Calavista Conversations

Sloan Foster

Welcome to Calavista Conversations. If you’re responsible for delivering software on time and on budget - or at least wish *someone* were responsible for doing that - then this podcast might be for you. Some 2/3 of software projects don’t deliver as promised. If you want to be in the successful minority - if you believe that you studied computer science, and not computer arts - then join us as we talk about best practices and how people have tuned their development processes for success. And maybe we’ll take a look at some total failures, and try to understand how they went wrong - and hopefully we can all avoid falling into that basket of the 2/3 majority.

Episodes

  1. Training your Culture to Prevent Cyber Security Risks

    07/30/2018

    Training your Culture to Prevent Cyber Security Risks

    Sloan Foster interviews Co-Founder and CEO of Living Security, Ashley Rose to discuss the value of making training part of company culture to mitigate cyber risk. Living Security has created a gamification platform to train organizations to be more aware of ways companies can be hacked from phishing expeditions to simple password policies. Living Security specializes in metric driven and engaging security awareness solutions that reduce risk by increasing security culture and changing employee behavior. Learn more about Living Security here Follow Living Security on Twitter Follow Living Security on Linkedin Podcast Transcript as follows: Sloan Foster: 00:32 Hello and welcome to Calavista Conversations with Living Security. Today we have Ashley Rose, Founder, and CEO of Living Security. Ashley is a serial entrepreneur. She was the former Founder of Bella Bear Wear swimwear for girls that she successfully launched through Kickstarter. She has experience in product design, development and launch marketing, sales and social media engagement. She moved to Austin in 2014 and launched her career in technology, gaining experience and technical project management, quality assurance, and the agile development process. She holds a Bachelor's of Business Administration from the University of Michigan. Her passions or family, health and personal development through new experiences. I might also add, she's a mom of three. Welcome, Ashley. Thanks for joining us today. So I'm happy to be here. So tell us a little bit about Living Security. What problem are you trying to solve? Ashley Rose: 01:24 Cybercrime is expected to cost the world over 6 trillion by 2021. And what many people don't know is that a majority, some statistics say as much as 95%, of these breaches, are caused by human error. People making mistakes. Doing something that they should not be doing that then they shouldn't be doing or doing something that they shouldn't be doing. And historically, the way companies have tried to solve this problem is through an annual compliance training done for seminars or one-size-fits-all PowerPoint training. And what we know is that this type of training does not change behavior because breaches are still occurring. So Living Security was launched, we use immersive and gamified learning techniques to engage employees with the concepts to increase retention of the material and positively reinforce good security behaviors and just as important as providing a more effective training program to the employees are also solving the gap of insight into the human risks for the organization. Our platform is built on a foundation of metrics that looks human risk across multiple facets. We knew this was important to not only provide an ROI for our product, for our customers but to allow them to target training in the areas that needed it most. Sloan Foster: 02:35 Well, that certainly sounds exciting. So tell me a little bit more about what led you to this idea and the genesis of it. It seems like a very complicated field, one where a lot of people are trying to solve problems in it. We know problems continually exists. So why did you decide now's the time for this? Ashley Rose: 02:53 So I can't really take credit for the ideation of Living Security. Drew, my husband and my Co-Founder, he's been in IT and security for the last 10 years. The gap between training and behavior change was really first noticed during the time he spent in the Army. He was actually firing people for making mistakes when he really felt that there needed to be a greater investment in the training for the people. So when he moved into the private sector and had the opportunity to build his own program, he took an unscalable approach to training. He actually created board games and started playing them with employees really to form the relationship with the security team and to make them better, to help them to better understand the difficult security concepts. Sloan Foster: 03:35 So your MVP at the end of the day was a board game that now you're taking into an immersive platform. How many people have you trained first on that board game and the Living Security Escape Room? Ashley Rose: 03:47 The board game really launched us into this idea of the Living Security Escape Room, which is what we took to market originally. We take cybersecurity concepts and we immerse them into a highly engaging training experience that you can play as a team. We've trained thousands of people through this in-person training exercise. And the Escape Room was really our way to test out our hypotheses and prove out product-market fit. So we run the Escape Room on-site for clients and at security conferences all over the country and everyone loves it. And then, like you said, we're launching our platform Cyber Escape in August, which will scale the immersion engagement insight to thousands of organizations and hopefully millions of people. Sloan Foster: 04:26 Ashley, where was the point that you decided you needed to scale those from a physical Escape Room to a platform or software product that you can take to the masses? Ashley Rose: 04:36 So we even knew before launching the Escape Room that we were going to need to do something at some point to scale this to more employees. The Escape Room we were able to again test out our hypotheses. Find product [and] market fit and validation that all of our clients are loving this. Their biggest complaint is, "hey, we've got tens of thousands, 50,000 employees and we can't train them all through this Escape Room." And so through that experience, we were able to work with these customers and clients and figure out what is the best way to scale the same immersive experience that they were able to give these small group of employees through the Escape Room into something that could be larger. Sloan Foster: 05:13 Great. So you realized during that process that while you and Drew understood cybersecurity and cybersecurity risk and prevention well. You may not know how to implement the actual technology platform, which is why you enlisted Calavista. Is that a fair assessment? And in that process, what made you decide Calavista over some of the other development teams out there? Ashley Rose: 05:38 Yeah, because we were already working with some really important clients. October is actually Cybersecurity Awareness Month. We knew that that could be a really high value add to these clients by getting them something like our cybersecurity platform in October. So time-to-market and of course releasing a quality were really critical for us. And those were also the two biggest factors and reasons we chose Calavista. You know, we talked to you guys initially and your industry high success rate of on-time and on-budget really stuck out, and then you guys also came really highly referred from another customer that's in the cybersecurity space. Sloan Foster: 06:15 Which is Cybernance who we also have a podcast with. You can check that out, that's podcast number two. Just for those keeping track at home. So how are you on track right now for product development, launch? I know you just got back from RSA and some other big conferences. So tell me a little bit about what your, where you are right now and where you expect to be. Ashley Rose: 06:38 Yeah, so we're, we're on time, on target for launch this August. Again, October is really critical for us being national Cybersecurity Awareness Month. A lot of organizations that we're working with make a big push for their security awareness program and so we already have a lot of companies that are signed up to pilot this, though this platform in that month. And so yeah, everything's been going extremely well. We're really happy with our choice of Calavista and really excited that we're going to be able to offer them this valuable product on-time. Sloan Foster: 07:07 And when you launch in October, what do you expect the splash to be? I know you've had quite a bit of traction and a lot of people excited about this product. Ashley Rose: 07:17 Yeah. So we already have close to 45 companies signed up to pilot this. We have a couple customers that are pre-paying for the platform. So we're looking at between 20-30,000 users on our platform come October. Sloan Foster: 07:31 Those represent companies that understand this need, where their human element has impacted their corporate cyber risk at some level. And understand that you can help solve that through this immersive training program for their employees, right? Ashley Rose: 07:45 Yes, absolutely. Sloan Foster: 07:47 So, this is not your first rodeo. You've been a serial entrepreneur. I like to say if you've done more than one and you're considered that. Some other people might have a different definition, but nonetheless, you've been down this road before at some level. What advice would you have for other founders who have an idea and want to bring something to market? Ashley Rose: 08:08 Yeah. So get out and start talking to your potential customers as soon as possible. The more you know about your market and their pain-points the better you will be able to address them through your product. So we were fortunate we were able to work with some really awesome customers as design partners and the product certainly helped us mitigate a lot of risks. Sloan Foster: 08:26 Great. And what do you think are the critical components for a successful launch of your platform? Ashley Rose: 08:32 So we already talked about some of the big ones already. Time-to-market and delivering a quality product. We were able to find a product-market fit with an immersive training experience at the Escape Room and ensuring that we can digitize that to scale without losing the experience is critical. So our design partners and user testing are helping us to ensure that that is a success. And then lastly, I would say the execution of our go-to-market strat

    13 min
  2. Best Practices for Outsourcing

    04/13/2018

    Best Practices for Outsourcing

    Globalization continues to open up opportunities for organizations to increase efficiency and drive productivity by executing projects remotely and working with geographically distributed teams. This is no more apparent in any part of the business than in the area of Information Technology (IT). Information technology groups are consistently executing projects in multiple geographical locations, both within the organization and externally with vendors and partners around the world. Full Podcast Transcript: Sloan Foster: 00:32 Hello and welcome to Calavista Conversations! Today we have experts at outsourcing Russ Finny, principal ITMWeb, and Lawrence managing partner of Calavista. Russ Finny is an advisory partner in research, and are currently serving clients through both the ITMWeb Group and the Stratamation Network. He also assists startup communities all over the world through various entrepreneur programs at the Tech Ranch. He's a former CIO, and in 2016 Russ was named by the Apollo Research as one of the top-five most highly followed US CIO Influencers through social media. He can be found @RussFinney on Twitter. He began his career working with Ernst and Young. Lawrence graduated from MIT with degrees in Aerospace and Astronautical Engineering and Humanities before spending seven years as a US Navy carrier pilot. After leaving the Navy, he returned to graduate school earning his Master's degree in Computer Science from Stanford University. Prior to Calavista, Lawrence spent seven years at Trilogy Software working with various enterprise software companies and development and consulting roles ranging from individual contributor to VP of Engineering. Lawrence and his business partner Sandeep Gupta created Calavista in 2001 as a bootstrap company out of a shared vision in helping companies improve the quality of their software delivery and have been doing so for the past 16 years. Welcome to the show, Russ, and Lawrence. So I thought today we'd start with the state of outsourcing. A lot of companies are looking to outsource as a solution. So where are we, where have we been and where are we going? Lawrence Waugh: 02:08 Great question. When we started Calavista 16 years ago, outsourcing was, I'm not going to say it was new, but it was not ubiquitous in the way that it is now. Often we had to convince our customers that outsourcing was something that was actually even a viable alternative for them as opposed to something that they just kind of had to do. I think we've come to a much more mature place in the industry where people see outsourcing is really practical matter and it's a business decision as opposed to a sort of a "bet the company decision". Russ Finney: 02:38 I agree. Sloan, we did some research and I'm going to talk a little bit from some research that we did about three years ago. And in that research, we were looking across a wide variety of companies. We had 500 that participated in the research project and some of the participants were very large companies. One of the largest automakers, one of the largest food and beverage providers, several big technology firms, and also healthcare. And out of that group, we surveyed 500 and then we did deep dives in 20 of those companies and primarily we were looking at- What are you doing around outsourcing best practices? In conjunction with that, how about virtual teams and optimizing virtual team experiences so that we could create a guideline for companies that are thinking about doing outsourcing. What are the lessons learned from these organizations that have embraced it? And then especially if you're working with people that are not within the four walls of your building, they're out there potentially on the other side of the planet, what are the best practices and making that work function and be optimized to take advantage of it. So I'll talk a little bit with you as we go along here and let you know what some of the things that we found during that study. Sloan Foster: 04:12 Excellent. So where are we now? Do they outsource? Do they not outsourced? Russ Finney: 04:15 Well, I agree with Lawrence, I don't want to repeat too much of what he just said. I think it's a very commonly accepted in today's businesses to work with partners. The big enabler of that really has been the technology that we've built over the last 20 years, right? So we didn't have the ability to work with a team that was sitting in Bangalore, India without video conferencing and good internet connectivity and the ability to share our coding and also be able to collaborate in good tools. All that exists today. All that is an enabler for us to be able to work together, almost like we're in the same building. So I think that's been the key. But following up on that, I'm doing the best practices around those tools and technologies and it's still a human endeavor, right? So the way that you project manage it has challenges, right? So the way that you project management project manage that, the way that you interact, the way that you plan, it's got to be carefully thought out to be successful. Lawrence Waugh: 05:28 I think that we've gone from, there are a couple of things that could be outsourced. Perhaps you know, your payroll, you know, back in the 80's, that was a big thing as well. "We have a company doing our payroll, we're not doing it ourselves." To now there are very few things that companies will not consider outsourcing, all the way to what was once considered purely creative content in terms of marketing, or a strategy and things like that where people are actually willing to accept the fact that there may be people who do this for a living who are really expert at that one thing. And those are the people you want to get doing that thing for you. Sloan Foster: 06:04 So what would be some circumstances where outsourcing, and you just named a few where today, if someone is looking at outsourcing, where do you think they should look and assess? What would be the best thing to outsource? Lawrence Waugh: 06:15 Well, it kind of goes through, there's a lot of reasons to outsource. One is if you have a skills gap. That is, and we'll just, you know, I could talk about software development, but let's look at payroll. So you know, if you have to hire someone, you can go to jail if you get your taxes wrong. So you want to get that right. And so you either hire someone who has spent a lot of time getting it right, or you outsource that to a group of people who have spent a lot of time getting that right. So if there are things that are very important to you to get right, and that's certainly something to talent source if you are not sure that you have that skill set easily available in-house. Other reasons of course, or to save money or to distribute risk or other things like that. So there are all sorts of different reasons outsource that apply to different areas of your business. Russ Finney: 07:01 So, Sloan, I'm going to talk a little bit in the context of IT departments because most of our study focused on the IT function in these companies. Across not only the technology side of it, but also the application development side and where they were utilizing service providers that may have been in their own city. But again, that could be nearshore or offshore and so we did ask this question- "where are you employing outsourced resources?" And for now, let me just talk about the systems development life cycle. So if you think about that upfront on the planning and the analysis side of it, it's very tough for an outsource group to have the insight to be able to do the planning and analysis. It's generally those companies were using there inside the house resources or if there are product developers. Like right now we're seeing them agilize and were surrounded by product developers here in Austin, Texas. Same thing. They've got to be able to think through design and architect, whatever it is that they're going to build. So that tended to be a small percentage. So maybe 14 to 22 percent actually would use an outsource resource for something like that. The wide majority were using their own resources. As it got more into a design, it jumped up to about a third would you use some sort of an outsource resource to help. But then in the building and testing, uh, that's when it got really heavy with the companies that we were surveying. So eighty-six percent now, not across every single project, but eighty-six percent said that they would use outsource resources for building something. So coding, working in a framework, a configuring and then with testing that dropped down just a little bit, 75 percent. [It] drops way down and deployment, but then it goes way back up to 70 percent on maintenance. Lawrence Waugh: 09:08 I think that one of the things that are most commonly seen as a benefit is the ability to leverage expertise that's difficult to find. So for instance, we had a prospect approach us about they wanted to migrate their applications off to Microsoft's Azure Cloud and weren't really sure how to go about starting to do that. What we've done that before. And there were some pitfalls, so we were able to sit down with them in a formal setting and go through, you know, a dozen or more managed services that the Cloud provides. And say, "All right, so here's the problems that we've run into when we do this. You think that this is going to work this way, but it's not. You need to make sure that you've done this." These are things that you only learn by experience. And so a good example is that sort of thing where a company either has to hire someone who has done this before or several people who've done these things before. And in the case, a dozen or two dozen managed services has done all of them or you know, 3-4 people who together have done this or you go find a provider who collectively has done that and can advise you. Again, the same way you hire a tax professi

    36 min
  3. Saving Lives with Time to Market

    01/24/2018

    Saving Lives with Time to Market

    Full Podcast Transcript: Sloan Foster: Hello everybody. Welcome to the first edition of Calavista Conversations. I'm Sloan Foster, CMO at Calavista and today we have a friend of mine, Jeanne Teshler in our studio, who has a young tech company focused on healthcare. We've known each other for quite a while and [I’m] excited to hear what her new adventure is today. So, Jeanne, welcome and why don't you tell me a little bit about yourself? Jeanne Teshler: Well, thanks, Sloan. It's good to see you again and be in the studio with you. I sure appreciate this time. My name is Jeanne Teshler, I’m the CEO of a young tech company called Wellsmith. Just for a little bit of a background before we get into what we're doing here. My husband and I are the founding partners of Wellsmith, and he and I have been in business together for as long as we've been married, so a good quarter of a century now. We have worked in a variety of different businesses, always entrepreneurial in how we do things. But we've run many companies, starting with, you know, production and catalog design, we've gone into creative services. We've done a lot of work in consulting. And over the course of the last 25 years or so, we've worked in a lot of fields including consumer product goods, technology, and healthcare. Jeanne Teshler: So our lifespan is working through the intersection of those and how to actually create great consumer experiences for all of our customers and all of our clients. And over time we've looked at problems and we've tried to figure out the most creative and the most consumer-centric way to solve them. So that's kind of the impetus for where we sit today. And what's interesting about what we're doing now is, Wellsith, sits at this interesting intersection of consumer behavior, technology and healthcare in such a way that it's bringing new light into how we solve what we see as personally as a problem in this country. And that is the growing amount of unhealthy people there are, if you look around, the statistics at the CDC saying that within the next 10 years, we're going to hit about a 50 percent obesity rate in the United States and we're going to see a lot more chronic conditions like diabetes, like heart failure and heart disease like COPD, which you know, is from smoking generally, but also has a lot of, a lot of basis in unhealthy behaviors in addition to smoking. So what we looked at is, as you know, personally, my family is full of, of bad health behaviors. There's nothing but heart disease and diabetes in my family, no matter how far I look. Sloan Foster: I think all of us probably have a little bit of that. Jeanne Teshler: That's true. And as we start looking at this, what fascinated me from a personal standpoint is having worked in all these different industries and the consumer product side, I'm in the technology side and in the healthcare side, we started to see over the last 10 years, in particular, all these little interesting bits and pieces of people trying to move the needle on health and what was missing is a way to bring all those pieces together. So that became a standing passion of ours is to figure out how to solve healthcare problems in new and interesting ways, and that’s where we came up with the idea of Wellsmith. Sloan Foster: The intersection of all those different elements and saw the intersection coming together at this point in time where it's needed and not any one company was solving the problem effectively, I'm sure. Jeanne Teshler: Correct. Correct. Sloan Foster: Well great, so where are you, what led you, I assume this is what led you to this idea is seen and what made you decide that now was the time to start a company? And time was of the essence? Jeanne Teshler: Well, we had prototype the idea of Wellsmith in our spare time during, you know, in between consulting gigs with our other company. And we started to realize that what was necessary was a brand new, basically a platform for solving this problem that, you know, if you look at the technology side, there are things like FitBits and different things that help people monitor their activity to be more active in healthcare. There are programs that you can join, for example, to help manage your diabetes or your weight loss. And on the consumer side, there's nothing but people trying to sell you on good healthy behavior, along with an equal number or greater number of people trying to get you not to eat healthy, etcetera. And all that. And so what we decided was there needed to be a platform way to solve this. And how do we bring all of those pieces together and make it work? And so our mission became a way, and we knew it was possible because the technology is now caught up in such a way to do so, the mission is to help reverse the trend of chronic conditions and bad health in the United States by giving people the right tools in a simple and memorable and actionable way to manage their own health. And that's what we've done with Wellsmith. We've created this platform by which consumers have an easy way to manage their health and healthcare has an easy way to help monitor and intervene as necessary in that care. And that's the Wellsmith platform in a nutshell. Sloan Foster: Great. And you've already had your first deployment. You've had been in the market for a brief period of time, but you actually launched the first part of 2018. So talk to me a little bit about where you are in the deployment of the platform and what you expected. Jeanne Teshler: Sure. So we're rolling out live. We've been in trial for the last year, year and a half, doing some testing with one of our customers on how this actually behaves in the wild, as we call it, in live action. So we start rolling out fully in, starting in January, so a couple of weeks from now, we start the new year with a turning this baby onto a live audience. And what we'll do is, we'll probably by the end of 2018, I have anywhere from tens of thousands to hundreds of thousands of users on the platform and none of the gate within about that year, we should be the largest population risk management platform in the country. It's just, there are few doing things like what we're doing, but no one to the scale and to the breadth of what we are doing. Sloan Foster: Obviously, time to market was very important and a product that works. So, what made you decide to partner with Calavista and trust a partner instead of doing it internally? Jeanne Teshler: Well, that was fairly simple on our part. We had brushed up against Calavista to during a couple of our other consulting agreements and consulting gigs over the years and had always been looking for an opportunity to work with Calavista in Lawrence and Sandeep. And so when we were, when we got the funding, when we got the go-ahead to actually build this product, we knew that we had to do it fast and all of my husband and I are great brilliant business, etcetera. Patting myself on the back of that. But we're not engineers. And the last thing we needed to do was trying to solve engineering at the same time we were trying to build a product. We had clearly the vision, we clearly had the prototypes. What we needed to do was get to market fast and we knew the team at Calavista could get us there. Jeanne Teshler: I mean, think about this Sloan. We went from nothing in October of 20, 2015 to a product in beta testing and in a clinical trial by January of 2017. Three and a half months to build actually was March. So six months we went from zero to a prototype in the market being used in a hospital system, compliance issues. Exactly. And so being able to jump through the hoops of not only designing a product but also designing it to those really rigid privacy standards and HIPAA standards for security, Calavista and didn't miss a beat. And anytime we needed to throw something at them that looked kind of odd, they would analyze it, they would, they would look at it and go, OK, I think we can do this. And they would. And that was one of the best things about is we did not have to worry about the engineering while we were trying to figure out the rest of the business. Sloan Foster: Sounds like that is a good partnership. I was going to ask how that impacted your time to market, but it actually accelerated your testing and opportunities, which I'm sure major investors happy again. I mean a lot of you don't have a whole lot of time to please or displease people. Our goal, of course, was not displeased them, but if we could bring it to market before they had a chance to think twice and go had, you know, you get rid of a lot of doubt when you can put something in the market and they can see it working. And the amazing part was our theories were right about customer engagement. If we could make it simple enough for people to follow simple plans and manage their own health, they would get better and it worked. And that was the most amazing thing to us. We knew internally and deepen our hearts. That was the problem that people are active in their own health and they're spending time on their health every day that they will get better and they will stay healthy. Jeanne Teshler: Convincing healthcare that's the case is a different problem than engineering. So I had Calavista and their teams building and managing this product. I was going out and reassuring the customers that this would work. And so I didn't have to do two jobs. I had one. And that was critical to me because getting them to understand the importance of what we were doing was harder than actually building the product. And that's the product. And you tested it. You've had quite an impact even though as only being piloted right now. So do you mind sharing some of those numbers? I know it hasn't scaled where you want it to go and have an officially launched, but I'm going to share some of the impacts you've had. Um, yes. And so during trial. So the philosophy that we'

    22 min

Ratings & Reviews

5
out of 5
2 Ratings

About

Welcome to Calavista Conversations. If you’re responsible for delivering software on time and on budget - or at least wish *someone* were responsible for doing that - then this podcast might be for you. Some 2/3 of software projects don’t deliver as promised. If you want to be in the successful minority - if you believe that you studied computer science, and not computer arts - then join us as we talk about best practices and how people have tuned their development processes for success. And maybe we’ll take a look at some total failures, and try to understand how they went wrong - and hopefully we can all avoid falling into that basket of the 2/3 majority.