0:0:0.0 --> 0:0:7.380
Mah Jin-Khai
I'm apparently that umm the deployment issue is looks like have been resolved.
0:0:8.120 --> 0:0:8.760
Chris DiPierro
No, I.
0:0:7.530 --> 0:0:12.260
Mah Jin-Khai
I think Paul Martin needed to double confirm trying to find out the root cause.
0:0:13.180 --> 0:0:13.360
Chris DiPierro
OK.
0:0:13.250 --> 0:0:17.770
Mah Jin-Khai
I think they couldn't find the root cause, so not sure why it's appending, but I've I've continue for a lot of again.
0:0:19.100 --> 0:0:21.170
Chris DiPierro
Or Andrew.
0:0:22.240 --> 0:0:22.710
Duraid Wadie
Hang on.
0:0:22.720 --> 0:0:23.800
Duraid Wadie
Hi, Chris it OK.
0:0:24.550 --> 0:0:25.250
Mah Jin-Khai
Hello.
0:0:25.360 --> 0:0:29.180
Mah Jin-Khai
Anyway, I just done the recording for Susan and Keith.
0:0:30.380 --> 0:0:33.840
Mah Jin-Khai
OK, I will let you do do the talking on the technical scoring.
0:0:34.980 --> 0:0:35.610
Duraid Wadie
Yeah.
0:0:39.170 --> 0:0:39.320
Mah Jin-Khai
Yeah.
0:0:45.300 --> 0:0:45.970
Mah Jin-Khai
Yeah, I don't worry.
0:0:35.620 --> 0:0:46.910
Duraid Wadie
So I can only really shell the platform in the skull, not the whole product state, because you're recording it well, it's yeah.
0:0:46.920 --> 0:0:47.260
Duraid Wadie
Yeah.
0:0:47.270 --> 0:0:48.570
Duraid Wadie
So it's it's fine.
0:0:48.680 --> 0:0:49.640
Duraid Wadie
Let's go through it.
0:0:52.430 --> 0:1:1.390
Duraid Wadie
So the scoring really done on what we call a maturity assessment guide that I put together regarding radio, what we call it, well affected systems.
0:1:1.400 --> 0:1:4.850
Duraid Wadie
It's really the what would be creative clouds.
0:1:4.930 --> 0:1:6.540
Duraid Wadie
I would say follow the beginning.
0:1:6.550 --> 0:1:13.890
Duraid Wadie
The price is really do and that's really how we do a lot of this Technical delusions when we assess the companies ourselves.
0:1:15.10 --> 0:1:19.590
Duraid Wadie
So I've been really asked to do this is a very I would say minimal technical due diligence.
0:1:19.600 --> 0:1:30.680
Duraid Wadie
Not really a lot of details into it that's been done ready on all growth, strategic and some of the sustained product as well, just to show the business really where we are lacking.
0:1:30.850 --> 0:1:33.880
Duraid Wadie
It's it's really not a negative impact at all.
0:1:33.890 --> 0:1:35.700
Duraid Wadie
In fact, it's more of a positive impact.
0:1:35.710 --> 0:1:49.290
Duraid Wadie
This because once the guys you know see that they say ohh OK so we lock in on XYZ areas that we need more investment, more direct resources into them, more scale project towards those areas.
0:1:50.180 --> 0:1:58.670
Duraid Wadie
So the current really trying to cross all the product really is the three areas testing, security automation, all of them to be honest.
0:1:58.850 --> 0:1:59.100
Chris DiPierro
Umm.
0:1:58.680 --> 0:2:14.680
Duraid Wadie
They give a take most of the product actually like that from Platform point of view is similar story really the you know the through the testing to the security automation is OK in the platform is not really liking at all is actually scored 7% from what I've seen.
0:2:15.510 --> 0:2:16.260
Duraid Wadie
What does that mean?
0:2:16.270 --> 0:2:22.570
Duraid Wadie
It's mean we need a better pipeline taking all the way from development to staging to production.
0:2:23.990 --> 0:2:34.160
Duraid Wadie
That's really what that means to basically like with without a lot interaction happening across layer of most tests, more the security into the pipelines really integrated to all of those.
0:2:34.690 --> 0:2:37.370
Duraid Wadie
Just to give you a really important I'm sure Chris, you've seen this course, right?
0:2:38.260 --> 0:2:38.460
Chris DiPierro
No.
0:2:39.900 --> 0:2:42.730
Duraid Wadie
Ohh your screen share it with him.
0:2:42.740 --> 0:2:43.220
Duraid Wadie
Sorry JK.
0:2:45.780 --> 0:2:46.440
Mah Jin-Khai
Uh, what's that?
0:2:47.210 --> 0:2:49.670
Duraid Wadie
Did you share the score with the Chris?
0:2:50.260 --> 0:2:51.540
Mah Jin-Khai
No, I didn't score.
0:2:51.630 --> 0:2:57.150
Mah Jin-Khai
I I didn't share it with him yet, so I'll I'll talk to gonna share in this call.
0:2:57.310 --> 0:3:1.740
Duraid Wadie
Let me let me just share that specific one with you.
0:3:0.360 --> 0:3:2.880
Mah Jin-Khai
Yeah, yeah, yeah, yeah.
0:3:5.630 --> 0:3:7.660
Duraid Wadie
So it's very simple really.
0:3:7.670 --> 0:3:8.400
Duraid Wadie
It's nothing in it.
0:3:8.410 --> 0:3:16.540
Duraid Wadie
So the first one really is the architecture, technology, security and dusting automation.
0:3:16.760 --> 0:3:18.360
Duraid Wadie
And that's really just an overall scope.
0:3:18.370 --> 0:3:18.970
Duraid Wadie
Venezuela.
0:3:19.280 --> 0:3:26.770
Duraid Wadie
So security on on this thing, it's really it's the same story across almost all the products that we have.
0:3:27.140 --> 0:3:27.360
Chris DiPierro
Umm.
0:3:27.410 --> 0:3:27.760
Mah Jin-Khai
Ohh.
0:3:31.140 --> 0:3:31.360
Chris DiPierro
Umm.
0:3:27.200 --> 0:3:32.50
Duraid Wadie
In fact, some of them are really lower than this to be honest with you, it's not something you can control.
0:3:32.60 --> 0:3:35.50
Duraid Wadie
This is really more of a resource and actually tooling issues.
0:3:35.60 --> 0:3:39.620
Duraid Wadie
I would actually say cross ID agent products overall.
0:3:39.630 --> 0:3:40.450
Duraid Wadie
Really, it's it's.
0:3:41.330 --> 0:3:41.830
Duraid Wadie
Yeah, go on.
0:3:38.780 --> 0:3:42.700
Mah Jin-Khai
Umm it it is that we are lacking or two.
0:3:42.710 --> 0:3:50.200
Mah Jin-Khai
Either the Veracode scanning code scanning and the and the image artifactory scanning.
0:3:50.350 --> 0:3:54.880
Mah Jin-Khai
That's the only thing left NONN and and thus as well, yeah.
0:3:52.470 --> 0:3:55.570
Duraid Wadie
Well, it's bigger than that, actually it's it's more.
0:3:55.580 --> 0:3:56.880
Duraid Wadie
It's not just that, right?
0:3:56.890 --> 0:3:59.780
Duraid Wadie
It's so I've been asked what to do after this.
0:4:0.450 --> 0:4:0.670
Chris DiPierro
Hmm.
0:4:0.210 --> 0:4:0.870
Mah Jin-Khai
Yeah, true, true.
0:4:0.270 --> 0:4:13.520
Duraid Wadie
So they asked me, ready to pull a security playbook, which is all of the head of devs across all Ideagen will follow doesn't matter what the product is fed, ramp or not for dropped compliant will follow that I've done that security book really.
0:4:13.530 --> 0:4:14.640
Duraid Wadie
I've shared it with the guys.
0:4:16.200 --> 0:4:19.450
Duraid Wadie
I'm not sure what the waiting for to approve it, but it'll give or take.
0:4:19.460 --> 0:4:20.750
Duraid Wadie
It's very simplified.
0:4:20.760 --> 0:4:22.350
Duraid Wadie
One page security book.
0:4:22.440 --> 0:4:35.370
Duraid Wadie
It shows really what we need to do in through the pipelining and the two, I'm not the toolings yet, but actually the concept of the tool needs to have XYZ and then which is related to static scard.
0:4:35.860 --> 0:4:40.930
Duraid Wadie
The third party scanning the dynamics accounting as well as the infrastructure as code scanning.
0:4:42.20 --> 0:4:42.250
Chris DiPierro
Umm.
0:4:42.10 --> 0:4:42.300
Mah Jin-Khai
Yeah.
0:4:42.310 --> 0:4:45.740
Mah Jin-Khai
I think for platform we don't have the dynamic scanning.
0:4:46.390 --> 0:4:48.170
Mah Jin-Khai
We only have, yeah.
0:4:46.520 --> 0:4:49.110
Duraid Wadie
Yeah, none of the product have dynamic scanning.
0:4:49.120 --> 0:4:50.530
Duraid Wadie
So that's, that's the period.
0:4:51.880 --> 0:4:52.770
Mah Jin-Khai
No one, OK?
0:4:50.540 --> 0:4:53.680
Duraid Wadie
None of them do 90% of the product.
0:4:53.690 --> 0:4:58.100
Duraid Wadie
Don't even have the third party scanning and and Ideagen, so This is why.
0:5:0.330 --> 0:5:0.550
Chris DiPierro
Umm.
0:5:1.480 --> 0:5:1.800
Mah Jin-Khai
OK.
0:4:58.110 --> 0:5:2.410
Duraid Wadie
That's why the scores are so low to dance with you, apart from all of that.
0:5:2.500 --> 0:5:3.720
Duraid Wadie
What happens on top of this?
0:5:3.730 --> 0:5:10.160
Duraid Wadie
That is a process of how you guys, when you're going to see a critical and high, you go really follow it.
0:5:13.430 --> 0:5:13.570
Mah Jin-Khai
Yes.
0:5:14.560 --> 0:5:14.850
Chris DiPierro
Umm.
0:5:11.150 --> 0:5:17.910
Duraid Wadie
So it's not really just having the tool, actually the process, what happens when you see these are coming up, if they'll make sense.
0:5:18.770 --> 0:5:18.980
Chris DiPierro
Umm.
0:5:18.800 --> 0:5:19.0
Mah Jin-Khai
Umm.
0:5:18.770 --> 0:5:22.280
Duraid Wadie
So this is not being shared yet with the all head of devs.
0:5:22.290 --> 0:5:27.460
Duraid Wadie
We also the the the playbook which is I need to follow up lady with with Joe and see when he wants this.
0:5:29.210 --> 0:5:30.210
Duraid Wadie
Baby, why?
0:5:28.290 --> 0:5:36.950
Mah Jin-Khai
Umm we we are currently following the process of CU CCSU which is they really published in the Corazon.
0:5:37.560 --> 0:5:40.470
Duraid Wadie
Hmm Reddy similar, but it's actually the same Jackie.
0:5:37.650 --> 0:5:41.0
Mah Jin-Khai
I think that not much different, not much difference there.
0:5:41.80 --> 0:5:42.80
Mah Jin-Khai
So, so, so.
0:5:42.130 --> 0:5:45.200
Mah Jin-Khai
So it looks like nothing much I can do from our side.
0:5:45.240 --> 0:5:45.390
Duraid Wadie
No.
0:5:49.170 --> 0:5:49.650
Duraid Wadie
Yeah.
0:5:45.210 --> 0:5:49.660
Mah Jin-Khai
Asset we buy the tools are we evaluating the code or something?
0:5:49.710 --> 0:5:50.200
Duraid Wadie
Yeah.
0:5:51.760 --> 0:5:51.900
Chris DiPierro
But.
0:5:50.210 --> 0:5:54.760
Duraid Wadie
So I've evaluate them before they asked Mike to go through all the more details.
0:5:54.770 --> 0:5:57.320
Duraid Wadie
Again, I give him a massive success.
0:5:59.50 --> 0:5:59.250
Mah Jin-Khai
Umm.
0:5:57.330 --> 0:6:1.560
Duraid Wadie
Criteria is now it was a bit different today than actually how it was.
0:6:4.600 --> 0:6:4.880
Mah Jin-Khai
OK.
0:6:1.630 --> 0:6:7.270
Duraid Wadie
I would say couple years ago when I've done this, but yeah, there's not much you can do.
0:6:7.280 --> 0:6:8.960
Duraid Wadie
What it what happens after this, right?
0:6:8.970 --> 0:6:11.840
Duraid Wadie
So once we have the security book and they published it, make it public.
0:6:17.150 --> 0:6:17.410
Mah Jin-Khai
OK.
0:6:22.830 --> 0:6:22.990
Mah Jin-Khai
Umm.
0:6:12.970 --> 0:6:25.150
Duraid Wadie
More scale projects need to be created ready for for those, so you need to think about how am I gonna integrate the which part I need to integrate all these scale project and through my pipelines as well.
0:6:25.160 --> 0:6:26.220
Duraid Wadie
You don't want to do this manually.
0:6:27.130 --> 0:6:27.420
Mah Jin-Khai
True.
0:6:28.750 --> 0:6:29.90
Chris DiPierro
So.
0:6:27.480 --> 0:6:29.860
Mah Jin-Khai
True, I I think it should be.
0:6:29.930 --> 0:6:30.730
Mah Jin-Khai
Yeah, yeah, Chris.
0:6:31.320 --> 0:6:37.80
Chris DiPierro
Well, I mean, OK, I'm gonna ask a question that there's not gonna be able to answer is really what it comes down to.
0:6:38.650 --> 0:6:38.910
Chris DiPierro
Right.
0:6:38.920 --> 0:6:40.180
Chris DiPierro
So we gotta go buy some tools.
0:6:40.490 --> 0:6:48.100
Chris DiPierro
The outcome of of that is gonna be every product basically in the organization is gonna do some sort of work on dev OPS and I'll mention and all like myself. Great.
0:6:48.500 --> 0:6:59.890
Chris DiPierro
Uh, yeah, we need to add them as scale projects, but also we're doing this big grid mapping exercise right now that is basically allocating all the resources in the company.
0:7:0.120 --> 0:7:8.980
Chris DiPierro
So what's the expectation that's been communicated to you around like timeline of actually dealing with any of this is really what it comes down to?
0:7:21.770 --> 0:7:21.960
Chris DiPierro
Umm.
0:7:21.840 --> 0:7:22.20
Mah Jin-Khai
Umm.
0:7:27.650 --> 0:7:27.920
Mah Jin-Khai
Umm.
0:7:27.860 --> 0:7:28.700
Chris DiPierro
Umm, sure.
0:7:31.400 --> 0:7:31.600
Mah Jin-Khai
Umm.
0:7:9.480 --> 0:7:37.260
Duraid Wadie
Yeah, that is not really a timeline, but it's within the two years of a 525 to 26 I've been really been very hard on the guys on, you know like with John Joyce says we need to get this into 525 because what happens is once the integrate these tools, right, you're gonna see so much and known to better for the one year might not be able to fix none of this stuff but maybe not that much for platform to Venus with you because it's the way it's architected the technology is chosen it's different.
0:7:35.130 --> 0:7:37.650
Chris DiPierro
Well, I mean the.
0:7:37.980 --> 0:7:58.290
Chris DiPierro
Yeah, I mean, we might be the special flower, but I mean, if it come comes down to, you know, let, let's just say for the sake of argument, that are some of our target products like Dev and wire or whatever, have a bunch of stuff that they gotta go fix all of a sudden this impacts us or if you will vision into IHOME pretty greatly, right?
0:7:58.830 --> 0:7:59.120
Duraid Wadie
Nope.
0:7:58.300 --> 0:7:59.750
Chris DiPierro
So is it gonna be?
0:7:59.760 --> 0:8:4.310
Chris DiPierro
Hey, we bought a bunch of new tools, you know, in Q2 of this year.
0:8:4.320 --> 0:8:7.950
Chris DiPierro
And then all of a sudden, it becomes the immediate priority to fix all of these things.
0:8:7.960 --> 0:8:13.410
Chris DiPierro
Like I worry that this is gonna this not distract cause I don't.
0:8:13.500 --> 0:8:15.970
Chris DiPierro
I don't wanna distract makes it sound like it's not important.
0:8:15.980 --> 0:8:17.30
Chris DiPierro
I don't wanna give that impression.
0:8:17.40 --> 0:8:17.570
Chris DiPierro
It's it's.
0:8:24.550 --> 0:8:24.860
Mah Jin-Khai
Uh.
0:8:17.580 --> 0:8:27.60
Chris DiPierro
It's important to do this stuff like I think that's true, but we're not gonna just materialize resources overnight to go deal with this that are not otherwise occupied, right, so.
0:8:27.990 --> 0:8:28.710
Duraid Wadie
Yeah, right.
0:8:31.810 --> 0:8:32.490
Chris DiPierro
Sure, of course.
0:8:27.720 --> 0:8:37.0
Mah Jin-Khai
I think we can, we can focus on the high and critical problem for that and then low, low, medium, issue we can we can we can address it.
0:8:37.10 --> 0:8:39.670
Mah Jin-Khai
I mean, just create a story and address it later.
0:8:40.40 --> 0:8:45.820
Mah Jin-Khai
So I other than Veracode, are we looking like snake all these things?
0:8:45.870 --> 0:8:46.990
Mah Jin-Khai
So no, not good enough.
0:8:46.520 --> 0:8:49.10
Duraid Wadie
Yeah, I've given really love.
0:8:49.60 --> 0:8:52.750
Duraid Wadie
The guys free tools to look at part of the evaluation.
0:8:52.760 --> 0:8:53.310
Duraid Wadie
Only three.
0:8:54.510 --> 0:8:55.280
Duraid Wadie
That's what you.
0:8:54.70 --> 0:8:56.150
Mah Jin-Khai
OK. Umm.
0:8:55.290 --> 0:8:56.280
Duraid Wadie
Yeah, it's not that many.
0:8:56.290 --> 0:9:0.200
Duraid Wadie
It's just three, but it's criteria Square really big to take all the boxes.
0:9:0.210 --> 0:9:2.320
Duraid Wadie
It's not the set again, right?
0:9:7.240 --> 0:9:7.440
Mah Jin-Khai
Yeah.
0:9:13.190 --> 0:9:13.440
Mah Jin-Khai
Uh.
0:9:25.400 --> 0:9:25.700
Mah Jin-Khai
OK.
0:9:27.940 --> 0:9:28.500
Mah Jin-Khai
Hmm.
0:9:28.540 --> 0:9:29.320
Mah Jin-Khai
OK, OK.
0:9:33.390 --> 0:9:33.610
Chris DiPierro
Umm.
0:9:2.770 --> 0:9:35.810
Duraid Wadie
Might not for you, JK because you guys heavily using telephone or right you know my you might actually use the structure scanning you part of their phone might have me call them telephone connect which is you can create your policies within telephone cloud itself and it actually applies to every telephones you'll write that something is not been explored in idea Jenny yet device with you because most of these tools are actually weak at one of those we call them the the cloud templates really.
0:9:36.240 --> 0:9:44.70
Mah Jin-Khai
When when you I right now, I think only cops team using telephone because they needed to deploy into multiple region.
0:9:44.140 --> 0:9:45.550
Mah Jin-Khai
I'm not sure is that be too late?
0:9:50.400 --> 0:9:50.580
Duraid Wadie
You know.
0:9:45.600 --> 0:9:51.460
Mah Jin-Khai
V If we do that in the telephone cloud, but sounds like we should, we should.
0:9:51.470 --> 0:9:54.820
Mah Jin-Khai
We should integrate in a in a in a development planning it.
0:9:53.950 --> 0:9:55.180
Duraid Wadie
I mean that will be.
0:9:55.530 --> 0:9:57.840
Duraid Wadie
That'll be the ideal for you for you guys, right?
0:10:1.20 --> 0:10:1.240
Chris DiPierro
Umm.
0:10:0.910 --> 0:10:1.540
Mah Jin-Khai
OK.
0:9:57.850 --> 0:10:1.600
Duraid Wadie
But not the ideal for in the entire the business that makes sense.
0:10:1.890 --> 0:10:2.650
Mah Jin-Khai
OK. OK.
0:10:1.910 --> 0:10:8.500
Duraid Wadie
This is what I mean because you use a telephones is easier to do it that you put the policies and off you go and have everything.
0:10:8.510 --> 0:10:12.240
Duraid Wadie
You're right, it follows those policies and that's really how Terraform is works with it.
0:10:12.250 --> 0:10:14.160
Duraid Wadie
However, that's one way of doing telephone.
0:10:14.650 --> 0:10:14.910
Mah Jin-Khai
OK.
0:10:19.950 --> 0:10:20.580
Mah Jin-Khai
OK.
0:10:14.520 --> 0:10:21.840
Duraid Wadie
The other ones are actually uses like a CT scanners really to do all that the first.
0:10:20.720 --> 0:10:22.590
Mah Jin-Khai
I I think no you guys.
0:10:21.920 --> 0:10:31.200
Duraid Wadie
I mean, I understand Chris was coming from the Venezuelan 100% right, but the first hurdle really is actually getting the pipeline work in an integrating with it.
0:10:31.210 --> 0:10:33.610
Duraid Wadie
That's the first hurdle, if that makes sense.
0:10:35.280 --> 0:10:35.500
Chris DiPierro
Yeah.
0:10:33.20 --> 0:10:49.260
Mah Jin-Khai
Umm I I pretty confident it shouldn't be too difficult to integrate into pillar because most of the time right all these tools has a blah blah into integrate with Jenkins or all this stuff of work.
0:10:49.230 --> 0:10:49.430
Chris DiPierro
Umm.
0:10:49.430 --> 0:10:50.110
Mah Jin-Khai
We have tried that.
0:10:50.120 --> 0:10:55.190
Mah Jin-Khai
We planned that and so now we just less than the springboard to publish some of these report out.
0:10:55.750 --> 0:11:0.30
Mah Jin-Khai
Of course, the the more time is to investigate what's wrong with the report and this and that.
0:11:0.880 --> 0:11:5.240
Mah Jin-Khai
Uh, maybe you need to fall into two different kind of uh.
0:11:7.170 --> 0:11:7.880
Mah Jin-Khai
Strategy.
0:11:7.890 --> 0:11:11.830
Mah Jin-Khai
So for for for that they have a proper pipeline.
0:11:11.840 --> 0:11:14.50
Mah Jin-Khai
They should have integrate with let's say example.
0:11:14.60 --> 0:11:19.430
Mah Jin-Khai
Let's say if we put the Veracode we should integrate code easily for product.
0:11:19.440 --> 0:11:20.380
Mah Jin-Khai
They don't have pipeline.
0:11:21.240 --> 0:11:25.560
Mah Jin-Khai
I think they still can upload it manually for the first time to understand what are the problems there.
0:11:26.250 --> 0:11:26.460
Chris DiPierro
Umm.
0:11:25.720 --> 0:11:31.450
Mah Jin-Khai
At least they can understand the the whole situation of the security measurement there.
0:11:31.620 --> 0:11:37.840
Mah Jin-Khai
So I mean the result of the report, so probably we can you can think about it that that's just my suggestion.
0:11:37.240 --> 0:11:40.550
Chris DiPierro
Yeah, I mean, I again, I'm not really.
0:11:46.450 --> 0:11:46.660
Mah Jin-Khai
Umm.
0:11:40.560 --> 0:11:54.230
Chris DiPierro
I'm not trying to bring any negativity to it like I I think this is all good practice stuff, but also it's just that in the meeting yesterday where we officially adopted like OK ours for the business for like the next year and none of this is on that, right.
0:11:55.140 --> 0:11:55.260
Mah Jin-Khai
Yeah.
0:11:54.290 --> 0:11:59.230
Chris DiPierro
So the question is, how do you balance that right?
0:11:59.240 --> 0:12:6.590
Chris DiPierro
Like the stuff that's in the OK hours are like cross sell and make Helix updates and things like that.
0:12:6.600 --> 0:12:6.730
Chris DiPierro
Right.
0:12:7.190 --> 0:12:14.60
Chris DiPierro
And and nowhere in that, and some of some tech OPS stuff like, you know, reduce cycle time and all that kind of stuff.
0:12:14.70 --> 0:12:23.820
Chris DiPierro
So that that's good, but it's not, hey increase, you know, maturity score or security scoring right from whatever it is you know by whatever percentage or something like that like.
0:12:23.830 --> 0:12:43.860
Chris DiPierro
So I feel like there's kind, you know, are we either we're gonna go spend a bunch of time doing this and that's gonna distract, distract from the other things that we have deemed to be more important or there's a gap here and we should have this kind of stuff should have been in like kind of the tech OPS, OK, hours for the year, right.
0:12:43.870 --> 0:12:47.50
Chris DiPierro
So it's, you know, one of those two things, so.
0:12:49.460 --> 0:12:50.900
Duraid Wadie
I completely understand cluster.
0:12:50.910 --> 0:12:53.850
Duraid Wadie
I saw the yeah, this is this is exactly why I told Joe to be honest with you.
0:12:54.290 --> 0:12:54.500
Chris DiPierro
Umm.
0:12:53.860 --> 0:12:59.310
Duraid Wadie
I told him, OK, so now you guys, you can see the scores crossed the whole state, right?
0:12:59.360 --> 0:12:59.610
Chris DiPierro
Umm.
0:13:0.280 --> 0:13:1.730
Duraid Wadie
And he said, how are we going to approach us?
0:13:1.740 --> 0:13:6.590
Duraid Wadie
And the first way you'd be able to approach anything like that really is you start your scale projects on them.
0:13:7.340 --> 0:13:7.570
Chris DiPierro
Umm.
0:13:7.40 --> 0:13:7.870
Duraid Wadie
You can't just.
0:13:10.640 --> 0:13:11.130
Chris DiPierro
Yeah, right.
0:13:7.880 --> 0:13:13.890
Duraid Wadie
I mean that because it's not a resource for this the the old scale flow, Jack, none of them read have results in mind.
0:13:19.770 --> 0:13:19.980
Chris DiPierro
Umm.
0:13:13.900 --> 0:13:24.90
Duraid Wadie
For none of these, which is the three areas I'm talking about 3 the security testing and automation, all of the scale of logic that I've went through, none of them really almost tackled.
0:13:23.480 --> 0:13:24.640
Chris DiPierro
None of it's there, yeah.
0:13:24.100 --> 0:13:26.360
Duraid Wadie
This is like not even 4% of them.
0:13:28.870 --> 0:13:29.110
Chris DiPierro
OK.
0:13:26.370 --> 0:13:32.850
Duraid Wadie
There's not even 4%, but you can see where we are resource lock it which which is a bigger picture.
0:13:39.730 --> 0:13:40.380
Chris DiPierro
What Tat test?
0:13:31.720 --> 0:13:41.300
Mah Jin-Khai
Because at the OK I can understand for the CSU one, the security one, but the test automation we are expecting Srivijay department to do that.
0:13:40.390 --> 0:13:44.980
Chris DiPierro
Test automation it to be to be clear, test automation is one of the one of the targets.
0:13:45.450 --> 0:13:50.110
Chris DiPierro
So so that one I'm less concerned about, it's more on the security and like third party stuff, but.
0:13:51.960 --> 0:13:52.650
Duraid Wadie
Umm, yeah.
0:14:6.300 --> 0:14:6.460
Mah Jin-Khai
Yeah.
0:13:52.660 --> 0:14:13.790
Duraid Wadie
Yeah, I don't think they need to be concerned that much across from from Platform point of view, because I think it will be much less issues from because the technology use and they be honest with you and the architecture you're using, it'll be much less problematic to Venezuela, you and and the platform than any other pillar like take your own.
0:14:14.100 --> 0:14:14.290
Chris DiPierro
Here.
0:14:13.800 --> 0:14:20.400
Duraid Wadie
Please review for example light and something is not being scanned like that for 10 or 15 years.
0:14:20.920 --> 0:14:21.560
Chris DiPierro
Right, yeah.
0:14:21.870 --> 0:14:24.510
Duraid Wadie
No man magine the the the scale issues there.
0:14:25.770 --> 0:14:25.980
Mah Jin-Khai
Uh.
0:14:25.830 --> 0:14:26.570
Duraid Wadie
Yeah.
0:14:26.770 --> 0:14:30.950
Duraid Wadie
So yeah, I mean, This is why I told Joe uh, I'll wanna speak with him.
0:14:30.960 --> 0:14:31.960
Duraid Wadie
Really, I don't know.
0:14:31.970 --> 0:14:37.0
Duraid Wadie
When is it my next meeting with him to go through all the scale project and the security?
0:14:37.10 --> 0:14:38.0
Duraid Wadie
I think he's actually.
0:14:38.330 --> 0:14:45.680
Duraid Wadie
So we have a meeting ready to go through the security book and actually how to actually make it public for everyone at the same time.
0:14:45.690 --> 0:14:45.940
Duraid Wadie
Really.
0:14:48.220 --> 0:14:48.420
Chris DiPierro
Umm.
0:14:45.950 --> 0:14:53.730
Duraid Wadie
How we're going to implement that and within the business, they won't probably be doing this won't be somebody else actually driving this, I would say.
0:14:55.510 --> 0:14:55.920
Mah Jin-Khai
So.
0:14:55.970 --> 0:15:1.900
Mah Jin-Khai
So let's say continue with the gritty other than Veracode workout Tuesday.
0:15:5.810 --> 0:15:6.540
Duraid Wadie
But not playing.
0:15:1.910 --> 0:15:6.640
Mah Jin-Khai
We still need to make it at least better score.
0:15:8.210 --> 0:15:8.580
Duraid Wadie
Yeah.
0:15:6.650 --> 0:15:9.0
Mah Jin-Khai
I will spend more than eight, I guess.
0:15:8.590 --> 0:15:10.140
Duraid Wadie
So from your point, yeah.
0:15:10.150 --> 0:15:12.560
Duraid Wadie
So from radio your point of view actually JK.
0:15:14.430 --> 0:15:16.200
Duraid Wadie
They wanna stop using Sonar Qube.
0:15:20.360 --> 0:15:20.690
Mah Jin-Khai
Ohk.
0:15:16.210 --> 0:15:21.770
Duraid Wadie
I don't want to stop using sonar cube for the quality part of it, not the security part of it.
0:15:20.700 --> 0:15:23.200
Mah Jin-Khai
OK, OK, OK.
0:15:21.840 --> 0:15:25.230
Duraid Wadie
The Venezuela they wanna keep pushing, using it for the quality side.
0:15:24.270 --> 0:15:29.0
Chris DiPierro
Or are we gonna ever upgrade to like the like paid version of center?
0:15:29.250 --> 0:15:31.240
Chris DiPierro
If we do that OK.
0:15:30.720 --> 0:15:32.510
Duraid Wadie
They don't wanna pay for it to Venezuela.
0:15:32.520 --> 0:15:35.0
Duraid Wadie
You because it's it's just don't wanna do it.
0:15:36.850 --> 0:15:37.0
Chris DiPierro
OK.
0:15:35.10 --> 0:15:38.480
Duraid Wadie
I'll ask many times but same same question many times.
0:15:39.180 --> 0:15:39.500
Chris DiPierro
Gears.
0:15:39.690 --> 0:15:40.50
Mah Jin-Khai
OK.
0:15:39.440 --> 0:15:46.110
Duraid Wadie
The problem is so not a cure becomes as expensive if you combine line, they call them.
0:15:50.0 --> 0:15:50.210
Chris DiPierro
Umm.
0:15:54.860 --> 0:15:55.80
Chris DiPierro
OK.
0:15:46.120 --> 0:15:55.150
Duraid Wadie
They're not the the lines of code across all the products that we have to Veracode, the cost, you wouldn't be that much different as we think to be honest with you.
0:15:55.800 --> 0:15:58.580
Duraid Wadie
And the problem is an enterprise version of sonarqube.
0:15:58.590 --> 0:15:59.620
Duraid Wadie
You have to host it yourself.
0:16:0.630 --> 0:16:1.10
Chris DiPierro
Oh dear.
0:16:1.700 --> 0:16:2.230
Duraid Wadie
Yeah.
0:16:2.240 --> 0:16:3.710
Duraid Wadie
So that's the other issue of it.
0:16:3.720 --> 0:16:12.830
Duraid Wadie
So you have to host it, cluster it and distribute it, because it's the repos we have in the dev, we have cross all the countries.
0:16:13.40 --> 0:16:16.430
Duraid Wadie
We won't be efficient enough, I would say so.
0:16:22.260 --> 0:16:22.490
Mah Jin-Khai
Yeah.
0:16:23.750 --> 0:16:23.970
Chris DiPierro
Umm.
0:16:16.440 --> 0:16:29.130
Duraid Wadie
Yeah, the the sole operation because they don't actually offer on cloud enterprise layer sonique only the Dev layer which is is got maximum number of lines of code and that's it.
0:16:29.650 --> 0:16:29.870
Mah Jin-Khai
Umm.
0:16:29.170 --> 0:16:34.60
Duraid Wadie
You have to go to the next you have to initiate another tenant, another tenant and another tenant which is really not ideal.
0:16:34.940 --> 0:16:35.260
Mah Jin-Khai
OK.
0:16:35.780 --> 0:16:44.700
Duraid Wadie
But if we use it only for the quality side, not the security side, you know, like you, JK for example logs and it says OK, I wanna see my quality measures for unit testing for code smells.
0:16:44.710 --> 0:16:47.230
Duraid Wadie
That's about it, not the security side.
0:16:43.150 --> 0:16:49.10
Mah Jin-Khai
Umm me I am not sure.
0:16:51.0 --> 0:16:51.740
Duraid Wadie
Yeah, yeah, yeah.
0:16:51.750 --> 0:16:52.260
Duraid Wadie
You can.
0:16:52.310 --> 0:16:53.70
Duraid Wadie
Yeah, yeah, yeah.
0:16:49.20 --> 0:16:54.710
Mah Jin-Khai
Can we turn off the security measurement in the May once we have Veracode?
0:16:56.490 --> 0:16:56.680
Duraid Wadie
Yeah.
0:16:57.630 --> 0:16:59.640
Duraid Wadie
Oh yeah, yeah, definitely can't turn it off.
0:16:59.690 --> 0:17:1.580
Duraid Wadie
Yeah, yeah, yeah, definitely can't.
0:16:54.720 --> 0:17:2.790
Mah Jin-Khai
I think maybe we can turn it off or else will be like too much of duplicate things to to umm because yeah, yeah yeah.
0:17:3.300 --> 0:17:15.90
Mah Jin-Khai
Because I think the, let's say when when a customer wanted to buy our software, they did check the code coverage as well, that there's something quite important as well.
0:17:15.320 --> 0:17:22.30
Mah Jin-Khai
They wanted to ensure they bought the software with the quality there, so there's something need to need to consider.
0:17:22.600 --> 0:17:23.240
Mah Jin-Khai
OK, good.
0:17:23.250 --> 0:17:25.250
Mah Jin-Khai
Good, good to know about the the security.
0:17:25.300 --> 0:17:26.500
Mah Jin-Khai
How about automation?
0:17:26.830 --> 0:17:30.80
Mah Jin-Khai
Umm, what are the things that we need to do?
0:17:30.720 --> 0:17:32.290
Duraid Wadie
Yeah, not to mention, yeah.
0:17:30.530 --> 0:17:32.730
Mah Jin-Khai
I mean from, from from perform right?
0:17:32.930 --> 0:17:38.250
Mah Jin-Khai
We have strong API automation but not all the services covered because we only have one person to do the job.
0:17:39.580 --> 0:17:40.60
Mah Jin-Khai
Umm.
0:17:40.160 --> 0:17:44.200
Mah Jin-Khai
And then there's no automation on the regression features.
0:17:44.210 --> 0:17:44.810
Mah Jin-Khai
One yes.
0:17:45.40 --> 0:17:45.680
Mah Jin-Khai
Regression.
0:17:45.690 --> 0:17:46.30
Mah Jin-Khai
No.
0:17:49.900 --> 0:17:50.850
Duraid Wadie
Said the similars.
0:17:46.520 --> 0:17:51.270
Mah Jin-Khai
So these are the situation with our platform, shared services AI, yeah.
0:17:50.980 --> 0:17:52.690
Duraid Wadie
Yes, similar story.
0:17:52.700 --> 0:17:57.870
Duraid Wadie
JK I'm I supposed to write another book for automation across all idea Jen?
0:17:58.380 --> 0:17:58.570
Mah Jin-Khai
Umm.
0:17:58.420 --> 0:18:4.410
Duraid Wadie
How all the pipeline should really be working and you shouldn't be a big deal from from your point of view again.
0:18:4.500 --> 0:18:4.690
Duraid Wadie
Yeah.
0:18:8.150 --> 0:18:9.500
Mah Jin-Khai
Yeah, I know, I know, I know.
0:18:4.700 --> 0:18:24.510
Duraid Wadie
I mean, you and ARC is the least impacted of this to be honest with you because both of you are the next generation product and all the technology under it's it's much easier but what their business looking for, right it's they looking for a fully automated pipelines from Dev, staging 2 deployment that makes sense.
0:18:25.320 --> 0:18:25.680
Mah Jin-Khai
OK.
0:18:24.580 --> 0:18:25.890
Duraid Wadie
So they don't want this.
0:18:26.280 --> 0:18:28.750
Duraid Wadie
They don't want somebody like in there doing this.
0:18:28.760 --> 0:18:34.780
Duraid Wadie
There, they want the full autonomy on the dev teams to do that of that makes sense.
0:18:34.30 --> 0:18:35.450
Mah Jin-Khai
OK, OK.
0:18:35.10 --> 0:18:37.430
Duraid Wadie
So that's the vision to Venezuela, you.
0:18:39.270 --> 0:18:39.910
Mah Jin-Khai
Umm OK.
0:18:39.510 --> 0:18:41.100
Duraid Wadie
That it's not been written.
0:18:41.110 --> 0:18:41.860
Duraid Wadie
Is not yet.
0:18:41.930 --> 0:18:48.200
Duraid Wadie
That's something else I need to to do actually and Polish and review and do, but that's that's the high level vision.
0:18:48.290 --> 0:18:52.420
Duraid Wadie
So you are a complete autonomy of your teams and their pipelines.
0:18:53.90 --> 0:18:54.260
Duraid Wadie
You don't need more.
0:18:54.550 --> 0:18:57.40
Duraid Wadie
You know, you don't need more points to slow you down.
0:18:57.50 --> 0:18:57.670
Duraid Wadie
What you're doing?
0:18:58.700 --> 0:19:0.190
Mah Jin-Khai
Umm, OK yeah.
0:19:0.200 --> 0:19:0.610
Mah Jin-Khai
If.
0:19:0.620 --> 0:19:4.160
Mah Jin-Khai
If that's the case, then we will, but it's a bit difficult, right?
0:19:8.920 --> 0:19:10.130
Duraid Wadie
I know, I know.
0:19:4.170 --> 0:19:11.20
Mah Jin-Khai
Right now it's like you have the central test to to do the automation. Umm.
0:19:10.140 --> 0:19:12.610
Duraid Wadie
And this is both the full while we talking about here the better.
0:19:12.620 --> 0:19:15.890
Duraid Wadie
So the all of these, you know things you have in the middle.
0:19:15.900 --> 0:19:18.590
Duraid Wadie
They need to go away to actually have fully automated pipelines.
0:19:19.780 --> 0:19:21.50
Duraid Wadie
Same thing with cybsecurity.
0:19:21.60 --> 0:19:24.490
Duraid Wadie
You know, like for example, they wanna they wanna test every release, right.
0:19:24.860 --> 0:19:25.80
Mah Jin-Khai
Umm.
0:19:25.400 --> 0:19:25.620
Chris DiPierro
Umm.
0:19:24.920 --> 0:19:32.120
Duraid Wadie
Which is more straight enterprises do, and that's why you bring dynamic scanning into your pipeline, let's say, every night the dynamic scanning kicks in.
0:19:33.660 --> 0:19:33.900
Mah Jin-Khai
Bro.
0:19:32.130 --> 0:19:34.410
Duraid Wadie
You do it once a night or something like that.
0:19:34.650 --> 0:19:34.920
Mah Jin-Khai
Yeah.
0:19:34.930 --> 0:19:35.570
Mah Jin-Khai
Suppose the village.
0:19:38.200 --> 0:19:38.890
Mah Jin-Khai
Yeah, I know.
0:19:38.960 --> 0:19:39.350
Mah Jin-Khai
I know.
0:19:34.500 --> 0:19:39.450
Duraid Wadie
So you don't really need to have a security teams to do this anymore, but it makes sense.
0:19:39.420 --> 0:19:50.480
Mah Jin-Khai
Yeah, that's supposed to be the correct way, because now it's like it's very time consuming, the SLS or getting the CSU report is like weeks.
0:19:51.520 --> 0:19:51.740
Chris DiPierro
Yep.
0:19:51.920 --> 0:19:52.230
Duraid Wadie
You know.
0:19:51.610 --> 0:19:52.800
Mah Jin-Khai
I mean, the shot does, Bobby.
0:19:52.810 --> 0:20:0.640
Mah Jin-Khai
One week, I guess, but if you if if you run the test earlier, if you run the daily you can easily troubleshoot and see what's going on there.
0:20:0.770 --> 0:20:3.460
Mah Jin-Khai
So so that will help us to reduce our.
0:20:4.610 --> 0:20:9.450
Mah Jin-Khai
Uh, I have a problems and uh in, in, in in some of these tests right now.
0:20:9.460 --> 0:20:11.700
Mah Jin-Khai
It's like we because of pipeline is very slow.
0:20:11.710 --> 0:20:18.840
Mah Jin-Khai
I mean the the workflow is very slow and so we cannot run the tests very frequent.
0:20:18.850 --> 0:20:23.80
Mah Jin-Khai
So we have to like only doing release. Umm.
0:20:23.460 --> 0:20:24.540
Duraid Wadie
Yeah. So.
0:20:27.430 --> 0:20:29.30
Duraid Wadie
That's all I know at this stage.
0:20:30.950 --> 0:20:33.700
Duraid Wadie
And if I know anything else, I'll likely should I don't to Venezuela.
0:20:33.980 --> 0:20:36.100
Mah Jin-Khai
Did the yeah.
0:20:33.710 --> 0:20:38.160
Duraid Wadie
Probably cause you can follow Joe with more details to Venezuela, but yeah, go check.
0:20:38.170 --> 0:20:38.450
Duraid Wadie
Yeah, sorry.
0:20:38.650 --> 0:20:42.200
Mah Jin-Khai
Did they mention about that up again, centralizing the devil?
0:20:41.690 --> 0:20:42.420
Duraid Wadie
They.
0:20:42.520 --> 0:20:48.90
Duraid Wadie
Well, I said it's not a good idea to summarize the box.
0:20:50.990 --> 0:20:51.990
Duraid Wadie
I said that.
0:20:48.90 --> 0:20:52.620
Mah Jin-Khai
Yeah, he is very stupid to centralize the devil because you decentralize the the.
0:20:52.630 --> 0:20:53.200
Mah Jin-Khai
Yeah, yeah.
0:20:54.130 --> 0:20:55.680
Duraid Wadie
I always say that that's not the first time.
0:20:55.690 --> 0:21:2.210
Duraid Wadie
I keep saying this and realizing the object doesn't 12 because the people really on on hand, they don't understand the product and the software that deploy it.
0:21:2.220 --> 0:21:3.460
Duraid Wadie
They just don't understand it.
0:21:2.920 --> 0:21:4.920
Mah Jin-Khai
True, true, true, true.
0:21:8.30 --> 0:21:8.220
Mah Jin-Khai
True.
0:21:3.930 --> 0:21:12.30
Duraid Wadie
You know, how can they make decision on something they don't understand that is actually still up for debate?
0:21:12.120 --> 0:21:15.940
Duraid Wadie
There's not been decided yet as far as I know, there's not been decided yet.
0:21:16.690 --> 0:21:17.50
Mah Jin-Khai
Ohh.
0:21:18.20 --> 0:21:25.260
Duraid Wadie
And I will hope they don't really centralize this, to be honest with you, every team, every dev team would actually work with their own.
0:21:26.240 --> 0:21:26.880
Duraid Wadie
I don't mind.
0:21:26.890 --> 0:21:29.400
Duraid Wadie
Like, you know, every head of Dev, they'll have a dev OPS under them.
0:21:30.50 --> 0:21:30.280
Chris DiPierro
Umm.
0:21:31.800 --> 0:21:32.660
Mah Jin-Khai
Umm yeah, it's still OK.
0:21:29.410 --> 0:21:34.150
Duraid Wadie
Centralize it within their business line, but not very centralized all the way up.
0:21:34.980 --> 0:21:39.470
Mah Jin-Khai
Umm, right now we are running this but they are they they don't have enough people.
0:21:39.470 --> 0:21:47.980
Mah Jin-Khai
So it's like one to two people, but below depends on how do they want to convert the software engineer role to death of role.
0:21:48.190 --> 0:21:48.730
Mah Jin-Khai
It down to it.
0:21:49.290 --> 0:21:51.220
Mah Jin-Khai
That's the problem with the compliance space.
0:21:51.230 --> 0:21:55.340
Mah Jin-Khai
So there's a reasonably no I should have story coding.


Pls summarise the key points of the meeting based on above trasncript.