Name: Distributed Defense for Growing Companies
Uploaded: 2025-10-22T20:25:04.442Z
Duration: 1 h 25 min
Description: Distributed Defense for Growing Companies

Transcript for "Distributed Defense for Growing Companies": Hello, everybody. Thank you so much for being here. My name is Michael. If you have not encountered me before today, I run content for Rippling IT. Really great to have you all here. I'm gonna give everybody just another moment or two to find their way into the room. But while we wait, we're gonna throw up a quick poll to get us all started, asking everyone what their biggest security challenge is at the moment. So you see a bunch of options there. Please feel free to share what you are wrestling with today, and there will be a few more of these poll questions as we get going today. So, so keep an eye out for those as we go today during the session. And, yeah, please lean in. Love to hear from you guys and and get some engagement today. Today, we are going to be talking about distributed defense for growing companies, something that I imagine many of you here can relate to as a challenge. We're gonna be talking to a Rippling IT customer of ours, Jacob McGonigle from Diana Health, and we will also have a, esteemed representative from our endpoint security partners at SentinelOne joining in the conversation today. So very excited to go through all of that with the group here today. Before we do that, couple of quick housekeeping items that I will cover quickly. Number one, you will be getting this full recording on demand, so you can watch it later and refer back to anything you heard. Number two, like I said, please feel free to use the chat and q and a fields while we're on today. Love to hear from you guys. We will try and get to everything we can during the session. For anything we miss, we will follow-up later by email. So that's all to say. Ask away. You will get an answer sooner or later. And number three, there's a bunch of related content that we have attached to the session today in Goldcast. You'll find links there to read some of the free guides we've published recently. You can check out our brand new IT maturity matrix there. Subscribe to our newsletter. Register for some future live events and webinars, some of which we'll talk about at the end of our session today, but I'm sure you get the idea. Lots of good stuff there, so please take a look. Check out whatever captures your eye. With all that said, I will go ahead and bring in Anit, Jay, and Jacob to take it from here. Thank you guys for being here. I will be lurking in the background during the talk. And being that it's October, of course, I will come back out at the end to spook everybody. So enjoy, and, I will be in the chat while you're all watching. Alright. Let's get started. I am so excited to be here today with Jacob McGonigle from Diana Health and Jay Ryerse from SentinelOne to discuss all things distributed defense and the nuances that goes into securing a hybrid work workforce. I'm sure it's not lost on anyone here that this is the go to model for organizations now. Since the pandemic, more companies have embraced it, and it's truly a win for a lot of employees, but it's also raised a ton of new types of hurdles for IT and security teams, ones that really didn't exist before. So I am so excited to be joined by both Jacob and Jay today to discuss all things in their best practices, leading their organizations, and supporting partners from the perspective of SentinelOne and I actually will turn it over to both of them to to briefly introduce themselves. Jacob, why don't we start with you? Sure. Yeah. Jacob McGonigle, director of IT for Diana Health. I've been an avid user of SentinelOne for many years now, so very familiar with the platform and and super excited to to share time with Jay today. So And Jay with your w. Yes. I'm Jay Ryerse. I lead the, global MSSP partner team here at SentinelOne. Been here several years, but, I have a long history as a partner beforehand. So working with SMB enterprise clients for many years on their cybersecurity solutions. Awesome. Well, to kick off this discussion, Jacob, I'm gonna start with you. As recently as five or six years ago, Diana Health probably would have thought about the IT environment somewhat differently, and probably differently from a security perspective. Today, you've got twenty four seven clinic clinics across three straight states, and you've got a telehealth operation that needs to be performance secure and HIPAA compliant too. And I imagine that's even before talking about your corporate employees, who I think are working remotely. So you have quite the complex environment. And so I would love to hear how are you managing now that it's a far more complex environment than you probably dealt with in years prior. Yeah. Yeah. Sure. Great question. I I think that the way that we've started to approach this is to streamline as many processes as possible, creating standardized formats for, every all the implementation processes. And and I think that started really in the the roots of our HR management platform, which just happens to be Rippling. So so we are actually currently migrating into, the IT side of of Rippling and aligning all of those processes. So that's, you know, everything from day one, as soon as we bring on, a new hire, their hardware gets provisioned from from day one with all of the necessary HIPAA compliant policies and and, everything from BitLocker to, password complexity and and even now to to WiFi, so we can install all of our native apps and the device is ready for the user on day one. So Yep. Makes a ton of sense. And, Jay, from your side, like, kind of zooming out a bit given that you support so many different customers, how has endpoint management in the threat landscape more broadly evolved with the move towards hybrid work environments? Yeah. You know, we we call it hybrid work environments, but I would say that the perimeter that we used to all sit behind, you know, in an office has evaporated. And so the reality is is that we've got users on devices working from multiple locations at different times of the day, accessing different data sources, in the cloud and then and the cloud made of tools plus what else, you know, the company is using themselves. And the ability to to understand the data flow, out moves, who has access to it, when they have access to it, has has quadrupled, if not more, in complexity. Just kinda what Jay was talking about. Right? You start thinking about the number of remote locations and the number of, of of telehealth all the way through their corporate environments. You know, most businesses are facing these same challenges. And, you know, in today's workforce, and you guys know this as well as anybody, you're hiring people in different parts of the of the world. You know, if not not just across the the The States or Canada or what have you, but you've got people working, in these remote locations that just makes it more and more difficult. And so, you know, aligning the the resources, the tools, your HR with your IT, with your cybersecurity makes all the sense in the world. And what do you think has stayed the same? Right? So a lot of things have shifted, but what, from your perspective, has stayed consistent as you've worked with customers? Humans. We We're unpredictable. We're messy. Yeah. Well and and they're still the weakest life. You know, they they they are the the there's a human firewall theme out there. I I do the more we we go through, you know, education and and teaching them what that looks like and what to look out for. But then, you know, leveraging AI and and some of the threat actors, you know, in that landscape, what they're able to do today that they can well, I mean, let me back up and kinda rephrase that. You're no longer getting an email from a prince in in in Nigeria. You're getting a well crafted email with real logos, with real links that were AI generated, and we're asking those humans to be able to decipher whether this is an attack or not, whether whether it's a legitimate request. And it's it's hard. It's messy. It's it's it's ugly some days for for people. And so, you know, staying ahead of it, matters. And that that's where, again, I'm gonna go back to to your your policies first, your education, you know, and then really make sure you've got the right technology to support those those motives. Yep. And this kind of ties into, Jacob, the next thing that I wanted to talk a little bit about with you, which is the setup of Diana Health. It's actually pretty high on complexity even in working with you as from a customer perspective, like, learning how your operation works. Can you walk us through what's required of you and your team with each new physical clinic location? And, also, maybe if you can speak a little bit about what you do from a training perspective to kind of manage this human component that Jay is talking about. Yeah. Sure. And and to echo exactly what he said, the human, eyes, you know, will be always the the weakest link. It's very hard to discern between a capital, an a capital l. I'm sorry. A lowercase l and an I sometimes. And Amazon, using zeros and o's, the the like, oftentimes you see those those, the tweaks where it's very hard to tell and I think leveraging AI will have to be, you'll have to have AI to fight AI because that's what we're fighting now. So it from, a deployment standpoint, you know, it's a huge coordination effort. We have, you know, everything from construction timelines to meet, ISPs and and vendors to coordinate, and medical equipment set up and and then, of course, security, to to put the bow on things. And I think, what we've done is is kind of leverage, real time phishing. We use, several phishing platforms to to do monthly, and and sometimes even more frequent than that, phishing campaigns, I think, are to keep people on their toes. And then, we we address that in a one on one fashion, just to bring knowledge and awareness to the end user. Not not to criticize or or, you know, cause concern for for their selves or you know, we wanna bring awareness to, what this the implications are of of a security breach for the end user, for the patient, for, the the company or the organization as a whole. So I think just shedding light on on the implications that it has kind of creates an atmosphere where people are they they they feel morally bound, you know, to to help as opposed to just clicking through things and, you know, ripping through emails. So but, of course, again, you know, I think leveraging AI AI is where it's gonna have to go, because the the things are just becoming more and more, advanced, you know. And, Jay, when you think about kind of we've talked a little bit about AI, but if you think about how attack vectors are targeting remote and hybrid environments, What how do you think about the trends that are unique to kind of the removal of the office perimeter? We could be here all day on that one. I didn't mean to give you a trick question. Yeah. I don't know that it seemed a trick question as much as it is. You know, you could go nine different directions with that. But the reality is is that what's happening with AI generated threats is moving faster than anybody thought possible. I was I was at an event, not long ago, and they were talking about a quote from from Bill Gates, right, one of the founders of Microsoft. And he was talking about AI and the impact of it. And he said, you know, we are we are overestimating its capability in the next two years, and we're underestimating it in the next ten. And so if you apply that into cyber security, and SentinelOne has been built on on AI since day one. Like, it's not new to us. It's not new in the last two or three years because Wall Street thinks it's important. We we started with machine learning and and behavioral learning back when SentinelOne was founded, and we've never stopped developing in that space. And then that's why businesses, you know, a lot like Jacobs, you know, think about setting a one in the equation. But the the complexity of attacks and how AI is being used is not what we think. Like, so many of us and I'm I'm gonna put the human effect back into it. People think that, well, okay. I'm gonna go to AI and say, write me a new ransomware attack. That's not really how it's being used. It's not how it's being generated. What's happening and I think I'm being a little technical here, but they're saying, AI, write me a script that will, encrypt and decrypt data. Okay. Now that I've got that, write me a script that will traverse, Windows machine or on an Apple machine and look at all the directories and categorize all the data. Now combine these two and run them together when this happens. And so it doesn't look like the kinds of attacks we've seen in the past that there there there are variables and variations on it, and it's just gonna make it harder and harder to defend. And so you're gonna need AI to defend against AI and and ultimately to defend the humans that will not know the difference between whether this is a real question or a fake question. And and at when you add that to the fact that the there's no more borders on our networks, I think that it's a challenge. And and the challenge, it will be solved with technology, it will be solved with hyper automation, and will be solved with partners like Rippling that are paying attention to the trends and trying to bring, tools or resources together to streamline the work that needs to be done because it's not just a cyber security or an IT problem. Right? Yeah. It it crosses all aspects of security or an IT problem. Right? Yeah. It it crosses all aspects of our business. But as business leaders, we sometimes think, well, that's the IT team's problem or cyber security's problem. You know, then that that team will take care of it. But it it starts with policy, starts with with how executives think about, you know, the risk to their business and how they're gonna measure it. And then decide how they wanna provide budget for it. And then then at that point, allocate resources to to go work on depending against the things that are most likely to impact that specific business. Yeah. That makes a ton of sense to me. Jacob, more from, like, an operational perspective again, like, it's pretty amazing Diana Health's, like, complexity of operations. When you think about, like, making your entire staff and all the clinics partners in security, how do you think about that enablement plan and kind of right, you have, like, your your, like, your staff at your headquarters. You have your, like, full time clinicians. I imagine you also have, like, contractors that that you work with as well. How do you think about that program? Yeah. So honestly, I I think it kinda ties back into what Jay was saying. I think as what he referred to as our our perimeter to our networks are no longer within our location or within our multi location because, I think most workflows have have migrated to a a SaaS platform or or software, web based softwares. So when you think of conventional security, you you can't think about the device, as as it pertains to, the installing of software. That's not happening anymore. Right? They're redirecting access to other places so that people can capture credentials. So while we do have a wide range of end users, people that are tech savvy all the way to I mean, we have analysts and we have actually have our own, internal engineers, all the way down to a front desk receptionist who's, you know, our patient care reps. So the the first face that they see when they're walking in the door is our patients. And, so even down to the the patients themselves that join our free and open WiFi, we're thinking about security on on those levels. Yeah. So it's it's not even just our internal teams, but also our our patients that are leveraging our technology in our clinics, down to ultrasound machines. Right? So I think where we're starting and this this is becoming the hot topic actually, currently, is role based security templates and using, leveraging our Rippling and HR environment to, to push, you know, least privileged access. And then of course, we have training campaigns that that happen and based off of, of course, what, where they work in the organization, of course, that being, a Rippling component as well. So I'm not seeing this. Just Yeah. No. And and I hate to keep tied it. I can so this is really how we're doing it. Yeah. We really I mean, you know, this is all I know it seems totally like I'm playing this out for Rippling, but I'm really not. This is this is what we're doing. Yes. I I think that in order to stay ahead, you I think it's very important to not lose sight of your it is a game of cat and mouse always. They are always trying to find a way to get around the things that you currently have. So if you're only focusing on what you currently have, you're gonna miss what what is coming. And, so securing SaaS platforms has been challenging. Again, not not to plug, Jacob, but, SentinelOne has been huge in in leveraging, that that SaaS identification. We recently actually, not to dive too far into the weeds, but we recently had an incident where, there's plugins for, like, Zoom, that they start cat their AI note takers, for for instance. I I don't wanna name names, but AI note takers that just listening on calls where we're describing, you know, having private conversations, maybe even with patients because of our telehealth front. But they're having conversations with patients and PHI is being discussed and note takers are taking notes and and they're free tools. Anybody can spin one up nowadays. So these are being pushed out in droves and and sometimes, inadvertently, people are connecting to them and not even realizing that it's happening. Nothing's being flagged on their computers because it's not installed. It's all SAS. And so it's it's a huge challenge. Right? And so we require that. Another reason why we we require and and leverage, AI so heavily. You know, it's it's interesting. When we think about that, Jacob, the last five years, seven, eight, ten years, we've been talking about shadow IT. And what we're really facing now is shadow AI. That's right. Now how do you control and secure a user from taking a a company spreadsheet that's full of data and and teaching them not to put it into chat GPT to do the analysis and simplify it, data, build business lines that I can then take to market not realizing that they put it into an unsecure version of that. No one understands what it means to be in a secure space versus unsecure spaces. Like, how do we know as users? We don't teach them that. Well, you can do this but not that. And, you know, putting in policies to stop those things is hard, you know. And and you'll you'll start to hear some things from us, you know, rolling out, a recent acquisition of a company called Prompt Security. We're literally looking to help lock down, queries on those web based AI tools that people are are just using because it makes their their days easier. And and how do we protect the company's data? But at the same time, you talk about, you know, the cloud services. Right? So you've got you've got your HR tools, you've got your IT tools, you've got your cyber tools, you've got your business line application tools, your accounting tools, and some of them are are most of them are SaaS these days. Right? They're they're cloud hosted. So how do you connect and secure the data that goes from your your accounting system to your HR system into your IT department, like, those communications where where the data is moving. And, ultimately, if you go back to it, that shadow AI becomes an issue because all those software vendors are adding AI into their into their tools, and nobody is assessing risk. And and it's it's a problem. Jacob, you're laughing. I'll let do something to add there. It just hits so close to home. I I I see it happening widespread. Like you said, like Jay Ryerse said, everybody's so gung ho to adapt, and, adopt, I'm sorry, AI, and that no one's taken a step back to to see what the security implications are. So maybe, Jay, just because you have, you know, you have the benefit of working with so many customers and and partners, how are you seeing like, what are the best practices you're seeing customers put in place from a visibility perspective where they're saying, hey. I at least have visibility into how AI is being used and, like, what types of software is being used, like, in a remote context, in a hybrid context, across the board? What are the best practices you're seeing emerge? Starts with policy. Are you gonna have a policy to enforce and to say this is acceptable, this is not? We're we're seeing companies start with a no AI policy. And then and then from there, they're setting up a committee that includes the the different people from from the the the various teams inside of the organization that are focused on where are the benefits, where where's the risk, and, you know, how should we be thinking about it, and then putting in, you know, risk matrix, whether they use one from this or from one of the other sources that are out there saying, okay, here's how we're going to consider deploying and looking at AI, and then here's how we're going to roll it out and test it. And I'll I'll give you a great example. I was at an event. It's probably been a little over a year now. And I was actually showing an audience what you can do with Microsoft Copilot because people just don't understand what's possible. And I opened up with some simple stuff. I opened up a, a PowerPoint presentation, and I asked it I prompted it to say, build me a presentation that talks about, the Navy's, Top Gun program, what it takes to to to earn the right, what is it, you know, just just give me a presentation I can use. And it thought for about forty seconds, built me 13 slides with speaker notes, so I wouldn't be reading the slides. The speaker notes were actually the history and then the details behind it. Some of the best images you've ever seen that you think that you literally were were taping the Top Gun movies. Were you a Top Gun? No. Okay. I'm not even a pilot. But I could've walked on stage and presented these 12 or 13 slides, and you would've believed that I came from that environment. Right. Okay? So then I opened up a prompt sort of asking questions. Right? Just just chatting with it. And I asked it. I said, what's the, earnings of our CEO? Could I see those name in there? And it thought for a little bit and came back and said, this is privileged information. The company that you were inquiring about is not publicly traded, and so you need to contact HR, which I thought was a great response. When I talked to the IT team that implemented that control, they actually went through, they had, like, eight of their their favorite geeks in the company just started asking questions. And they recorded all of them trying to figure out what they'd be asking, so they could go train what was acceptable to answer and what wasn't. And yet, here we are today, somebody will turn on Copilot inside of their environments that have not been secured and no one's measured risk, and that data has not been purged or or obfuscated for training. And a a a frontline worker could ask a question and get the answers that they should not have. That's the kind of stuff that I'm talking about creates risk both internally and externally. Because now think about it if a threat actor breaks into a workstation. They they fish a user, the user gives up their credentials, they log in to their their Microsoft console that has not been secured for AI. Now no one's put the time into it yet, and they start asking you questions. What what's the annual earnings of this company? Where are the tax records stored? Where's the payroll information? How much does does Jacob make? And then they can decide how they wanna launch their attack because now they know lots of information about the company that only took them a few minutes to gather. Yeah. So if I'm reflecting back what you're saying, it's like you have to assume that your employees want to use AI, and you have to proactively have an opinion about how they can safely use it. Because in the absence of an opinion, like, you are not able to secure the environment. Correct. And then you need the controls, the technical controls to start to lock it down and test it, make sure it's trained correctly the way you want it to function, and then roll down small doses and test, and then make it available for for general consumption. Like, it's it's a digital modernization project. Right. So I think, love, one question that I and I actually have it for both of you. I think kind of switching gears a little bit just, for people who are call who are joining us and are running, like, leaner, smaller teams, They're they're, like, a one person show, a two person show. What what are, like, your best kind of automation and best practices that, Jacob, you have for kind of running a lean secure IT program, but also, like, with this emerging technology? Yeah. I I think this, great question. I think this kinda ties back into, what we were talking about earlier, in in that automation. Anything that can be automated should be automated at this point. There's, Rippling has a really cool, feature where as we're onboarding our, end users, they get issued all of their software automatically based on their role, based on their location, how those things are locked down and secured, what they have access to inside of those environments. And so all of that is, automated. I think automation, especially if you're running a lean team, is extremely important and beneficial. And again, let's you keep focus on those newer and emerging threats like AI. I think what Jay was saying earlier, if I could elaborate a little bit on it, we have end users that are using AI. And as soon as companies start implementing it, they don't understand, the way that it parses the data that it's gonna have access to. So if you just upload all of your company company information, to an AI chatbot and then give your front desk receptionist who's not the most, you know, I think the person with the least amount of risk in the company is gonna be the person that's typically sitting at the front desk. Right? I mean, they they come in there nine to five, and I think that they take that security. I mean, if you're if you're looking at it from that that direction, they take that security a lot less, a lot less, as impactful as the rest of the company does. And so, if a bad actor gets access to their credentials and then therefore, has access to all the company data, is a huge security risk just from, a usability standpoint. Unless you unless you understand what you're doing with it, I think it's really important to understand that. You know, it's it's interesting, Jacob, because it's really no different than they than than giving card key access or keys to a building or to your offices. That's right. If if if you are Google and you've got a major campus with all kinds of departments in tech and r and d and finance and sales, like, those people can't move in most of the building other than places where they were given permission. But you've gotta do the same with your data. You know, you gotta contain it, put in the access controls, categorize the data so you know who has access to what. So that when that high risk employee, makes a, a human mistake, because we all make them. It's not just them, but they all make them. That the access that the threat at your has is limited. So the exposure is is is is modified. So if someone breaks into the front door, watching the front door to bring up FedEx package, it's one thing. But if they can then go through all the doors and go deliver that FedEx package all the way back to the server room or to the CEO's desk, something's wrong. You know, unless you're truly just a small company, you know, in a small space. But the the bigger you get and the more mature you get in your operations and the more valuable your data is to you, not to others, but to run your business. The the the more you're gonna have to apply the policy, the governance, the controls, and have those committees focused on thinking through what a bad day looks like. Right. That's what we're all trying to avoid. I have a fun crystal ball question for you both. If you could make a prediction in the next five years, and let's maybe take it Jay, you take it from more of a security angle. Jacob, take it more from, like, running an IT operations angle. What's your prediction of how AI will change your day to day the most in the next five years? I think it's I think that's a really tough question because Let's see the next two years. Did didn't we start off the conversation by saying we underestimate how far or we overestimate how far we'll be in the next two and underestimate how far we'll be the next five. I think AI is going to change the IT landscape so drastically things that I mean, if you say five years, I think AI may I I think level one help desk won't be a a thing anymore. Computers will repair themselves based on user input, and maybe even be integrated into it in in a way. I I think from an IT standpoint, staying ahead of the curve, you know, keeping an eye on the on the next threat, the emerging landscape, adopting because you're gonna have to adopt in this environment. You're gonna have to adopt quickly. So, yeah. I think I think I think low level IT things will be nuances, will be a thing of the past. Yeah. One thing that we're talking a lot about internally with Richland in terms of how how to produce better product experiences with AI, etcetera, is how do we maintain the controls and the policies being deterministic if I'm an admin, if I'm a security leader? So it's, like, incredibly clear the policies I'm leveraging within the software, but how does the experience of the software become more intuitive and more conversational with AI. But it's like in I think in order for AI to, like, truly power more efficiency, more automation within all of our day to day. So it's like both of those things have to be true at at at the exact same level of execution. So, anyways, Jacob, what you said just really resonates. Jay, what about on your side? So I I think Jacob actually touched on it. We talked about, you know, an IT person's role, the help desk role is gonna change quite a bit. And the analyst in the cybersecurity world can come out of college and move to level two within thirty to forty five days because the tools are doing the work and they're just having a decision, is this accurate? Do they agree? I think it's going to challenge our ability to critically think because we have to be able to say to ourselves, is the output I'm reading and reviewing make sense? Or is this a hallucination? Is this a a a an attempt to to go a different route because somebody's taking control of our AI? So that there'll be some different use cases for how people were used. But I I think that the ability to onboard a new analyst, but really any new employee, I mean, they can go up to speed faster because of the the technology that exists, that they can ask the question. I can ask a question of our systems today and get answers on things I've never but no one's ever trained me on. And I can get a a logical answer and all the content around it, see the videos, hey, I wanna go learn about this, and and and move quickly and not have to, you know, call my manager or, you know, go off that stream. I think from a technical perspective, the amount of data that we are going to create, is is going into the roof, and and it's gonna it's gonna it's gonna become exponential. And we're gonna have to have technology and AI to be able to sift through it, looking for the the the the proverbial needle in the haystack where the threat actor is doing something that, you know, we didn't know the threat was even here and and then be able to take action from that. But the automation of all those things, matters, I think, is back to what Jacob was saying. Right? The automation matters. Today, with the Jetech AI leveraging SentinelOne, and our hyper automation, we can actually triage an alert, analyze, what it is, what it means. We can we can ask it to go look at all the rest of the environment and see, you know, have you seen this in more places than just this one? Yeah. Is it just Mary at the front desk or is it, you know, is it Joey and and Stevie and and everybody else that's also got that they received the same email, for example? And then they're trying to target somebody. And we can do that in in seconds. So our mean time to respond is substantially faster where this might have taken thirty, forty, fifty minutes, you know, going to a machine, looking at it, trying to figure out what happened, and then going back in the launch and see if you saw these things. All that can be done automatically now. And the the decisioning and the the the containment control, remediation, all those things can be automated today. And so the question is is if that's what we're doing now, and that's just now starting to hit the street where people are seeing and using it, I can't imagine what two years or five years is gonna look like because again, more data, not enough people. We have to use technology to defend against technology. And like everything, you know, if you think back to this thing called Moore's Law where the the the speed of technology doubles every 18 months and the cost halves, people are now saying, well, what's gonna be new next week? Yep. And so it's it's it's it's moving fast. And I think that it it's it's fun to see, you know, with companies like both of yours, you know, leading the charge and and leveraging technology today to help us better defend your environment, your clients' environments, and your patients, and everybody else out there. So kind of coming full circle to close out, I have a couple more questions. You know, we began the conversation talking about how, like, people are right, like, employees, everyone interacting with your company are, in some ways, your greatest security vector and also your greatest partners. So I guess my question to both of you is, like, what is the most important as this technology has continued to emerge, like, what's the most important training or practice you've put in place, Jacob, to to really be partners with with everyone at Diana Health? Well, so first, I I think that, to establish that technology is there to help them. Right? I, I think some, especially nowadays, we have I think, we're hitting the bottom of the bell curve as it as it relates to technology in general. You know, you think back in, you know, eighties and nineties where the Internet was just being was startling widely being implemented and and used and adopted. And then, you know, the the.com boom and then everything's moving to SAS and now you have AI and and now everything exists online and everything is, that's the place. Virtual, AR, you know, I I think that everything is moving to a cloud. So to to help those folks that, aren't ready for the adoption that's, that's taking place. I I I think just getting on the, relating to them in a way that they can understand that the technology that we're trying to implement is is gonna help them for one. But also, hopefully, keep it more secure for them and and for, you know, all the patients that we're, dealing with. So, I think trying to relate to them, the the most non technical people, is by far the easiest way to get to them. You know, you can speak technical jargon all day long and it's very hard for some folks that don't understand it to understand what you're talking about. Even even in terms of, you know, training AI, how do how do you do that? How do you train AI to to give you the answers or to to release information the way you wanted to and and how do you leverage that for your business? I I think that understanding the technology has to be the foundation, to to enable, our people to to use it, to leverage it. Yep. Yeah. I agree a 100. I was sitting here thinking about it. We are at a at an inflection point. And I I I called the you've got mail moment. If if you think back to when when Amazon and Prodigy and CompuServe and all of them hit the market when when you've got mail became the thing, People started to say, well, I wonder what that is. I wanna go and go play with them a little bit. And and they started using it, and, of course, you know, Amazon I mean, Amazon, AOL, AOL grew like crazy. Yeah. Those little CDs that used to come in the mail. Do you remember that? Yeah. They came with the newspaper. I mean Yeah. It was insane that that, you know, that one technology was gonna replace it. And the the fact of the matter is is that that's where we are today. And so Jacob's right. You've gotta find your power users, your people that understand the risk and the ability to use the technology. Bring them up to speed a little faster. Automate some things for them. You know, help them start to see the the value of it, and then let them start to show the rest of the company. Guys, I was afraid to use it. I didn't understand what the risk was or what it could mean if I could screw it up. But, you know, Jacob and his team spent time with me to help me understand this. And here's what we did. Here's what we were able to implement. And now, I've got an extra two hours a day that I can actually focus on my job as opposed to chasing emails or Slack messages or Teams messages. And it just made me a a more productive employee. And by the way, I'm a lot happier now because I was on overload before. It was too much. And just start to show them what's possible, I think that then opens up the the playing field for how do you really leverage what AI will do for us in the upcoming years. Okay. My last question is a lot of people who who join us for these webinars are, you know, building their IT program, may not have the the decades of experience that both of you have. So my last question is on ending with what I like to call pearls of wisdom, which is, you know, you both have dealt with various security IT operations challenges, and challenges of both implementing tools and and security hurdles. What is just one thing that you wish you could have done differently or that you wish you implemented from day one to set up a success program both from a productivity perspective and a security perspective? Jacob, I'll let you start that one. Yeah. I think, definitely has to be framework for me. Okay. Creating a a framework that you can scale, is vitally important, right, to to any larger operation. I mean, even if you're starting from the from ground zero, having a framework that you're not recreating the will every single time. You you create this framework that, and and fill in the the information. You take the time to fill in the information, gather the information, and use it to your advantage. Right? Because the tools that we're gonna start using in the future are all gonna be powered by data. And so the the sooner you can start collecting the data for what what it means to for you to manage your IT environment, I think will be hugely beneficial for you. Yeah. I think frameworks are everything. I think there's there's a way to accelerate that. You know, when when I was a small business owner and and as I kinda matured and got to where we were, we realized that partnering early and often helped. Like, we we hire an attorney for a reason. We hire an accountant for a reason. We have a doctor for a reason. Like, they're they're the experts in their space. And I don't need to know, you know, that what my blood pressure means. I've met a doctor who will help me translate that and figure out what to do and what what actions I should take. IT, HR, cybersecurity are all three perfect examples of where look, if if if you're a a a tradesman, if you're in construction, if you're in, you know, a certain industry, go focus on that as your business and how you're gonna go to market and how you're gonna drive that business. And let let the experts help you do the rest because it's there's too much. Yeah. And we can't keep up with it. So leverage Rippling's frameworks. Leverage what would you learn from from your peers and ultimately partner because cybersecurity and IT are team sports. We are all better working together than we will ever be, had to have trying to do it ourselves. Well said. Well, Jay, Jacob, thank you both so much. I feel like the conversation really took its own shape and was probably even more AI centric than I than I expected, but I I truly think it's what's top of mind for all of us. I even even in my own Workday, I am always checking my chat g p t to be like, am I logged in on the right? Like, in the I was like, they really should make these UIs two different colors. So I just appreciate you both being so open and so thoughtful, and thank you so much for joining today. Of course. Thank you. Thank you both. Alright. Thank you all very much for being here. Of course, thank you to our three speakers. Hold on. I'm gonna make sure I actually have the right deck. Look at that. Okay. Thank you so much to our three speakers, Jay, Jacob, and Annique. And, also, thanks to everybody who came out today to watch and engage. That means a lot. So thank you for being here. I thought that was a really fascinating conversation. Hope you all found the same, of course. So while I do have everyone, I would like to preview a couple more sessions that we have coming up in the next few weeks in case you are free. First up, we've got a very cool seminar coming up a week from today, and that's gonna cover really all things Rippling IAM. There are a lot of new capabilities to that part of our platform that we spent a ton of time on and a ton of resources on in the last year or so. So a lot of that core functionality has just been vastly improved upon. I think this will be a really good chance for any of you who are interested to get up to speed with with where all that tooling stands today, where it's headed from here. So that is on the 20, same time as today. And then one week after that, I will be back in the interview chair, for a conversation that I'm really excited about with, Mike Britton. He is the CIO of Abnormal AI, pretty cool security startup that many of you will probably have heard of. And, a big part of his remit these days as CIO has been figuring out how that company can implement AI tools in the way that that it runs, which, again, like, being an AI company itself, I just think that's gonna be a a really cool interesting session for any of you who might be curious about how to approach that at your organization from someone who's pretty credibly on the front lines of what is a technological revolution going on right now. So, Mike will have a ton of clarion advice on that front. No doubt. So that will definitely be worth a listen. And that one is on, November 5, two weeks from today. Again, same time. So hope to see you all there. Now before I let you all go, I will quickly sing my gospel here, which is really just running you through the Rippling IT story and how we can help if you're facing any of the issues that we just heard about, with with Jacob and Jay. So to start with, and I I do wanna also remind people they can check out our IT maturity matrix, which I've linked in the related content today if you wanna see a more detailed version of this graph, which is admittedly low on detail. This is really meant only to be a basic summation of how we at Rippling have observed IT operations to typically scale. You start manual, then you start looping in some point solutions to take on some of that work as you grow. But we believe quite firmly, as you heard from Jacob, that there's a lot of power in end to end automation specifically. And that does not mean automation in one tool that must then be linked often manually to an automation in another tool and so on and so forth until all of that all of that work kind of cascades onto itself. We see a lot of this in the IT and security market because as many of you are no doubt aware, we have a lot of point solutions in this space. This slide is a is a far cry from capturing everything, and just the acronyms alone here are are daunting. There's quite a lot to patch together just to put, you know, a credible IT function together. So, for a long time now, the thesis behind rippling IT from the beginning has been bringing as much of that as we can into one singular system built around a comparably singular unified data architecture. And there's a lot of power in that mainly with what I mentioned, which is the allowance for end to end automation. Really just the the core takeaway here being empowering IT teams to do more with less across identity and access, device management, inventory management, including warehousing. There's a lot that we can help you do. So if any of that sounds of interest to you, please take us up on what I think is a pretty fun offer. Certainly had fun designing this slide. If you're one of the first five people to book and attend a demo for Rippling IT, take a look at at what this tool will look like in your own environment, we will happily gift you an Xbox Series x for your time. Not a bad deal in my humble opinion. So with that all said, I'm gonna leave it there. We can I can give you the next five minutes and thirty seconds or so of your day back? So thank you to everyone who stuck with us for the whole hour, and please do let us know if there's anything that we can help you with. We are here to help. That's what we're here for. So thanks for coming, and, we hope to see you again soon at one of those sessions over the next couple weeks that I mentioned. But until then, I will, wish you a happy rest of your Wednesday and a good rest of your week. So take care, guys. Bye now.