Thursday, August 11, 2022
HomeCloud ComputingCisco and Theta Lake: Compliance and Safety Monitoring for Cisco Webex

Cisco and Theta Lake: Compliance and Safety Monitoring for Cisco Webex


This week we welcome Marc Gilman, Basic Counsel and VP of Compliance at Theta Lake for a Q&A on a key subject for compliance, operational danger, and safety leaders – guaranteeing that strong controls are in place for regulatory, cybersecurity, and privateness of collaboration platforms.  With hybrid work changing into the norm in monetary providers, collaboration platforms and BYOD communication channels have develop into a significant a part of the working mannequin at monetary establishments.

Theta Lake’s resolution helps safety and compliance groups shortly scale their danger detection and the workflows for communication safety, information loss safety, archiving, and supervision of recent video, chat, voice, and unified collaboration methods.  They’re a Cisco Investments portfolio firm and a Cisco Options Plus companion which permits monetary establishments to acquire Theta Lake’s platform immediately from Cisco.

ThetaLake logo

What are the most important compliance challenges that monetary service companies face with collaboration instruments?

The most important problem going through monetary service companies is the exponential enhance within the adoption of collaboration instruments and their wealthy options units.  Collaboration instruments like Webex represent crucial infrastructure for companies working in a hybrid work surroundings.  Making certain that each facet of those advanced communications from screenshares and webcams to whiteboards and chat could be appropriately captured, archived, and supervised to satisfy SEC, FINRA, FCA, CFTC, and different international regulatory necessities is essential.  Organizations wish to purpose-built supervisory applied sciences like Theta Lake to unlock productiveness and adjust to related rulesets.  Assembly the compliance challenges of the brand new work from wherever world is prime of thoughts at monetary providers companies.

We’ve seen within the information in regards to the largest Wall Avenue companies being hit with fines over consumer communication occurring outdoors of authorized channels.  Why is that this nonetheless occurring, how can or not it’s prevented, and is it solely a Wall Avenue or buying and selling situation?

These enforcement actions proceed to happen as a result of companies are challenged by the ever-expanding use of latest messaging applied sciences and have to be extraordinarily nimble to implement compensating compliance controls.  Corporations can keep away from these fines by exploring new approaches to archiving and supervision like we’ve developed at Theta Lake in addition to analyzing written supervisory insurance policies and procedures to make sure that onboarding of latest messaging methods and acceptable use are clearly described.

Whereas using unmonitored platforms has proliferated in monetary providers, organizations of all stripes have to be vigilant about messaging methods within the hybrid work world.  Since collaboration and chat platforms like Webex Messaging and Conferences are getting used for every little thing from buyer help and healthcare to school lecture rooms and official state and native governmental enterprise, understanding the conversations occurring on them is crucial.  Each group should shield the confidential and delicate data transiting these communication instruments.  Moreover, guaranteeing that workers should not engaged in inappropriate or offensive conduct that might violate Codes of Conduct and create HR points when speaking internally and externally is extraordinarily vital.  The reputational penalties of destructive buyer dialog going viral can be extraordinarily damaging for any group.

Chat appears to be a giant focus for compliance, danger, and safety groups, are you able to broaden on how you’re serving to clients utilizing options like Webex App Messaging or WhatsApp?

From a foundational perspective, our use of API-based integrations to seize chat information is a sport changer.  An API-enabled method permits Theta Lake to seize and ingest the entire dynamic components of chat together with reactions, emojis, GIFs, and recordsdata transferred throughout a dialog.  This contains the flexibility to look at the contents of exchanged recordsdata be they voice, video, textual content, paperwork, or spreadsheets.  Our regulatory, safety, and privateness detections look at all of that content material in context and permit for the seamless and correct identification of potential dangers.

All rights reserved

Our breadth of integrations extends to over 40+ chat, voice recording, and video content material administration platforms, and we’re always increasing and bettering integrations.  An amazing instance of that is our current Webex Conferences e-comms archive integration, which permits clients to selectively seize and archive content material from Webex Conferences such because the chat or transcripts components.  This can be a sport changer for organizations that wish to incrementally unlock the advantages of particular Webex options to suit a selected state of affairs.

Utilizing the Theta Lake platform is easy—our professional subject technical providers group has provisioned clients over a weekend, so the platform was set as much as analyze conversations on Monday morning.  We now have tons of intuitive, interactive workflows in order that organizations can pattern content material primarily based on danger rating, platform, date, or area and route conversations to the suitable assessment groups.  We expect fastidiously by means of platform design and person expertise and have a number of patents issued round these visible components of the system.

Looks like lots of your capabilities should not simply compliance, however safety centered. If you find yourself talking with CISO’s, what’s prime of thoughts for them?

Talking with CISOs we’ve seen an rising set of issues stemming from regulatory change and the present international safety risk panorama.

The SEC’s current cybersecurity steerage mandates baseline safety controls for funding advisers and registered funding firms to guard traders and their information.  These new management necessities are along with current SEC cyber necessities and frameworks just like the NYDFS’ Cybersecurity Regulation.  Furthermore, mandates for Board of Administrators’ involvement in cybersecurity program design in addition to incident reporting necessities are selling broader conversations about danger tolerance and distant work technique on the senior administration degree.  The elevated use of collaboration platforms, whereas offering immeasurable advantages for companies, have elevated the dangers of knowledge publicity and the corresponding must safe dialog channels that may embody discussions about MNPI, commerce secrets and techniques, and confidential data.  Because of this, CISOs and senior administration are fastidiously contemplating find out how to deploy collaboration and chat instruments to securely help hybrid work.

I’ve heard compliance groups are struggling to oversee and handle compliance for the rising quantity of UC content material, what are some ache factors?

There are some clear ache factors associated to the increasing use of the visible parts of UC platforms similar to webcams, whiteboards, and screenshares in addition to the interactive parts of chat like reactions, emojis, and GIFs.  These new options problem compliance groups as legacy instruments can’t seize and retain these interactions, which is a transparent barrier to deployment.  Since regulators are more and more centered on options like polling, chat, whiteboards, and software shares, compliance groups have to be artistic and responsive to make sure that supervisory applied sciences meet these rising calls for.  At Theta Lake, we use synthetic intelligence and machine studying to look at video, voice, chat, and file transfers for compliance, safety, and privateness dangers.  These AI strategies, like our TranscriptionRN functionality, enable us to establish content material in context in addition to precisely detect dangers even the place a video, voice, or chat transcript features a typo or error.  So, for instance, if a voice transcript contains the phrase “Let’s speak on what’s up,” Theta Lake’s platform considers the broader context of the dialog flags it as a mis-transcription of “Let’s speak on WhatsApp.”  These AI detections coupled with the versatile workflows and seamless person administration described above, cut back compliance complications and make supervision extra environment friendly and efficient.

How does Theta Lake assist monetary establishments deal with these ache factors and what has been the most important “a-ha” second a consumer has reported?

The ache factors we assist with, and “a-ha” moments are available in just a few flavors.  One quite simple, tangible approach we assist clients is with our Chat Archive Connector.  Theta Lake can then seize and ingest these interactions solely throughout chat channels or in-meeting chat, with out recording the assembly.  The Archive Connector permits companies to deploy the important video, voice, chat, and different key options of Webex and both retain the content material in our platform in 17a-4 compliant storage or ship it to a buyer’s legacy archive for long run storage.  The Archive Connector permits companies to gather and look at interactive collaboration content material and lengthen the lifespan of current archives with out disrupting associated supervision and eDiscovery processes.

One other nice “a-ha” second is when a buyer deploys our visual-based danger detections to establish delicate information displayed over a display screen share or flag the presence of a specific emblem or object by means of a webcam throughout a Webex assembly.  Our patented video supervision expertise could be very a lot on the leading edge of those visible dangers, so seeing constructive reactions to that’s at all times thrilling.

You’ve labored in monetary providers and are a lawyer by commerce.  What’s the largest danger monetary providers firms are taking by not correctly supervising digital communication?

Enforcement dangers and fines are very significant and certain prime of thoughts for Chief Compliance Officers, significantly given current SEC exercise within the space of messaging supervision.  Nonetheless, within the hybrid work world, cybersecurity, privateness, and reputational dangers must also be key areas for deploying improved communications controls.  Safety dangers associated to every little thing from sharing of malware hyperlinks to unauthorized websites or functions can compromise agency methods and expose them to harmful ransomware—a debilitating operational prospect, significantly in a distributed work state of affairs.

The chance of publicity of delicate private information can be a key concern.  Given capabilities to simply show and ship spreadsheets and paperwork by means of collaboration and chat platforms, the flexibility to detect probably problematic distribution of knowledge is crucial to guard agency data and align to related regulatory necessities.  Furthermore, the flexibility to look, retrieve, appropriate, and delete data to reply to DSARs is essential.  Theta Lake’s purpose-built capabilities handle all of those dangers—from our AI-enabled detections that embody screenshares, webcams, and file transfers to our search, retrieval, export, and case administration options to help privateness compliance.

The ever-expanding spectrum of collaboration and chat danger coupled with the brand new regular of distant work makes compliance, safety, and privateness crucial throughout senior administration and the Board of Administrators—such points are not relegated to compliance alone.

Many because of Marc Gilman for the contribution to Cisco’s Monetary Companies weblog. You’ll be able to view extra particulars of Theta Lake’s integration with Webex by Cisco right here or attain out to your native Cisco gross sales consultant to rearrange an answer demonstration.  

Please go to and for extra data on Theta Lake and Cisco Investments.




Most Popular

Recent Comments