>>And welcome back to the cubes coverage of AWS summit public sector here live in Washington, DC, where we're actually having a physical event, but also broadcasting to a hybrid audience digitally. I'm John, your hosted, like you've got a great panel here. Martin Rieger's chief solutions, officer stack armor, the thin poli who's with Splunk group vice president of partner go to market Americas and public sector, and Troy Bertram, vice president sales, a telos. Good to see you guys. Thanks for coming on. It's great to be. So you guys stuck on them to have a great solution on AWS called faster. Okay. Which is nice name what's what's it all about? >>So faster is about getting cloud service providers to an authorization, to operate with the federal government, uh, basically as fast as possible. It is the collection of threat alert, which is a fed ramp designed solution and boundary solution. That includes all those key security stack components. Uh, primarily our partners over at Splunk and telos. Uh, those products are scripted, streamlined, and designed to get customers there as fast as possible in a compliant manner. >>I love the acronym fast tr faster on AWS. Uh, how did you guys come up with the threat alerts concept? What did, what's this all about? How did it all come together? >>Uh, threat alert was, was born out of one of our primary services, which is migration and, uh, for roughly about a five-year stretch migrating federal agency systems, um, to Amazon, both east, west and gov cloud, uh, we recognized quickly that there was a need to include a security stack of common components, such as vulnerability scanning, uh, security incident event monitoring, uh, as well as a number of other key components designed around the continuous monitoring aspect of it. And so we quickly realized that, you know, the packaging of this solution and putting together a dashboard that allows us to tie everything in, uh, deploy very, very quickly through infrastructure as a code, um, was a vehicle that could help, uh, our customers and CSPs as well as agencies get through the FedRAMP ATO process. Um, quickly >>Talk about the relationship with Splunk and telos. How's this all connecting with? Just what's your role? >>Yeah, so really with the support of NIST and the new Oscar standard, which I'm going to make sure I get the acronym right. Open securities controls, assessment language, or asked gal, um, with our release of Exacta and automation of the compliance standards working with, and the framework, we've been able to look at best of breed partners in the industry, and it is all around acceleration of how can we move faster to deliver the end customer, the controls they need and want in a secure compliant manner. Um, and as someone that served in the government, right, it's, it's passion for the mission. And that's really what brought the three companies together >>And my opinion, by the way, congratulations on Telus going public. You guys do a lot of great cyber work. Congratulations. Now that data is the heart of this. I mean, Splunk that's all you guys do is think about data. How do you guys connect into, into the product? >>Well, it's exactly that really providing that data platform, then they analytics capability to enable the subject matter experts to bring the data to life. Right. And that's what we, that's why these partnerships are so important to Splunk because, uh, they have the subject matter expertise and can really leverage the power of the data platform to provide services to customers. >>Yeah. One of the big trends that's kind of underreported, in my opinion, is that partnerships required to kind of get the cyber security equation, right? This is a huge trend. People are sharing, but also working together. How, how do you guys see that evolving? Because you know, there has to be an openness around the data. There has to be more open solutions. How do you guys see that evolving? Um, >>Well you kind of hit the hammer on the heads. Splunk is, is essentially the heart and soul of our auditing logging and continuous monitoring piece. Um, in terms of, of the relationships and how we all work together. We we've evolved now to a point where we are able to pre-stage customers well in advance. Um, and in working with our partners, uh, tell us on Splunk. By the time we get started with a customer, we, we reduced the amount of time this takes, uh, on average by 40%, um, and even faster with the exact piece because, uh, as, as Troy kind of mentioned, the OSC gal component, um, is the future of accreditation. And it's certainly not limited to fed ramp, but that machine language, that XML Yammel Jason code, we've got things to the point where not only are we deploying Splunk in a, in a scripted pre-configured manner to work with our technology, we're also doing the same thing with Exacta. >>So the controls are three documented for everything that we provide, which means we don't have to spend the time going through the process of saying, okay, tell me what you're doing. We already have that down. The other best of breed type components that were mentioned by Troy. Um, it's the same thing, right? So customers, when they show up, they have a security stack that's ready to go. They already have FIPs compliance for encryption. They already have hardening in place so that when, when they approach us, all they've really got to do is deploy their application and close a very small gap in documentation, which we do with Exacta and then auditors can come in, hit the, they can jump, get what they need out of Exacta. And eventually once everyone else catches up to OSC gal, we'll be connecting systems to other systems and just pushing the package, the days of PDFs. And those are almost gone >>As someone that went through, um, achieving an ATO, the paper process and the Excel spreadsheets. It's a nightmare. And you've got sales engineers, you've got solution architects that are spending their time, not focused on delivering mission outcomes or new products and services to our public sector customers, but on the process and the paperwork, >>Can you share order of magnitude the old way, time wasting versus this solution? What's, what's gained cause that's key. This needs a resources when people are >>Every CFO ad in ISV wants to do two things, right? They want to support the sales efforts to move into the federal or state environment, right? We're talking about fed ramp, but state ramp is upon us now. So they want two things. How do I do this at the lowest cost possible limit my resources that are really expensive on the engineering side and how do I shrink the amount of time? So 40% is a very conservative estimate. I believe that we can continue with implementations of Bosco and other ingestation points, especially across government. We can shrink that time, which reduces the cost immensely >>The time savings day. What about the stack? >>But if you want to put it in perspective, right? I've been doing this since the beginning in 2012, and I've stood up three different three pills. I've audited over 200 companies. I've been doing this a long time. And in the beginning it was an average of 12 months just to get someone ready, just to get ready. That didn't include the audit time. So we've evolved to a point now where on average, that's down to 12 weeks. And that was before the inclusion of the exact piece. We were able to shave off four more weeks with that, to the point where we're down to eight weeks and the government is pushing to try to get towards a 30 day ATO. And I think Oscar was the answer for that. And so to give you an idea of where we were to where we are now, we went from 12 months to 12 weeks. >>That's huge. So the data is the key in here. And then you got faster on AWS. Love the name wa how does that compare to other ATO solutions? How do you guys see that comparing a wonder place? >>I think in terms of the other solutions that are available out there, there, there's a couple key things that, that I think the rest of the market is trying to do to catch up. And one of those is the dashboard technology that we have in place integrates directly with Splunk and with Exacta, it pulls in from all the AWS sources that are available in terms of security and information and centralizes it in one spot. And so nobody else is doing that and we've been doing it for years. And this, this to me, OSS gal, and the addition of the exact component was the next evolution. >>Um, on the partnership side, how do you guys see it evolving? What's next >>More continuous monitoring, I think, right. It's not just about a FedRAMP authorization, but continuous monitoring in general for, for all of our public sector. >>That's day two operations continues ongoing AI operations. There's gotta be some machine learning in here somewhere. Is there? >>Yeah. I'll speak to the partnerships a little bit. And I think even back to AWS, right? Why we're here and it's great to be in person is it's around us working together as an industry and companies, right? The authority to operate on AWS, the ATO and AWS was started to bring like-minded companies together to help solve these problems. Yeah. >>I mean, it's a real benefit. It really shows that you can put a stack together, right. And then save time like that 12 months to 12 weeks. That's what cloud's about right now. Then the question is security. Think you should get that right. That is going to be an evolution. What's the vision of the product? >>Um, well, there's two things around that we, we, we talked about, yes, it's, it's planned prepare authorized, right? That is the current fed ramp mantra and post ATO. The continuous monitoring piece is really a core element. But in terms of the future three PAOs, the third-party assessment organizations that, that audit our customers, that, that we're all preparing together. Eventually they're systems, they're all developing audit systems around. And so where we're going is the auditor will connect to Exacta and they will simply over API or whatever calls they make. They will pull all of that audit information control information, which is only going to accelerate this even more. >>Yeah. I mean, the observability, the data, the automation all plays into more speed, more agility, faster, >>And, and meeting all of the standards, right? Whether it's smart Z or it's HIPAA state Ram home in Austin, Texas Tex ramp is, is a thing, right? How do we help each one of these customers with their own compliance or super smart, >>You know, the business model of reduce the steps it takes to do something, make it easier and faster is a good business model. Wow. >>It's not, it's becoming an ecosystem right. In the sense that, um, you know, Oscar has been under development for three years and, and, and stack armor, we've been supporting some components at NIST, but to the point where, uh, once we eliminate the, the traditional paper, you know, word doc XL PDF, um, and get to a point where everything is tied together. But one there's one important aspect to this is that it's all in boundary. So the authorization boundary is that invisible red line. We draw around everything in scope for an audit. And so that, by the way, is another critical component. The Splunk servers are in boundary. The exact servers are in boundary, which is a huge, huge element to this. >>Yeah. Good. Great. To see the spunk partnership, adding value here with telos, good, your cybersecurity expertise, pulling it all together. It's a great solution. >>It is, and great partners to work with, right? And I know that we will have additional solutions and product offerings in the future. >>Martin treadmill, Bethann. Thanks for coming on the queue. Appreciate it. Enjoy the rest of the show. As we wind down day two of cube live coverage in-person event, AWS public sector summit in Washington, DC. This is the cube. We right back after this short break,

>> Announcer: Live from Washington D.C. it's The Cube covering AWS Public Sector Summit, brought to you by Amazon Web Services. >> Welcome back everyone to The Cube's live coverage of the AWS Public Sector summit here in our nation's capitol, I'm your host Rebecca Knight. Co-hosting alongside analyst John Furrier. We are welcoming today Troy Bertram. He is the GM Public Business Development Worldwide Public Sector at AWS. Thanks so much for coming on The Cube, Troy >> Thanks for having me Rebecca >> Rebecca: A first timer. >> It is the first time. >> Rebecca: Welcome. >> Yes, thank you John, thank you Rebecca. >> Let's talk about your partner organization. Why don't you let our viewers know how it's structured, what its mission is, how it works. >> Yes, certainly. Our public sector partner teams work with our partners around the world that really support the mission requirements of government, education, and non-profits. Our partners are part of the large Amazon partner network, so 35,000 plus partners, but really our customers choose, Whether it's technology partners that have really focused their SaaS, PaaS, ISV solutions on government customers and worked through accreditations and certifications, or it's the consulting partners that go to market and own the prime contract vehicles. Contracts are how our customers buy in public sector. What we've done is really focused our teams from start-ups, and venture capitalists, and incubators, through technology, ISVs, PaaS and SaaS partners to our large consulting partners; global consulting partners, but also really helping curate those consulting partners that meet socioeconomic requirements. Often times governments have laws, regulations to buy small woman owned 8(a), service disabled veteran, as veteran, one of my near and dear partner subset to me, and we work with them to help navigate through and develop programs to work through the APN, and often times it's a partner to partner activity of a consulting partner working with a specialized ISV technology solution that can meet a customer's mission requirements. >> What's interesting about the cloud, we've been talking about our intro this morning is the agility and government's now seeing it benefits, and it's not just and aha moment anymore cloud is really, it's driving a lot of change. That's been lifting up a lot of your partner profiles. You have start-ups to large entities all playing together because the requirements my change based upon either the agency or the public sector entity. >> Yes. >> Have unique needs, so you have a broad range of partners. How do you guys nurture that? That's good diversity. You have nice solution set from tech to business. How do you guys nurture that? What's some of the challenges and opportunities you guys are seeing with the growth. >> Cloud is really allowed a reset for many of our partners. Whether you are born in the cloud company, that doesn't necessarily have a long legacy, and haven't built an entire infrastructure, and you don't have an infrastructure of people, but also don't have technology debt that you've been burdened with because of your prior operating models. It's nurturing that born in the cloud company that maybe a services oriented migration partner that's focused on moving our customers applications and workloads, or it's nurturing the technology and helping them build, or it's a refactor and a legacy on premise solution or those solution providers that have traditionally operated in an on-prem environment. Helping them train, certify, and really build a new practice. >> And it's exciting too. You got the ecosystem kind of approach where, you know a thousand flowers can bloom. I've got to ask you, what do you see sprouting up? What's growing most? What is some of the trends that you see in the partner ecosystem? What's growing fast? What's the demand? What's the hot area? >> The real demand is for people with skill sets. In our business, skill sets also often include security clearances, and a knowledge of the working environment that they're migrating from. We're spending an inordinate amount training and educating. Also, our partner selling community of understanding the dynamics of how to go to market, and the contract vehicles, and how to navigate. The opportunities are really immense. It's nurturing those thousand flowers, and it is a challenge for many of us. How do we nurture those thousand flowers simultaneously? >> Are you finding the right people? A big theme on The Cube here is the skills gap. I just saw a Deloitte survey. 60% of executives, and these are executives, they're not in the public sector, said a skills gap hindered their AI initiatives and hindering their cloud computing initiatives. What are you seeing? What are you hearing from the people you're talking to? >> There's a thirst for both knowledge and training, but there's also, from the executive side, we have a need to fill. There's an abundance of roles, and all of us working together. One of our initiatives is even the job boards that we're working with our educate team and Ken Eisner a peer that leads that is, we're helping our partners promote their open roles. Allowing our partners to look for and curate the same talent that Amazon is helping train and develop because when our partners can find amazing talent, our customers win. It benefits AWS and the partner ecosystem. >> Education's huge. You got to have the ongoing digital course ware. Is that a top priority for you? What are some of your top goals for this year in your plan? >> When it comes to education, top goal is training many of our new partners through our emerging partner team. Many of the new partners have a commercial practice. We're also looking at those partners and actively recruiting those partners that have built a commercial practice that are looking to enter government. Whether it's our distributors or our resellers that own the prime contract vehicles, we're doing partner to partner activities. We call it partner speed dating. It's contract vehicles that exist across state and local government, US federal, or in the international community for those ISVs that want to enter new market regions is pairing with those existing local companies that have contract vehicles and then helping train and educate on the nuances of public sector. >> We were talking with General Keith Alexander and retired General Yesthidae came on and I asked them directly, if you could a magic wand, I think I said, something along the lines of if you had a magic wand, what would you do to change the government? It could go faster. He said the technology check we're doing very well, it's moving along great, it's the procurement process. It's just too long. He mentioned contracts. This is really the key point we keep hearing. The red tape. What's the update there? I'm sure partners aren't wanting more red tape. They want to cut through it, to your point. >> No. It's really an education process. When I started at Amazon over six and a half years ago, my first role was to stand up, and it still is the core of my role, I have individuals in 22 different countries around the world, and we're helping governments and VR partners through the procurement process. We did this past week in my home state of Minnesota, our 10,000th RFX, so we consider an FRP, FRI, an RFQ a tender, I need to buy, I want to buy something. We responded to 10,000 of those in six years and two months. That's an abundance of contract that ultimately, many of them are task orders and IDIQs and GWAX. There's an abundance of pathways as General Alexander stated for customers to buy the technology. Now it's educating the contracting officers, the COs, the KOs, around the world on the existing pathways and how to leverage them. We still see old procurement methodologies being applied to the cloud, and it does slow down the end customer's mission requirements. >> And the path to value. >> Yes, the path to value. Exactly. They want to move and move fast and contracts is how we buy, but it's also what slows us down. >> You know, you're with Amazon six years plus, so you know this, so the speeds of value's been the key thing for the cloud. As you look at success now with Amazon public sector, not only in the US, but abroad and internationally, you got massive tailwinds on the success. The growth is phenomenal. How does that feel? What's some observations? What's some learnings that you can take away from the past few years and where's it going? >> It feels like it's day one. It does feel like it's day one. There are tailwinds, but there's still an abundance of customer requirements, and they're evolving, and they're more complex. I personally really like my career's been public sector. Solving the mission requirements, whether it's helping a forward deployed airman, soldier, really keeping them at the cutting edge of technology, and out of harms way, or our first responders; some of the new product demonstrations that we've seen of evolving technology that's helping a firefighter see from an aerial drone vehicle. What does it look like on the other side of this building, and how can I now communicate across different agencies? Is phenomenal. In my home state, where Army Futures Command, I live in Austin, Texas. Army Futures Command is working with the state of Texas as well as the University of Texas to really collaborate as we've never seen before. The barriers of emerging technology to legacy government, to ministries, and health defenses around the world, ministries of defense, and health agencies around the world. >> The data, the scale of Amazon cloud is going to to make that possible. Ground Station's a great example of how that's growing like a weed. The DOD has got a great charter around using agility and AI. >> Collaboration, which is so critical too, as you said. >> It is, and our VM Ware partnership with VM Ware on AWS can really help, and that's a partner play. That's partners helping migrate using the co-developed technology to really move and move faster. Use those existing apps and vacate those data centers. >> Well, thanks for coming on The Cube. Got to be a quick plug, plug the organization, share with the audience, what you're looking for, and update on the partner network. Give a quick plug for your group. >> What we're really looking for is, we've got 105 different competency partners that have really invested in their government, their education, their non-profit competency, and we want to help. I personally want to help them promote their business, and what the opportunity is to connect to either other partners or to government mission requirements. Really welcome the opportunity, John, to come on and look forward to seeing my partners on The Cube in the future. Thank you. >> Well, Troy Bertram, you are now a Cube alum, >> A Cube alum >> Thank you. (panel laughing) >> Thank you. >> I'm Rebecca Knight for John Furrier, you are watching The Cube, stay tuned for more AWS Public Sector Summit.