What is CIAM and why do we need it?

The screen again. I got, I think I got preferable, revocable and scalable governable and constrain. So just for benefit, right. We just about ready to roll. We are folks. Wow. It's very unhappy. It's a need, that's shorting out.

It's an, it's me standing on this. Ah, Let's see. Right. And the one, all three, we've got, I think there's still some folks. Why don't you round up and we'll minutes, All yours Alexei, all mine so we can get started. Cool. So we've had our coffee and we've had those chocolates in with the passion fruit in them, a nice pleasant surprise when you've bit into that. So we not gonna start up. And we've got an interesting in my mind, happy discussion because we have three analysts from coming across, representing all around the world, government, a John and Graham.

And so I thought what would be an interesting thing here is to talk a little bit about cm and how it sort of differs, reach how we look around the world. So the first question I'm gonna put out each of you, first of all, is to do a, a, a one paragraph introduction of yourself and where you fit into things. And then the first question that so we can talk about is in terms of CIA, M how are they different in each of our different regions?

And so I can start off sitting first, where do have in I'm a senior Analyst in, in Germany, and, and I'm doing all kinds of work for all the new pillows that we do. So it's research it's advisory and its events. I'm John. I work out of the us office, lead Analyst, mostly focused on research should events. My Graham Williamson I'm with Asia Pacific, which is headquartered here in Singapore. I live in Australia, but I'm not there a lot. And we brothers and I too, and senior Analyst, and I mean, we months friends here, we all have to push up with Martin.

There's a moment Is probably no is in my opinion, the will almost person in terms of understanding the whole identity and access management space, as it applies to cloud migration and, and cybersecurity, but here's a hard task master. So as we're doing our, our, our documents, we very often hit them keep back and say up. So we can Mr. Raj over this, in that space. Okay.

So in, in terms of cm, which as a market is sort of established probably within the last 24 months, 36 months or so, we've grow up. How, how do each of you see cm in each of the regions and specifically how they different?

So again, I I'll start off with, and sort of looking from an EU perspective. Yeah. I don't know if it's EU perspective, but, but what I'm really realizing is that people are focusing on customers. You are focusing on these experience. So I think improvement of user experience, not having to create a single account for each site that they're using reusing credentials, but at the same time, doing that in a secure and, and privacy aware manner, this is something that I think is, is special for the market, at least.

So having both convenience and secure to privacy at the same time, and this maybe also reflects a bit from what we'll be talking about all these days about GDPR, we do not want to block our data. We want it only to be used for blacks. What about in the us?

Well, you know, carbon alluded to what I was called vast political differences earlier. And I think that that's really true.

And what, and that manifests itself in probably less of an orientation toward the user experience, more, you know, from a consumer identity perspective and more, how can we make more money out of people's consumer identities in the us? You know, it's about marketing targeted marketing, how do we extract, you know, maximum amount of information so that we can, you know, just in all the right places, there's a lot less concern about privacy, unfortunately, but that's not K Peter butter cross everyone in the us.

There are lots of us who are concerned about privacy, but at the moment, I think the reality is that we're, we're not really winning that battle. So cm is very profit driven, marketing focused from perspective. It's How about, how about we've got Australia, we've got Singapore and around APAC and I, that difference The there's vast differences across APAC, as well as what does consumer getting access management pretty mean? And where are we coming from? Where are we going to we're coming from a very divided, diverse environment in Australia is exceedingly different from Vietnam.

The however, one thing that we are aware of is there is some convergence happening as the millennial demographic becomes more well larger because it's growing and as it becomes more enabled in terms of flexing their muscles and doing their own thing and not putting up with what their parents put up with, we are seeing that people want very much the same thing. And one of the things that millennials want is a good user experience.

So for those, for those of us who are concerned about how to project a service to consumers is exceedingly important to start to, to realize now that it is a user managed access issue. And so I'm very pleased that, you know, to be here con initiative, to say, look, let's make sure we get this user managed access stuff. Right. And can I just, can I just say something for, for rock, got a couple of good videos on that website that you might want to have a look at on you, and it gives you a good view of what this means.

It means that when I come into a website, I wanted to work the way I wanted to work. I don't want to be scratching my head and say, how do I do the, as soon as, as soon as that friction comes, what the millennials do is start to tweet and you don't want that. Okay. If you're a bank, for instance, you don't want them to say, oh, what terrible trouble I've had. You want them to start tweeting? I went into the D site today and look what happened.

You know, it was great. So user managed access is, is exceedingly important. It's getting more important in AsiaPac as that convergence. I had absolutely nothing to do with that, but it's good to hear cause there's three different. I'm not sure I want your world, that marketing side of it, but looking into our crystal ball and looking forward here, one of the things both as implementers and, and vendors, one of the things we have to deal with, but we're forced to deal with is that regulation. And I'm gonna start with you, John.

And then in terms of looking into a crystal ball over the next sort of two years, again, from a regional perspective, what kind of regulations do you think are gonna become more important? Obviously holding Europe for lot of stuff this way. Cause the property cares. Do you see any in the us side of things?

I, no. I think there's more of an impetus towards deregulation actually at this point It's free for roll.

Well, yeah, so, I mean, I don't see regulatory pressures making a huge impact on cm in the us except as how it relates to other regions. And I think it's that external influence that into that probably will have the most impact on how CIA implementations happen in, because this colony saying earlier too, does it make sense for a company that's trying to be a global business to have several different kinds of CIA systems and what we do with citizens data, depending on That, that's an interesting sort of commentary on given the fact how regulation might factor and HIPAA and things like that.

Us has actually in front of those kind of regulations. Yes. And They don't care about, Well, yeah.

I mean, I think there are historically some regulations like HIPAA that have been good, but I think we need to wait and see what happens to the spirit of those regulations are the upcoming months. I mean, again, you know, we were talking this morning about FCC and that neutrality, I think that's kind related to this entire issue.

So it's, there are a lot of changes going on right now. It's hard to accurately predict what the impact will be for consumers. Graham. What about you said you've got a bunch of different countries or behaving very differently, but Yeah.

So again, just as a contrast to what we in Europe where Europe's put in GDPR, cause they could, right. It's member states have come together to form an agreement on this is how we're gonna deal with privacy in Asia Pacific. We don't have that accountability because we've got all these different countries that are doing things their own way. But one thing we are seeing here and I just want to put a part that's actually a very good presentation Thursday afternoon on cross border privacy, the front board privacy rules system that is being adopted in AsiaPac. So it's an APEC initiative.

It started some years ago, but it's now gathering steam, a Singapore joint back in SEP or indicated their attention to join back in September Australia indicated their attention to join at the November meeting in Vietnam. And so we are seeing a groundswell of interest in that. And what that's basically saying is, okay, countries that want to join, we are map their privacy regulation against a set of nine privacy privacy framework of nine principles. And then companies within those, those countries join CCP and get certified to it.

And then that gives citizens a, a trust where if you are dealing with a CCP C P R compliant or certified company, you can be assured that your privacy is being respected regardless of where your personal information might go. So a different attack. I'm not saying GDPR isn't important here, but I believe C PPR is more fitting with the Asia tech environment, Which brings us through our GDPR.

So, so Europe is, is probably further ahead in terms of those regulations cause GDPR and property also in terms of where that's are, where do you see their heading over the next two years? And, and specifically, do you see the impact in the other region?

Okay, first, first I like the idea that mentioned that you could do this. So there's the approach that we have all member states being put into the same regime after having individual data protection roles before, which was really, yeah, not that funny for business in the EU. Now it's aligned and really aligned by by may. And this is something that many organizations are still struggling to, to, to comply to. And this is really good work that they're doing. And I would not dare to, to predict what happens on the 26th of May not to talk about the one and a half year after that.

But in general, first of all, all organizations are really trying to work their way to be compliant or at least not in compliant to the GDPR. And of course this has influences on, on all the other reaches as at least as I expected as there is this aspect that the GDPR applies to every organization doing business with EU citizens or residents of the EU. And this will be a really a challenge for the organizations there and for the EU to impose any funds there.

So this is really an interesting thing to talk about, but, but I think yet Europeans and the European citizens are, are in a situations where they are getting closer to a unified region where they really understand what data protection for them means. And that is something that is good to have it on that large scale from complet EU. Okay. One more question. I'll come back to what you start off with Graham in terms of user experience and, and the user side of things, all the users that we are dealing with in the different regions Inherently Different.

And do you see that as leading to differences around how we address consumer identity? Can I say yes or no? Yes. They're different in that, you know, the vast differences in impact countries mean from extra point of view mean that it's a different approach. So for instance, like privacy is very much a Western construct. Okay.

If you go to Cambodia or Vietnam, privacy is not high on the list, but the, the, the no side of it comes in by the millennials in Vietnam and Cambodia are starting to have exactly the same capabilities and, and interest that the millennials in Singapore, Australia, which is I've now got a smartphone and that's basically the smartphone's one, right? It is the divisive choice that people want to, to use. And there's amazing things happening in terms of capability being built into that.

We mentioned fi earlier, you know, quite frankly, fi makes that smartphone more secure than that PC on your desk. So the capabilities are being built in there with facial recognition, with gesture, sort of brilliant demonstration of gesture, gestures that you do with your mobile phone are unique.

I, you know, did it three times and got my, was able to log onto a system. Another person tried to copy my gesture and couldn't, so that's beside the point. The millennials though are saying, I want to be able to do this. I now have with the financial side of things, I now have a wallet on my smartphone. I don't need a bank account. It was a fascinating program on TV the other night about banking environment. And what's happening in there in terms of the, what the banks are doing to support that.

But basically in country, such as that, the phone is now my wallet and that gives me a lot of capabilities, but equally I need, when it comes to C IBM, I, I, I need that ease of access and I do need, and going to become more important as people you develop further. I do need that privacy, that, that when I do a transaction, that it is being held secure. So does that, does that convergence happening? I believe across the region. Okay. Tell what about Europe, which Is more technological, mature. You can like that same question. Okay. First of all, yes, no.

As, as we have the, the GDPR regulations being more prominent in the media and, and also for, for, for the customers and individual consumers, and of course for the organizations that gets clear, clear visibility, and this is something that, that I think is true, and this is something that will evolve even more. But you mentioned the millennials, the I have kids, which are just 18 and 20 and things change for them, different, different for them. I've just read a statistic and I cannot quote the source.

So maybe I'm violating the terms and conditions here, but the statistics there that 50% of all Analyst cannot identify targeted advertisements for them. So they see it and they think it's content not versus notes.

And, and wow, that's a big number. I don't know it's true, but it shows the, the tendency where it goes to so people are, are no longer younger. People are no longer really caring that much about privacy, as long as they get the content that they want. And I think that is something that needs for me to education maybe by me from my kids.

But, but I think there's, there's some work to do. And there is a difference between that and last nothing. There is clearly a different notion of privacy when it comes to, to at least Asia and, and, and European Europe or general. I was surprised to, to give away my passport at check in at the hotel here, giving away my passport is something that is like giving away your pants. So it's really because in Germany, you're usually not allowed to hand over your passport, not talking about making photocopies or something like that.

And everybody who is scam it and trying to, to, to track you down for good legal reasons, but it's completely different. And it's something that at least new to me, sort of pull out, okay, John, you as well.

Yeah, Yeah, no, well, you know, I think, I think there are differences looking at users and user experiences around the world. And, and let's, let's just take the Americas as an example, cuz think of north America.

You know, one of the things that we talk about with regard to consumer and entity is a lot of the companies try to provide products that provide an omnichannel experience. So as opposed to other regions around the world where maybe primarily mobile based, we do have laptops, tablets set, top boxes, you know, connected cars. And I think there's a lot of work that needs to be done yet because the OmniGen experience is not really there. You know? And if that's something that the companies want to try to provide long thinking a reality.

So user experience definitely does have a different looking feel. I think in the us, north America, as opposed to south America, cuz let's say south America, I think may share some kind of characteristics in common with say APAC where again, it's a more mobile experience, but the market hasn't been saturated by consumer identity products there yet. Okay. Well that wonderful tone tells me that I'm getting towards the end.

If, is there a question? Any question in the audience? Go ahead. Yeah. I have one for yes. A follow up question. So you said the S right now are not really caring about, but you feel that as they grow maybe in the next 10 years or so they views would change and suddenly they'll become much more, more When they grow up. They'll regret it. Yeah.

But, but in general, yes, I think so currently there is this WhatsApp, Snapchat, I don't know what app thing on the mobile phone that does not end at 16, but it will maybe end at 24, 25 or 28. And I think having gone through this phase, they maybe, I hope that they will realize what they, what, what it was, what they did, which is not a, a judgment upon what they did, but really to understand that privacy is something that was more or less more before.

And, and that was something that is valuable after that, because having gone through this phase maybe can also be school teaching for them to learn from afterwards. Currently I see not only daughters, but, but everywhere sharing information that is highly private. Yeah. It's very usual.

And, and this most probably will change after that phase. I expect that, yes. I would say yes, I did address the privacy part, my response. So I think, you know, privacy can be important still in the us. I think that, you know, maybe our approach is sure, I'll give you my email address. If you'll give me $10 off this purchase and then I'll stick you in my spam folder so that you can try to block. It's a way it's a workaround that we've come to. I think many of us have multiple email addresses Well With, with that, it brings us to about time and I don't want to intrude our lunch time.

So Katrina you're coming up next call.