeat the question? It was breaking up, I'm sorry, Matthias,
Sorry to, to which nest domain can we map GDPR awareness and training? So I, I,
I would agree with you as far as protect goes. And, and like I said, as far as, you know, a lot of the, the supposed frameworks out there, I'm gonna call them standards. What you're getting with a lot of the standards is, is just, you know, a list of controls that you, you know, or a list of things that you must do it, it's not generally going to tell you how to weigh that to your business needs or, or how to, you know, how does that, you know, engage effectively, you know, across all the other must do items regard, is this, is there something you want add to that?
Well, that's absolutely true. So as far as GDPR goal, I think, and as my test has pointed out in one of the slides, the demonstration of compliance becomes very critical and across the board, no matter whichever module from nest or ISO, that you wanna adapt towards being compliant, it's, it's demonstration of that compliance holistically, that becomes critical. And that's the reason why we put it up in as, as a brand force segment matrix across those four domains of informed, secured, go resilient and map them across to give a holistic demonstrable view of compliance to, to your GDPR requirements.
Okay, great. Thank you. We have one other GDPR related question. I think this is a hot topic still. So, and we, maybe we can answer that very quickly. The question is in case of a data breach, what rights does the GDPR empower the affected person with? And if I remember it correctly, I mentioned before we all know lawyers, but first of all, the, the data subject rights are extended anyway. So there is not much added in case of a breach, except for you have in several cases, the right to be actually notified. So then you have the right to be notified without undo delay. I think that is the text of the regulation, but for any other rights, these are the rights that you have as a result from the GDPR. Anyway. So you have the right to have, to be informed, to have a look at the data, to correct it and to, to allow and disallow different types of processing, unless there are covered by the contract. So there is only the rights of being notified in my opinion, as a layman, all other rights are there anyway, maybe that's a very short answer to the GD PR point, but I don't think that there are many other rights that can be added during the, during the data breach aftermaths. You can be notified it has happened what has happened, which data was transferred. And what did the organization actually do to, to, to, to recover from that breach? Can or do you want to, to add something to that as well?
I'm sorry, go ahead. Go.
And, sure. So, so to act to what Matthias just said, I think what's important. You are in a breach or before a breach is the availability of continuous actionable assessment capability, right? And, and that needs to trigger into some sort of a response or actionable even taking place, which is, which is more critical and how prepared you are to be able to get that actionable intelligence in place and, and in a continuous fashion.
Okay. Okay, great. Thank you. Then another question, which is more related to, to what you presented, can I, I think the, the, your platform comes also with the promise of, of achieving visibility and automating evidence in a kind of push button, fashion and reporting. Do you have experience from, from regulators with the results that you present through your platform? How is the response and how is the, the applicability of what is actually coming out of your platform for a reor when they say, give me evidence
From, from the regulatory perspective, because we don't lose any of the, the detail, right? The detail is still underlying. It it's just that we have, you know, a very sophisticated presentation layer that, that allows, you know, correlation at different levels. So from that perspective, I mean, it, it's been very, very well received. Everything from, from, from regulators to, you know, folks that are actually in the cybersecurity insurance industry. I mean, mean how many times have, you know, as a CISO, you get those whole checkbox or those checklists and, and, you know, and have to go down through all of that, that, you know, on a yearly basis. So it's, it's, it's been very well received in that respect. Gotham, do you wanna comment on that?
Sure. So every regulatory control or a standard control is met to an actual situation that either is violated or has passed that situational rule. So, so the evidentiary, the evidentiary requirements over there lead guide you right back to an exact situation, which is, which is making you in violation from an audit point of view. So the ease of being able to gather that information right down to the nuts and bolts of why a particular control fail has been something that has really hit home with some of these regulatory and auditors.
Okay. Yeah. Great. Thank you. I think that that is the big promise. And, and if you can have a, a report, a dashboard, but also can drill down. I think that is something that is really helpful. No matter whether the regulator comes in on a scheduled basis, you expect them, or you do not expect them. So they come here and you have to have a, a hoc insight into the system. Okay. Another question, some, some organizations say we already have a, a, a framework for compliance with GDP because it's only two months left. We are, we are already working on it and we feel quite fine. Can you platform help there anyways, Kim?
Yeah, I I'm, I'm, I'm gonna just jump feet first into this and say that you, you probably already have a framework that you've, you know, spent eons or, or a considerable amount of time fleshing out. What is that you need to do in order to comply with, you know, those, those checklists. Right. So, as I kind of said before, you know, a lot of 'em are standards. They're not necessarily, you know, frameworks. So that means that they've got a checklist of controls of things that you need to do and, and, and need to kind of gauge effectiveness on. We don't require you to throw the baby out with the bath water, you know, in 90% of the times, what you're gonna have from, from one framework or, or from one regulatory baseline to another is gonna be very much the same. And I use the, I use the, the term, you know, running with scissors that don't run with scissors.
It's very basic. A lot of folks understand that, you know, you don't do it. And, but, you know, in some cases you're gonna need the run with the, the ones that don't have the pointy tips on 'em that can only cut, you know, clay and crayon, you know, and that's, that's based on the business. And that says, Hey, you know, that's acceptable to me. So yes, we map very, very well to pretty much any framework that's out there because we allow the one to many mappings and the many to one mappings to be done. And Gotham, do you wanna comment on that?
That's that's I think you got most of it right over there. Again, I would just, again, point back off the important aspect of it's. Okay. You might have a framework, you might be compliant. You know, you are a checklist of controls or what have you, but the end goal is to be able to demonstrate that compliance and in a, and be able to do that on a continuous basis, if you wanna be aware of any, any, any violations during the due course of it, or at the point where you have to show compliance. So the ability to have, you know, something that layers on top of all those checklists of controls or frameworks of compliance that you have put to effect to, to, to check if you are real GDP compliant, then you need to be able to demonstrate that with a blanket on top of it.
Okay. One question you've mentioned this, this, yeah. This Excel approach, this very manual and very tedious and, and very long running approach for demonstrating compliance. Now, your platform comes with, with this promise of, of doing lots of these things for the organization, there must where's the complexity, this looks like it's complicated. How many people do need, do you need to operate that, to configure it to, to, to, yeah. To apply the, to filter it and to do all this care and feeding.
So what I'm, I'm going to say, you know, even though something can look complicated, that's just because it has, you know, a lot it's very rich and functionality, but it's, it's actually, it's minimal investment once, once it's set up and, you know, as far as the care and feeding goes, if you have new controls or something that you need to, to load in, or load new situations in, you know, those, those sorts of variables, or you need to just, you know, change, you know, the priority of a business process, it's, it's a few clicks away. So, you know, a large value that we provide is, is turning you complicated risk interpretation into something that's not only manageable, but it's effective. So we'll, we'll do the setup. And, and we come in and we do the setup based on your company needs and, and, you know, provide a very simple management overview that, that they need to do on, you know, on a periodic basis. I'd say Gotham, anything on that?
No, that's alright. Thanks. Yeah, that was perfect.
If a new regulatory requirement came out next year, would you provide the, the best practices and the additional filters and reports and the right button to push to get the right reports out on a continuous basis as a service, best practice included in the platform so that people can really rely on yeah, I'm, I'm, I'm compliant next year as well.
Oh, AB absolutely. And, you know, and, and, and part of the training that we provide is, is if folks kind of wanna one off that as well to kind of supplement, you know, maybe, you know, they're, they're, they're subjected to something at a local level, right. If, if you look at, you know, the, the, the regulatory landscape in I've used the us, for example, right. I mean, you've got GBA, you know, PCI cetera, etcetera, but then you also have a very large number of states that implement, you know, their own, like New York state has DS DFS 500 Massachusetts says 2 0 1 CMR 17, you know, and we, we do provide for those as an example, you know, a, a out of the box, you know, kind of control assessment and, and that's included in the platform, but let's say if you were to, you know, have something, you know, locally, that's not in that, it, it wouldn't be very difficult to either put in yourself, or we could do that as well with our professional services team.
Got right. And, and, and the, yeah, the way, the way the tool works is it has a big bucket of controls, which we call unified control bucket for, if you will. And, and, and chances are, if there's a new regulation comes and you can create a new custom regulation of your own, you can your own custom security policy and, and be able to continuously assess the effectiveness of that policy. Leveraging a platform. Chances are, if a new control, a new new regulation comes in, a lot of the controls are already being leveraged elsewhere that you could carry. So you can have essentially a one to many mapping, so you can use a control and, and, and map it to number of regulations existing or new, and create an independent bucket in itself that is being monitored.
That's kind of going back to that, running with scissors analogy.
Yeah. I, I did want, yes, I did want yeah. See your, but yeah, that's kinda what, what it's.
Okay. Last question, maybe with, with a short answer, although it's a large question, I assume many organizations have cm systems have GRC systems in place have lock collection platforms in place. Does your solution play nicely with those consume from them, provide information to them? Is this a, an integrated solution?
Well, I AB absolutely. You know, we have, you know, partners in, in play I'll, I'll use log as an example, you know, they're a core partner of ours from, from a GRC solution aspect. You know, RSA is a partner of ours. We, we're not trying to, you know, play in the sandbox of something that, you know, CISO is bought in order to be very, very good at that one particular objective, but there are differences, right? SIM they're very, very good at, at, you know, the minutia aspect of things and individual event aspect of things. But they're not very good at doing any sort of necessary translation to say that, yes, you know, that this event violated this control or, or this, this event has raised our, you know, our, our financial, you know, exposure. So, you know, from the SIM and the GRC perspective, and the GRC perspective is, is sort of a, a one point in time. Am I compliant with my control right now? Or, or am I not right? We, we allow that to be kind of translated at, you know, a more complete level and Gotham
True. So from an SI point of view, you know, there's a whole lot of analysis that goes into considering if an even is indeed an incident or not essentially shrinking the haystack to find that one needle. And that's what we do effectively. So we can draw from an S I, and, and have those situations detect that needle from that haystack of event that SIEM provides on an automated basis, a continuous basis. Now the whole continuous assessment of controls is another paradigm that makes us a differentiator from your typical run of the mill historical GRC solutions, where you have workflow driven, check boxes and modularized for different regulations. And, and you have to do control testing of each, you know, kind of regulation separately, where we can do it in one shot and in a continuous basis as well. And that is because we leverage this 24 point matrix, which normalizes the data across those six areas of concentration and, and four dimensions.
So the continuous assessment and the ability also to be able to balance risk versus stress. So if there is an issue that a situat, whether a situation fails, be it from a control point of view, or a breach point of view, you have the ability to certify to say that, okay, is this risk worth the time and effort and the money to be spent on? Or can I just trust this level of risk? And, and, and again, adapt to a situation. So all in all those, those, those are some of the capabilities that, so I would say we supplement those technologies rather than, you know, kind replace.
Okay. Understood. Thank you. So, so this is the end of the Q and a section, so thank you all for your questions and your participation in this webinar. We have some unanswered questions, and if there are any other further questions, please free to get in touch with us, either copy or call or at tech democracy. And the mail information will be available on our website. And of course, on the website of tech democracy, thanks again to Ken and Gotham from tech democracy for a great presentation and for sharing their expertise and insight in this Q a as well. Ken, do you have any final thoughts to share with our audience, Ken?
Well, I'm just, I'm just gonna go out there and, and say that, you know, as professionals we've, we've been through this many, many times, this isn't the first rodeo or the first fire drill, so to speak. So don't try not to get mired in, in minutia when you're doing this, at least, you know, when you're, when you're first going into it, you know, just keep your wits about you and, and you'll get through it just fine.
Great Gotham. Do you have something to add,
Just thank you for, you know, attending this very important topic of GDR readiness assessment. And if you want to deep dive into a platform and framework at a more granular level, feel free to reach out to us for a one-on-one demonstration of the platform, and we'd be more than happy to set that up for you. Thanks again.
Great. Thank you. So we would be happy to welcome all of you in another webinar soon. Now, of course, very much looking forward to meeting some of you in real life at one of our upcoming events and especially the upcoming coming EIC early may, just before the GDPR comes into force there, I've heard the rumors that we plan to have a dedicated GDPR panic room. So maybe this is something of interest for those who are still not prepared then. So that's it for today. Thank you for your time and your participation. Thanks Ken. Go have a great rest of the day and goodbye.
Event Recording December 07, 2022
Panel | Why Access Management Is About Managing Risk
Event Recording November 10, 2022
Standards & Regulatory Frameworks Are Static, Security Isn't
Current frameworks from Cyber Essentials in the UK, to the NIST Cyber Security Framework, HIPPA, PCI-DSS and even ISO27002:2022 often take at least 18-24 months to agree by their governance bodies. The world is much faster moving that that, the fact many regulatory frameworks will take…
Cyber Hygiene Is the Backbone of an IAM Strategy
When speaking about cybersecurity, Hollywood has made us think of hooded figures in a dark alley and real-time cyber defense while typing at the speed of light. However, proper cyber security means, above all, good, clean and clear security practices that happen before-hand and all day,…
Exercising Your Cyber Crisis Plans
Webinar Recording September 23, 2022
A Comprehensive Approach to Solving SaaS Complexity
As businesses adopt cloud-based services as part of digital transformation programs to enable flexible working, boost productivity, and increase business agility to remain competitive, many IT and security teams are finding it challenging to gain oversight and control over the multitude of…
Mo – Fr 8:00 – 17:00

redpajama_set_name: RedPajamaCommonCrawl


text:
La Canada seeks truck ban on crash route
April 2, 2009 | 10:52 am
The mayor of La Cañada Flintridge says the city will ask U.S. Rep. David Dreier (R-San Dimas) to seek a ban on trucks on the route where a semi truck crashed into a bookstore, killing two and injuring several others. Mayor Laura Olhasso said truckers unfamiliar with the region rely on GPS systems to navigate Southern California's highways.
"If that gets done, all the rest follows," Olhasso said this morning. "It does highlight a larger problem. Truckers who are not familiar with a local area rely on their GPS for a direct route. If the GPS doesn't have that information, this will be a continual problem, not only in La Cañada Flintridge but communities across the country."
Los Angeles County sheriff's officials said the driver of the truck in Wednesday's accident was from Massachusetts. Marcos Costa, 43, has been arrested on suspicion of vehicular manslaughter.
"The driver lost control of his truck and collided into several other vehicles along Angeles Crest Highway, including the one the victims were in," sheriff's officials said in a statement.
The truck came to rest inside the Flintridge Bookstore and Coffeehouse.
— Andrew Blankstein
Photo: A firefighter pauses during rescue work. Credit: Luis Sinco
Other Times coverage
Truck driver arrested in deadly La Cañada crash
Girl Scout warned of road safety issues in La Cañada


BolderImage launches new iPhone app for Toodalu.
BolderImage is pleased to announce the launch of Toodalu 1.4. Toodalu is a unique social network that creates a real-time map on the website and iPhone app which allows you to let you and your friends find each other when youre going out or just hanging out.
Toodalu is aimed at letting users broadcast their current location to their friendswhether at a restaurant, bar, campus location or fun spot, Toodalu keeps user connected. It's easy . . .when you hit the town, open up your Toodalu iPhone application and a list of the nearest cool venues will appear. Simply tap the name of your location from the list and you have "toodled" your location.
Click here to get the free app.
Ability to create your own customized locations where you can Toodal from.
Ability to see thumbnail images of your friends at different locations.
Enhanced performance for the G3 network.
Ability to easily invite friends to join Toodalu from your phones contact list.
Do you have a unique iPhone app idea? Contact us today to see how we can make your idea become reality.


text:
Former Phoenix In Form As An Eagles
Newcastle Eagles/News/BBL/Former Phoenix In Form As An Eagles
The Newcastle Eagles go into this Friday's home BBL Championship at the Eagles Community Arena against Cheshire Phoenix in great heart and great form.
That comes courtesy of an excellent 104 – 94 road win at Surrey last Saturday and win that moved them to an impressive 4 – 1 start in the league.
Whilst it was a good all-round team performance that got the job done there was one outstanding architect and display that certainly grabbed the headlines. Newest Eagle CJ Gettys continued his hugely impressive start to his Newcastle career with another monster game.
Thirty-four points and nineteen rebounds for the 7' 0" Centre certainly helped his side to the victory and earned Gettys his fourth successive appearance in The BBL Team of the Week to add to his accolade as the league's Player of the Month for December.
Gettys was aware of how important and good the win at Surrey was.
Cohn In The Zone
Preview: Eagles vs Surrey Scorchers
Cohn Scorches Into Festive All-Star Five
"It was a good win to go down to Surrey and a tough place. They normally play really well at home so it was good for us to go down there get the win, build some more chemistry and keep the winning run alive."
The win was even more impressive when you consider Newcastle went into the game without veteran forward Darius Defoe and then lost American Mike Morsell early in the second quarter.
"We just want Darius to take his time and come back when he feels comfortable so he doesn't push it too far. Mike's just been bothered by injuries all year. He just needs to take some time to get fully fit and be ready when he's ready. That's what's important for us down the road."
There's no doubt with the way Gettys is playing it helps The Eagles cover those injuries a whole lot better and the big man is unsurprisingly delighted with his form.
"It's a great honour for me to be recognised in the way I have been in the league but I wouldn't be in those positions without my surrounding teammates. Fletch and the other guys give me the ball in great places to score."
"Basketball is a team game you'll hear that from everybody. Whilst it's nice to get individual accolades I wouldn't be able to do it without my teammates."
There's no doubting that the CJ Gettys that has exploded back in to The BBL this season is a massive upgrade on what was already a considerable presence and the work he's put in since the end of last season is paying dividends.
"My body has changed a lot from my first year at Cheshire to last year to now. I just decided to make that commitment in the summer. Not even for a basketball aspect but for down the road too. When I'm 40, 50 years old I want to be able to walk."
"If I'd played another five years at the weight, I was I don't think I'd be walking properly when I was 40. It's helped a lot to take the pressure off my knees but it's also helped my game tremendously. I'm a lot quicker and just in a better shape to last a bit longer."
Friday night is a big night for The Eagles and CJ in particular as he faces the side, he played for the last two years.
"Obviously Cheshire coming in on Friday means it's going to be a fun time for me seeing some familiar faces. Unfortunately, Cilo Latinovic is out for the season with a recurring injury and there's a doubt about Jalen Hayes."
"But the likes of Dizzy Lufadeju, Lou Sayers and a couple of those other guys will be fun to play against and seeing Ben Thomas and James Brice on the bench and Richard McNutt. It'll be fun to talk with those guys before the game."
"But as soon as that ball goes up it's all business. Playing at home is going to be a huge advantage for us. I think we need to give the fans what they're coming to see and that's a win and then we can take our roll in to Sunday when we go to Manchester. Our aim is another two wins this weekend but we have to be ready and play smart."
Tickets still available for tomorrow's return of Cheshire Phoenix and CJ's first opportunity to play his former club:
BBL,Cheshire Phoenix,CJ Gettys,Surrey Scorchers


Mars enters its sign of exaltation Capricorn a sign ruled by Saturn on 2nd May 2018 16:49 pm. Mars moves through Capricorn until 6th November. Due to this long stay on Mars in its sign of exaltation, this event carries a lot of importance. This movement can add to the vitality of a person. From 27th June to 27th August Mars moves in retrograde mode.
The country head is to be in the mood to assert his point of view aggressively. A war-like situation is likely to develop for some countries. Some Banks, financial institutions can have a concern about bad loans. A rethink about giving a large amount of loan is to emerge. New Business set up is to have a challenging time to remain afloat and prove worthiness. The public at large in India and other Asian countries can be under stress. This can be due to an ill-conceived decision by the government. On the economic front, a chaos like situation may develop among masses. Government is to take some firm decision to give a big push to the economy. For short term, this can backfire. On border front, India can have a challenging time to work on. A chaotic kind of situation may arise. This movement of Mars in exaltation seems to be indicative of turbulent time ahead.
Pavitra Jyotish here tries to explore what is in store for all Moon sign with help of Vedic Astrology.
Mars is the ruler of your sign. In view of the movement of exalted Mars carries much importance for you. Exalted Mars moves through the tenth house for your sign. The tenth house is about occupation alias Karma. This movement of exalted Mars seems indicative of a prosperous time for you on occupational front. This seems time to climb up the ladder and acknowledged your achievement. However, refrain from taking major decision related to occupation or finance, during retrogression of Mars. You are to remain in a comfortable position on the financial front. Exalted Mars is to add vitality and keep you energized. You need to take care of not getting injured unexpectedly. Does health concern get the best on your decision these days? Want to get best astro solution about your health? Ask for health report, a complete guidance to your sound well-being life.
Mars rules the seventh and the 12th house for your sign. Exalted Mars traverses through the ninth house for your sign. This can lead to disharmony with one in a confirmed relationship. Married one needs to refrain from stretching things too far and try to accommodate views of partner for life in order to preserve harmony in marital life. The business person in foreign trade is likely to get good opportunity to strike a big ticket deal with the foreign-based company. The job holder is to be entrusted to work upon a based abroad. This gives enough cause to cheer up. A business person is advised to trade cautiously during retrogression of Mars. Explore the success in your business and run it like a viable trade of your life. Our business report can guide you with every ounce of detail regarding astro solution, guidance, and remedial measures.
Mars holds a portfolio of the sixth and the eleventh house for your sign. Mars moves through the eighth house for your sign. The eighth house is about longevity, sudden loss or gain, occult and hidden grief. Some long-term health issue can catch up with you here. The issue is to be difficult to diagnose initially. Visit a specialist physician dealing with this kind of issue to prescribe due remedial measure to stop the issue from escalating and ultimately get rid of the same. Expenses related to family are likely to increase this time around. You need to take decision-related to finance after due deliberation. Refrain from major financial involvement for now. Worried about financial conditions? Is there no solution in sight? Well, choose our finance report and get appropriately phrased answered to your financial conundrums in life. Quality solution promised. Get it today!
Mars is measured as a most favorable important planet for your sign. Viewing this movement of exalted Mars carries much importance for you. Exalted Mars moves through the seventh house for your sign. For single this movement of exalted Mars is work well in getting the right person to marry. However, refrain from taking a decision during retrogression of Mars to save from complications. Married one is to need to make due compromises with a partner for life for the sake of maintaining warmth and harmony in marital life. Mars here is to keep you busier on occupational front. You are to enjoy good general health here. Wondered to know what can cure your personal issue? Choose our instant astrology solution and get a life-changing answer in terms of a guide, suggestion, and remedial measure.
Mars favors your sign most. It holds charge of important houses, the fourth and the ninth house for your sign. Exalted Mars moves through the sixth house for your sign. During movement, Mars' eyes own sign in the ninth house. You may experience some set back initially. However, sustained efforts are to help you gain lost ground and March ahead on road to progress. You need to keep an effective check on unwarranted expenses to remain in a healthy financial position. Remain open-minded to a useful suggestion from others. You need to handle matter related to finance much carefully. However, refrain from taking major decision related to occupation or finance, during retrogression of Mars. The worry for financial shortage off and on? Ask for a remedial solution for finance and get detailed guidance today.
Mars rules the third and the eighth house for your sign. Mars moves through the fifth house for your sign. This indicates that things may not go well for you with one with whom you are emotionally involved. Have a kind of pragmatic approach and do not get overly worked up. The new meaningful relationship is likely to take shape here during a social event. Your social circle stands to expand here. You may tend to be overly assertive here. You need to handle matter related to finance much carefully. You need to refrain from taking major decision related to occupation or finance, during retrogression of Mars. You are to remain in pink of your health here. Have something on the mind to share? Ask a personal question to our astrologer and get a reliable answer.
Exalted Mars now traverses through the fourth house for your sign. Mars eyes the seventh and the tenth house for your sign. Mars holds a portfolio of the seventh and the second house for your sign. The second house is linked with finance and family mainly. In view of this, movement of exalted Mars is to affect your finance in a positive way. The investment made earlier is to fetch handsome gain for you. You are to remain in a strong position on the financial front. You may need to increase provision for the family. Married one is not to feel happy in marital life. Are you facing marital problem off and on? Is it high time you got it resolved for good? Ask for astro solution to cure your marital problem.
Mars is the ruler of your sign and is also in charge of the sixth house for your sign. Exalted Mars now moves through the third house for your sign. Mars here is to induce you to take some well-calculated risk to push ahead of your prospects on the occupational and financial front as well. However, do not take undue risk to increase the inflow of money. Now seems a good time for a business person to plan short-term travel to rope in more high worth customers and boost sales. Job holder may be entrusted to work upon task-based outstation. You are to remain in a healthy financial position. No major health issue is to trouble you here. However, there is a possibility of some kind of infection catching up with you. Take due precautionary measures to save from infection. Having an issue in a relationship or worried about a surge in debt or any other issues? Ask for a personalized horoscope reading, giving right solution to your trouble.
Mars is in charge of the fifth and the 12th house for your sign. Exalted Mars now moves through the second house for your sign. The second house is linked with finance and family mainly. Viewing this you need to handle matter related to finance much carefully. Issue related family needs to handle much tactfully and with due delicacy. Refrain from taking decision-related to major financial involvement, during retrogression of Mars. If planets in your natal chart are also supportive, the major financial gain is likely to accrue for you here. You are to enjoy good general health this time around. Worried about your personal life? Ask two any questions of your choice and find their answers today. Reliable and on spot solutions to ease out your situations.
Mars becomes exalted in your sign. Exalted Mars traverses through your sign. Mars rules the fourth and the eleventh house for your sign. Movement of exalted Mars through your sign adds to your vitality and keeps you energized. You are to exert more to achieve your objective. You are to put more efforts to keep your self –esteem high. Some meaningful relationship is likely to take shape here. This is to work well to enhance your prospects on the occupational and financial front as well. You are to remain in a strong position on the financial front. However, you need to execute due discrimination in spending money for good. Have many questions on your mind to ask? Find proper and trusted answers. Intelligent and intuitive astro solution at your disposal.
Mars is in charge of the third and the tenth house for your sign. Mars now moves through the 12th house for your sign. This movement of exalted through the 12th house can lead to unexpected expenses. In view of this, you need to plan finance with long-term in view and keep enough provision for contingency. The period during retrogression of Mars seems significant about unplanned expenses. The business person needs to avoid short-term travel when Mars is moving in retrograde mode. You need to be much careful about health during retrogression of Mars. Even a minor issue can get escalated if not treated promptly with the due remedial measure. Want to dealt with your personal issue with solid astro solution? Choose our astrological guidance and break free yourself from personal issues.
Mars holds charge of the second and the ninth house for your sign. With Mars ruling the second house, this movement of exalted Mars carries much importance for you in a matter related to finance. Exalted Mars moves through the eleventh house for your sign. In view of this increase in the inflow of money is envisaged. However, do not take decision-related to finance in haste. You need to take decision-related to finance after due deliberation only. Aim at maintaining harmony in the family. You need to execute due caution in a new relationship. Choose carefully your question and let us answer your concern positively. Prompt and dependable solutions to love-related concerns. Get your questions answered today.


text:
NS_ASSUME_NONNULL_BEGIN
typedef void(^CaptureVideoOutputCallback)(NSURL * _Nullable outputFileURL, NSError *_Nullable error);

@interface RunsCameraManager : NSObject

#pragma mark -- Authorized

+ (BOOL)checkAVAuthorizationStatus:(void (^)(BOOL granted))handle;
+ (BOOL)checkRecordPermission;
+ (BOOL)checkPhotoLibrary;

#pragma hardWare And Session initialized

+ (AVCaptureMovieFileOutput *)movieFileOutput;
+ (AVCaptureStillImageOutput *)stillImageOutput;
+ (void)releaseAssociateObj;
+ (void)releaseAllObject;

+ (void)defaultVideoConfigurationWithCompleted:( void (^ _Nullable ) (void)) completed;

+ (void)registeredObserver;
+ (void)removeObserver;

+ (void)captureStillImageCompleted:(void (^) (UIImage *stillImage))completed;

+ (void)startCaptureVideoWithCallback:(void(^ _Nullable)(void))callback;
+ (void)stopCaptureVideoWithCallback:( void(^ _Nullable )(void))callback;
+ (void)captureVideoFinishedCallback:(CaptureVideoOutputCallback)completed;
+ (void)compressVideoWithUrl:(NSURL *)videoUrl completed:(void (^) (NSData * _Nullable data))callback;
@end

NS_ASSUME_NONNULL_END

redpajama_set_name: RedPajamaGithub


text:
cask 'livetail' do
  version '2.0'
  sha256 '960977b45cb758e629e3d9e352a57caef655ce1a312890dcceaa2754c24056a0'

  url "https://github.com/SumoLogic/livetail-cli/releases/download/#{version}/livetail_mac_os.zip"
  appcast 'https://github.com/SumoLogic/livetail-cli/releases.atom'
  name 'Sumologic livetail CLI'
  homepage 'https://github.com/SumoLogic/livetail-cli'

  binary 'livetail'
end


President Donald Trump's unilateral withdrawal from the Iran nuclear agreement is having real-world consequences for US and foreign businesses. Boeing is set to lose $20 billion in orders, but defense company share prices are up. The price of oil is also up. Host Marco Werman speaks with Steven Mufson of The Washington Post.


We are a business that cares about tomorrow. We strive to improve daily by becoming involved in our community. Having an experienced business since 1970 has enabled us to work diligently to get the deal done. Being a family-owned and operated business allows us to have a personal relationship with all of our customers. Come by and see us today! We would love to meet your next car-buying needs.


non pharmaceutical — What will you overcome?
Overcoming average can be aided by proper neutraceutical support. With the market flooded with products of questionable quality and efficiency, we are proud to offer ORTHO-MOLECULAR products for our patients. Third-party tested and only available from a physician, rest assured that we endorse these products because we truly believe they are of the highest quality.
The key to revealing your potential starts with a plan tailored to each individual including nutraceutical supplementation recommendations and lifestyle changes to maximize the synergistic effects of our program.
AdreneVive is formulated for those who are "stressed and wired" the blend of botanicals and key nutrients specifically formulated to cal a hyperactive stress response system and counteract the effects of daily stress. contains: L-theanine, Phosphatidylserine, ashwaganda root extract, rodiola rosea root extract, eleuthera root extract and skullcap root.
Formulated to to maintain healthy blood pressure levels by enhancing nitric oxide synthesis. NO (nitric acid) is a potent vasodilator commonly found in pre-workout drinks. NO has other primary health benefits other than aiding in pump amplification such as cell signaling and proper inflammatory response.
Our recommended multi-vitamin, Mitocore fuels your body on a cellular level to help your body systems and body run at an optimal level. lack of sleep, stress, poor nutrition and prescription medications can rapidly deplete energy reserves. Mitocore's special blend produces a dramatic increase of of immune function and energy output. mitocore was formulated for immune health and essential nutrition.
Time-Release Niacin includes powerful support for cardiovascular health. This formula is a unique sustained-release tablet which allows for maximal benefit with minimal side-effects.
Finally a fish oil that won't having you smelling like last week's catch! Orthomega® 820 is a high-purity fish oil supplement that supports cognitive function and healthy skin, joints and connective tissues. It also helps maintain a healthy inflammatory response and strengthens immune function.


Partners Seymour J. Reisman, David Peirez, Jerome Reisman and Joseph Capobianco were listed in the 2007 edition of New York Superlawyers in their respective areas of practice.
E. Christopher Murray appeared on Fox News' Cavuto Report discussing the civil liberty implications of the New York City Police's plan to install 3,000 surveillance cameras in downtown Manhattan.
E. Christopher Murray was appointed by County Executive Tom Suozzi and approved by the Nassau County Legislature to a three year term on the Nassau County Board of Ethics.
E. Christopher Murray appeared on Fox News Channel's Hannity's America. Mr. Murray debated separation of church and state issues with Sean Hannity during the Hot Seat segment.


text:
West Wyalong's Bud Cameron wins award for exceptional client focus
Bud Cameron is a relatively new addition to the Elders network but is already making a difference to local producers.
Just eight months into his new role as Farm Supplies Rep at West Wyalong, this month Mr Cameron was recognised for his dedication to the branch and its clients winning Elders' national Sales Performance Award.
Hard work and a focus on relationships both in-branch and with clients saw Mr Cameron recognised nationally amongst his peers.
Productivity of the West Wyalong team has doubled from this time last year and Bud attributes a renewed energy and attitude towards work.
"The biggest thing for me is building and maintaining relationships," says Mr Cameron.
"After a tough couple of seasons, it's been a challenge to get clients back in the door, but we are regaining confidence and are back on track," he said.
Mr Cameron centres all of his relationships on key values, prioritising his integrity above simply making a sale.
"Being honest and maintaining credibility have a big influence on how I operate," he said.
"Whatever you tell a client you're going to do, you need to commit and follow up, or that element of trust is broken."
Malcolm Hunt, General Manager – South, says that Bud has contributed significantly
towards improving the reputation and culture of the Elders branch in West Wyalong.
"Bud is already a leader in his team who plays an active role in fostering a winning culture in his branch," says Mr Hunt.
"His attitude towards relationships with clients and colleagues, combined with a focus on reaching targets has been a winning combination that is bound to continue to benefit the local community," he said.
Looking forward, Bud says that the branch is continuing to work with integrity and customer focus, to support their clients.
"We have a mixture of qualities that each staff member brings to the table, and when we support each other and work towards the same goal, the puzzle comes together".
"Everything is looking up for us here. I'm excited by the challenge of continuing our growth by supporting our clients and maintaining strong team morale."
Meagan Burbidge
meagan.burbidge@elders.com.au


I don't care how big you (think you) are. Treat people the way you want to be treated.
I wrote this and shared it on my social profiles the other day. It was retweeted, liked and commented on a fair amount. My message seemed to resonate with people.
What I didn't share was the story that inspired it. As you probably know, I launched a new business a few weeks ago called Futureforth.com.
I've been busy reaching out to my 1st Connections on LinkedIn who are CEOs of Nashville-area businesses. Most of these people are friends, some are people I've met at events or online.
Using LinkedIn's advanced search is a powerful way to find the people you need to connect with. My message is brief. I'm asking for five minutes for a quick phone call, so I can tell them about Futureforth and ask how I can help with their businesses.
One person I contacted is a successful entrepreneur, let's call him Bob. I won't bore you with his accomplishments because they won't seem that impressive when you hear what happened when I called him.
Bob's reply to my message was curt. He wrote that I could call him. When I tried to set a time, he said setting a time was useless. Instead, I should call him mid-afternoon.
I called him at 1:40 pm.
He hung up on me. I was flabbergasted. What a jerk.
He hung up on me again. Total jerk!
Thoughts raced through my head. I was tempted to share this and publicly shame him on LinkedIn, Facebook and Twitter. Who does that? Who hangs up on people? I realize he's a successful guy who has done very well with his Nashville business, but that doesn't give him the right.
I had to look back through emails and LinkedIn to see how we originally connected. He had asked me for my feedback on his business many years ago. We had met over coffee and I gave him plenty of free advice.
I decided I wanted nothing to do with Bob again and proceeded to remove him as a connection on LinkedIn. When you remove a connection you lose any private notes you made on the profile. So I decided to stay connected, because I never want to lose my note about Bob. My note is a little too colorful for me to reproduce for you here.
One day he'll forget about this and ask me for a favor or an introduction. I'll be sure to refer to my note and tell him to call me mid-afternoon NEVER. I'm all for forgiveness, but a jerk is a jerk.
Instead of publicly shaming him, I shared a quick thought about what transpired. I have always tried to follow that one simple rule my mum taught me — Treat people the way you want to be treated.


ITzetta provides full stack development solutions for both .NET and PHP applications. Our team of experienced .NET and PHP professionals will gather business requirements and provide an end to end solution or we will seamlessly join your dev team.
ITzetta's site designs are responsive and respond to the user's behavior and environment based on screen size, platform and orientation. Our responsive designs consist of a mix of flexible grids and layouts, images and an intelligent use of CSS media queries. The goal is to automatically detect and optimize a site's display based on the type of device that the site is being viewed on.
We assist our clients in engaging with target customers through social media channels. We can help our clients with their social media site setup and management and as their search engine optimization and content creation needs.
To build an end-to-end online shopping experience, your omnichannel presence must be strategically aligned with your marketing strategy and brand experience. Our work encompasses both the front end of your ecommerce presence — intuitive information architecture, smooth and seamless user experience, and attractive visual user interface design — as well as the back end of your online business.
Search Engine Optimization (SEO) is absolutely essential for increasing targeted and quality traffic to your website. Even small and medium sized businesses can optimize their websites in such a way that search engines consider their websites' content more relevant than their competitors' websites. Our SEO experts will work very closely with you in order to implement the strategy that fits your needs.
Local Search Marketing is the foundation of your online visibility. Without it you will miss a large part of local visibility with prospects that are within 10 to15 miles of your business. Local Search Marketing is about getting Directory Listings like Yelp, YP and CitySearch so local customers can find you. There are hundreds of these directories and it takes time, patience and know-how to get this done right and ITzetta can help.
ITzetta is focused on developing most innovative mobile applications that can help your company achieve its desired goals. Today's customer demands superior mobile experience and it's critical for any business to have mobile strategy as a part of their online offerings. We work with our clients to understand their requirements and devise a strategic development roadmap for mobile app development. Our goal is to create superior digital experiences by delivering most innovative mobile applications to our clients.
ITzetta is a full service web company that encompasses web based solutions, including, domains, hosting, custom development, web development, UX/UI & design, and we strive to provide the utmost technological software integration and development capabilities.


Part of any good trip is planning. And part of any good planning is asking those who know. Thusly motivated, I have been trying to contact and ask (occasionally naive) questions of anyone who has done a fair amount of traveling through the African outback. By far and away, the most experienced African explorer that I have spoken to was Ockie Muller, who – together with his wife May – spent nearly a year traversing Africa in a converted Unimog. It was an inspirational undertaking, covering almost every country on the East African coast and many more besides.
They have painstakingly recounted their journey on their website www.african-dream.co.za and have even gone so far as to record actual average day rates and expenses in the various countries they traveled through – making their site a goldmine of cost and experience-related information for anyone thinking of exploring the East African coast. Ockie, who now works as an expat in Nigeria, was kind enough to give up his time to answer my questions about his trip and advice for my own, which follow below for anyone who might be planning a similar journey or who would love to simply take a moment to live vicariously through their memories.
We managed to obtain an old ex military armoured troop carrier based on a Mercedes Benz Unimog chassis during November 1999. At the beginning of 2000 we stripped it completely, and only utilised the chassis, engine, gearbox, front and rear differentials.
After a long search we finally found someone that was prepared to custom built a motorhome according to our specifications. During the next 2 – 3 years our dream-home took shape in the workshop of Mobile Lifestyles (+27 12 3352021) – the owner: Fredrick Potgieter. The maiden voyage to test our vehicle was undertaken during June/July 2003 on a 4 week trip through Namibia.
We had further alterations/modifications made on our return by both Mobile Lifestyles and Steelite (+27 12 3357317) – the owner: Jan Bernadel.
Our vehicle was finally ready at the end of May 2004.
In your own words, what motivated you to undertake the trip you did?
I had a dream from very young to see the Assekrem Pass in the Sahara in Algeria – originated from a photograph in a magazine regarding the Paris to Dakar rally – I finally managed to drive up the Assekrem Pass & stayed over at the Sanctuary on top of it during the Sahara-crossing trip from Tunis to Lagos in 2007 – it was well worth it !!
How was your experience of Africa different from any initial ideas you had about the continent?
Africa is being exploited by a small number of Africans (politicians) that are connected to outside firms & governments.
Do you have any particular memories of the trip which make you laugh or feel saddened?
Sad: Africans becoming a nation of pathetic Beggars due to free hand-outs, soft loans & grants, etc from so-called "Humanitarian" NGO groups & organizations – really a HUGE problem !!
Do you think that the perceived danger of travelling rough through Africa is overstated?
What advice would you have for others hoping to travel up through Africa – and up the east coast in particular?


Items where Author is "Zuercher, D."
Scheepers, M.A. and Singh, R. and Ng, J. and Zuercher, D. and Gibson, A. and Bunce, C. and Fong, K. and Michaelides, M. and Olver, J. (2010) A randomized controlled trial comparing everting sutures with everting sutures and a lateral tarsal strip for involutional entropion. Ophthalmology, 117 (2). pp. 352-355.
This list was generated on Wed Apr 24 04:11:46 2019 +08.


text:
Metal band Iron Maiden launches $2 million trademark infringement lawsuit against Ion Maiden game
The Number of the Beast? $2 million
By Rob Thubron on May 30, 2019, 6:58 17 comments
WTF?! The holding company for British metal legends Iron Maiden isn't too pleased with the similarities between the band's name and 2018 first-person shooter Ion Maiden. The resemblance has led to it suing publisher 3D Realms for $2 million in damages.
3D Realms released Ion Maiden last year. It gained a lot of attention at the time for using the Build Engine that powered 1990s classics such as Duke Nukem and Shadow Warrior, meaning pixelated graphics and retro animations were the order of the day. Keeping with the retro theme, the Founders Edition included a 'floppy disk' that was actually a disguised USB drive containing a copy of the game.
In a lawsuit filed in the Central District of California court on May 28, Iron Maiden Holdings says the game is guilty of "incredibly blatant" infringement.
"Defendant's misappropriation and use of a virtually identical imitation of the Iron Maiden trademark creates a likelihood of confusion among consumers. Customers who view Defendant's video game and merchandise are likely to believe that Iron Maiden is somehow affiliated with Defendant," reads the suit.
In addition to allegedly copying the band's "steelcut" logo, it's also claimed the game's protagonist, Shelly Harrison, who originally debuted in 2016's Bombshell, takes her name from band bassist Steve Harris.
The suit goes on to claim the skull bomb icon found in the game is based on Iron Maiden's famous skeleton mascot, Eddie, and that Ion Maiden copies the "look and feel" of the band's own 2016 smartphone game, Legacy of The Beast, which is described as an "epic turn-based fantasy RPG," on Google Play.
Along with the $2 million in damages, Iron Maiden Holdings wants 3D Realms to stop using the Ion Maiden name and for the game's ionmaiden.com website to be handed over or taken down.
Iron Maiden's most popular tracks came during the 1980s with the likes of Number of the Beast, The Trooper, and 2 Minutes to Midnight. Whether the holding company consulted the group before launching the lawsuit is unclear. As a fan of the band who's seen them live on several occasions, I hope not.
3D Realms called the claims "frivolous" on its official Twitter account, adding that itself, co-publishers 1C Entertainment, and developer Voidpoint will review their options once they receive official notice of the lawsuit and will make any necessary decisions at the appropriate time.
"Regardless, everyone continues to work diligently on Ion Maiden to deliver the best possible experience later this year," the company wrote.
Ex-Tesla worker says he stored Autopilot source code on his iCloud
Pandora faces copyright lawsuit for displaying song lyrics
Samsung sued by Australian watchdog over "deceptive" Galaxy ads
Poland files a challenge to new EU copyright law
17 comments 246 interactions
PlayStation 5 VR will be wireless, gets eye/head-tracking for $250
Load Comments 17
User Comments: 17


text:
Q: LLVM: passing alloca as a function argument I want an LLVM IR code equivalent to
double x = 4.93;
printf("hello world: %f", x);

In my LLVM IR code, I got from godbolt and after neating the code, it will become something like
%x = alloca double, align 8
store double 4.930000e+00, double* %x, align 8
%1 = load double, double* %x, align 8
%2 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([20 x i8], [20 x i8]* @.str, i32 0, i32 0), double %1)

No error. No problem so far.

But to me, %1 look redundant. However, it looks like I cannot remove this medium. The following code
%x = alloca double, align 8
store double 4.930000e+00, double* %x, align 8
%2 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([20 x i8], [20 x i8]* @.str, i32 0, i32 0), double %x)

leads to error
llvm-as-9: test.ll:26:113: error: '%x' defined with type 'double*' but expected 'double'
%2 = call i32 (i8*, ...) @printf(i8* getelementptr inbounds ([20 x i8], [20 x i8]* @.str, i32 0, i32 0), double %x)
                                                                                ^

Now I am wondering if what I'm doing to remove %1 is really possible?

A: The alloca instruction returns a pointer, so in your code %x is of double* type. You have to load from a double* to get a double.
In your case it should be possible to create a double constant with 4.930000e+00 value and use this value as printf argument directly.
The same effect can be achieved by running optimization passes on your first snippet.

redpajama_set_name: RedPajamaStackExchange