Thread by @marknca

up now at @awscloud #reinforce, “Data Protection & Privacy” with @JKenBeer, @jennybrinkley, & @clean_freak

☁️ #cloud #devops

. @StephenSchmidt introduces the session, which is a “fireside chat”

@awscloud #reinforce

Jenny is co-ordinating the chat. Anne is the director of Alexa Trust. Ken is the GM of AWS KMS

@awscloud #reinforce

Anne joined @awscloud during the pandemic and has been entirely remote. never easy but the new reality

@awscloud #reinforce

Anne’s credentials in privacy & security are deep and amazing

@awscloud #reinforce

ditto for Ken…

@awscloud #reinforce

this should be a great chat…maybe…hopefully

@awscloud #reinforce

“performative chats” are always hard to do well regardless of the venue (remote/physical). on stage, it’s always a bit awkward. this is where a podcast style format really works

people get comfortable, there’s no time crunch, no visible audience, etc.

@awscloud #reinforce

audience not an issue here but that’s probably even worse, they’re on a huge stage and no one appears to be there. that type of camera work is tough

Jenny, Ken, and Anne are doing well

@awscloud #reinforce

first question goes to Anne, “What have you seen in privacy over the past few years?”

@awscloud #reinforce

summary: global there have been huge advancements in #privacy, US lags because of the fractured approach. really hard to manage, lots of overhead, need a better, more consistent approach

@awscloud #reinforce

Anne, “We’re headed in a good direction generally…”

@awscloud #reinforce #privacy

“How do you get people to care about privacy?”

@awscloud #reinforce

Anne’s first word, “empathy”

💯

@awscloud #reinforce #privacy

she then moves to talk about words and how they matter. also peeling away technical terms and talking about trust. that’s the heart of the matter

@awscloud #reinforce

Ken adds that the level of complexity in technology today makes it hard to understand what data is out there, who can access it, what the intention of storing that data is, etc.

it’s hard to wrap your head around as a defender and as someone who’s data is entrusted to an org

“Complexity is hard for customers”, Ken Beer

@awscloud #reinforce #privacy

lack of access to is general a good thing for #security, it’s a hard thing for trust << Ken

@awscloud #reinforce #privacy

“You definitely need to understand your data”, Ken. he points out that this activity also requires you to understand where that data is and what’s done with it

@awscloud #reinforce #privacy

…on to the mis-perceptions around #privacy and how some critical conversations go in the community

@awscloud #reinforce

Anne talking about the push for early @Slack prospects wanting an on-premises version. natural push back against the cloud and a desire for an “I have control” feeling

need to have empathy to work through that...

@awscloud #reinforce

Anne’s tip (beyond empathy) is to find the principle or goal of what they’re looking for. not necessarily what is specifically is being asked for

on-prem request was a desire for awareness & visibility into data

@awscloud #reinforce

Ken on to some of the specifics of encryption; keys, HSMs, etc.

@awscloud #reinforce

a good overview of encryption in the @awscloud

more at aws.amazon.com/blogs/security…

#reinforce

Ken’s always full of great little soundbites, “Click a button to encrypt like automagic” 🤣

@awscloud #reinforce

you can tell from how Jenny, Ken, and Anne are talking about encryption and #privacy, that they’ve dealt with this subject for years

lots of experience in educating, being empathetic, and helping other understand the nuances

@awscloud #reinforce

Anne, “It’s a growing challenge for technologists to help consumers get comfortable with the technology we’re building” << there is so much to unpack there

@awscloud #reinforce #privacy

“You should see some tangible benefit is companies have your data”, Anne Toth << 💯

@awscloud #reinforce #privacy

Ken does not appear excited about this one

@awscloud #reinforce

…only because Jenny asked if he was

@awscloud #reinforce

“We don’t do anything with your data until we have clarity of your intent”, Ken << excellent point. simple example: how @awscloud handles data in region

@awscloud #reinforce

. @awscloud has 1,000 #security employees EMBEDDED IN OTHER TEAMS to help build that culture that ensures the security and #privacy story is in place before going live

#reinforce

Jenny shouts out AWS Artifact too! loves of ❤️ for the “service” today

@awscloud #reinforce

quote of the day, “Glib to say, hard to execute”, Ken << this applies to pretty much everything in #security and #privacy

@awscloud #reinforce

honestly, you should watch the reply later on. my comments didn’t do the talk justice. lots of great nuggets in there

@awscloud #reinforce

taking another break. back ~10m with “Governance, Risk, and Compliance” with Anil Markose

@awscloud #reinforce

next session in this thread 👇

https://twitter.com/marknca/status/1430210406287609861