live from Boston Massachusetts it's the cube covering AWS reinforced 2019 brought to you by Amazon Web Services and its ecosystem partners hey welcome back everyone's cute live coverage here in Boston Massachusetts for AWS Amazon Web Services reinforced this is in our roll call for an RO conference for security this is the first event Amazon's dedicating to security I'm Jeffrey day Volante Dave reinvents the big show reinforced will be the big show for security 12,000 people we have Vittorio for Arango who's the VP of Marketing cloud business unit McAfee formerly of sky-high networks great to see you again on the cube I am happy to be here you guys had an institution so delighted to be here with you guys super excited been big fan of your work but finally work at VMware sky high networks now McAfee you've seen the big company of the startup real change is going on in cloud the McAfee certainly the expertise and the antivirus and security been there check now cloud comes into the equation with sky-high networks gives the update what's that what it's all about sky high comes in to McAfee you got a cloud business unit they leave you alone you get to do your own thing but take advantage of the McAfee goodness it give us the what's going on tell us well you know when you wake an acquisition usually you do it for two reasons why one is I sit at the table in a new market acquiring the skills of the people those are the two two main reasons so Skye McAfee when they acquire sky high in January 2018 they kept the sky high as a separate business unit to keep the momentum and if you think about the the investment thesis there is that today works gets done on endpoints that are attached to the cloud increasingly the network now is used to be the control point for everything security but now we run applications in on infrastructure we don't own that traverses network we don't operate and so the our strategy is secured data what works get gets done which is in on the device which that's the Mac of you know heritage and then in the cloud that's where the McAfee the with the sky-high acquisition what will bring it I'm usually exclusive they both work together because once an endpoint one's kind of a in transit data and cloud all that stuff happening there are two different things but they work together yeah it's it to me device is mobile devices and laptops are the the the land endpoints to the cloud right and so I think we are and then on top of it IT ones complete disability and so McAfee has this great footprint with the device the cloud and then EPO which is our management management layer on top of it it gives you visibility across everything so you guys are making mad mcafee with the cloud business unit which is sky-high enactment a big investment at this show you guys look at reinforces an opportunity why are you making such a big investment in reinforce this show this community what's the big move well if you look at the what the enterprise data is increasingly it's in the cloud so we recently ran a report of the live system so we have a run a thousand customers using our cloud solutions so we know exactly what data is and around thirty five percent is in SAS office CCC five boss Dropbox twenty five percent is in structured application like Salesforce ServiceNow and twenty four percent is in iis and pass and that's the area that is growing the most and so in the past if you look at the evolution of cloud security there have been a lot of different point solution to solve these different problems we're trying to bring it all together so we have a single point for visibility and control of your data in a cloud so I is and pass is where data is growing the fastest and the show like this is the perfect opportunity for a hard question on to you right now because this is what everyone's been asking us see shows and CIOs run or running or managing or trying to figure out the security equation we love our vendors giving us alerts we don't need more alert anymore if there's a really video more alerts we need our suppliers to help us fix the problem yes that's the big focus of this show we're hearing a lot of that and a lot of help my people be better so not just tell me what the problem is fix it yeah what's your view on that absolutely so once you get visibility and you set your policies our system enforces those policies in real time and so it doesn't require human intervention for the most part plus there is another aspect if you look at the number of incident that happens in the cloud there are one order of magnitude higher than on-prem so what we do we bring the users into the picture as a solution so let me give you an example so it said that you look use the cloud to collaborate right and that makes us productive we found that 85% I didn't have a percent of people to go to the cloud find business acceleration in their business and so why because people working collaborate freely but sometimes collaborating they share a document that contains confidential information so when we detect that instead of we let IT know but instead of asking IT to fix it we inform the user and we say hey mr. user did you know that you just share a document that contains credit card information and healthcare information and we show them what it is so they can fix it in most cases people don't do it maliciously like that just trying to get their job done and so we make the user be part of the solution instead of just creating the problem why our instance ray internet rates so much higher in the cloud material because the just the number of peopie definition the moment you start to put your data in the cloud to collaborate you collaborate with many more people right and so that's why the number of incident is so much higher against that the stuff is all out there and the number of people that I have access to your data is much larger so when you think of risk you think of you know the probability of an event and then the impact of that event so we just heard that the probability goes up when you're collaborating in the cloud you have any data on the impact in terms of specific to the cloud is the cloud doing a better job than say on Prem is it more higher impact is it not there's not as enough enough high value data in the cloud yet more data's on Prem do you have any sort of senses first of all there is our actual use of the cloud we know that confidential data is in the cloud and we also know that over time 50% of and confidential data or computational documents in the cloud gets shared in the process all right here's the the good news is that we believe that with the proper tools like an visual cloud and the proper Cosby platform in place the cloud can be more secure than on pram and this is why first these cloud providers AWS and others they put more resources in security that any comprend company ever could right but then you still have the share responsibility model it's a part of the the security puzzle that the end-user is in charge of and if you put in place a cosmic platform we love for people to use ours but any costly platform I think eventually the cloud will become more secure than on Prem ever was yeah so that shared responsibility you talk about endpoints data user access right and you start from SAS the your responsibility is really device security and user access so if an end user logs in with their credential and start stealing your data AWS or Microsoft they're not gonna be responsive to take care of that when you're doing going to pass your responsibility goes deeper because now you're running your own applications there so you have to make sure that the applications the infrastructure that the application runs on is properly configured and the data going in and out of the application and the container are secure and then you're going to I is your responsibility goes even deeper but these are problems now that can be solved well understood it can be solved by leveraging the underlying platform and then building your own infrastructure or your security solution gobbled it sorry I talk about the most important story that that's that should be told in technology security industry today or that media should tell are not being told what is the most important story for first customers to to know about and or the media should be covering more of that's uh putting me on the spot well I think I the thing that I'm most excited right now in NIT is DevOps I think about every technology transition for the last 25 years was driven by one set of people developers and so over the years developers had all these roadblocks or I need a server or now I need the security clearance now I did compliance clearance and so we always got in the way of them until they figured out in you a new platform and your way to be more agile and I think right now in the cloud is with DevOps is the ultimate of expression of that so I think it's very exciting and I think as security vendors instead of this is my pet peeve with security is you have to scare people into buying your stuff I hate that right you know if you don't buy this you're gonna get fired you're gonna get breached all true but the reason why people go to the cloud is business agility the ability to unleash the developers to build new differentiating applications and so to me a better way to sell insecurity and build a security solution is to cater to that need and build security that that is transparent to the users and now transparent to the developers and also here what you're really saying there is you want to increase the speed of security for that slot that is lagging behind the agility of DevOps yeah if I get faster so it's in line with the developer in fact today we just announced that this shift left right instead of like make it easier to deploy application then put security on top of it how about we look at your development process and trying to identify flaws they may end up into a non secure runtime environment and so last goes along the lines of like let's forget about security that doesn't create friction let's put build security in the code it's a shift left by that you mean security is code exactly talk about you now last time we talked to you the cube you were an engineer yeah now you're in marketing what happened well I'm seeing engineer so what happened was you know I I never planned my career I always look for smart people and we're smart people kind of aggregate there's some good stuff to do and when I was at I when I left VMware I joined MobileIron and the only spot that they helped that was open was CMO and so once I got the job I had to learn it I well you're a builder I mean Amazon love Zion generic mindset then you're gonna build our mindset how are you going to build out your cloud division because you have some big tail winds big demand for security price to be sold in a new way yeah and consumed with services so good opportunities for you what's your strategy what are you gonna do our strategy is to keep growing this business right now the cloud as you will expect is the fastest growing business at McAfee and so from from my perspective within the cloud business unit when we're trying to inject energy and the vision for cloud and and that's that's what I think McAfee needs from us so obviously you're a fan of agile scrum I mean you know modern modern development techniques are you bringing that to marketing in any way yeah absolutely so when I made a transition to marketing I realized that whenever you have an environment where you have to ship something in engineering is shipping software in marketing is shipping a new webpage or a new campaign and you a video or something and where there is a lot of unknown and market the moves fast scrum and agile is the perfect solution for it so basically what I do I take the priority from the company we make these plans like a year out right who knows what's gonna happen in here our recipe take these goals and then break them down in two weeks interval and every two weeks here are the priorities the map to those and then every two weeks you have you moved the needle I just talked to some people and and AWS you know they told me maybe it's confidential information or not they told me two weeks it's too long we have it weekly so sometimes when somebody new comes to my team and they see this mechanism workers who always on the treadmill take all this this guy's insane and they may have a point but then you look at the companies that are changing the world and guess what they are doing weekly it's a graph it's like a task week once you get on that cadence you're in shape and you get the team rolling because success is a great motivator yeah it has that kind of success when you're agile and you can respond faster yeah because look at this our counterpart is sales right and if you engage with sales you talk to sales everything is an emergency that was needed yesterday and that's okay they're bringing the money so we like them but with agile would these two weeks print what allows me and my team to do is to say hey what you're asking for is it more important than these things that were shipping in average a week from now and be answers typically no or can you wait the two weeks and you're not and then I can take the whole team and focus on whatever is that do your best work you bring in the best of cloud ethos yep into marketing and then again look if we do believe that engineers make the work around I truly believe that in Silicon Valley Engineers change the world to make the workaround let's take some of those best practices and apply them to other part of the organization why not sorry I've great to chat with you love your vision thanks for coming on the cube and sharing hi thank you for insights great insights here that we're driving all the data here inside the cube for reinforced Amazon Web Services first security conference its inaugural we're excited to be here two days of live cover staying with us for more after this short break