[MUSIC PLAYING]
LUCA BERTOLI-MITCHELL: Cas is the Chief Information Officer
at Cordaan, one of the largest health care
providers in Amsterdam.
It provides care to over 20,000 people
from 120 locations across Amsterdam,
and they do this with the help of over 6,000 employees
and more than 2,500 volunteers.
That means they're managing around 7,000 email accounts
across 10,000 devices.
To protect the organization's people, sensitive data,
and networks, Cordaan has deployed
Tessian Guardian Enforcer and Defender to protect over
6,300 employees on email.
So with all of that in mind, what
was some of the pain points or business problems
that you wanted to solve with Tessian?
So what we were looking at is solutions, technical solutions
which are technologically advanced, I think,
while those solutions are user friendly.
And I think the fun thing would be
to have actually real interventions
from the technology in unsafe behavior.
LUCA BERTOLI-MITCHELL: And how had you
tried to solve problems involving
human error previously?
What we had seen is that the most difficult part was
actually to get into the minds of our employees actually
in what safe behavior is or isn't.
And the difficulty, I think, in health care
is that we're stimulating our employees to be
service minded, to help people.
And yeah, more or less, sometimes that's
difficult in relation to do the safe things in email
or in trial management.
So people are more or less trained to give an answer
if you're asked something.
So if someone maliciously asks something in an email,
people have the tendency to just answer.
And how do you do both?
Have a service minded culture for our clients and patients,
but in the meanwhile have a safe mindset?
LUCA BERTOLI-MITCHELL: Just to drill down even further.
How had Cordaan tried to prevent misdirected emails and data exfiltration
specifically?
We tried to do to the old standard stuff, so
standard email security, standard spam filtering.
I think we do have more or less good
instant management processing which if we see strange stuff,
we are noticing people.
But yeah, that's reactive.
So that that's more or less.
I think we did see that that wasn't effective enough.
So I think we did a lot, but the thing
is that it wasn't real time or just in time.
And therefore, it was reactive.
So we were looking to do more proactively
in warning people just in time.
But I think it's also about awareness.
So people can read--
so other measures were like all kinds of procedures and--
So people did know what they should do, but in real life,
in the heat of the moment getting email and then
having top of mind, OK, this is allowed or this isn't allowed.
LUCA BERTOLI-MITCHELL: And why did you
choose Tessian over other solutions or approaches?
We did have and still do have some measures.
So for instance, secure email is something.
More or less a health care based solution
in which we can send email securely
between connected health care organizations in Amsterdam,
for instance.
So actually that does work, but the thing
is that you can still send an email by mistake safely then.
So you can still send encrypted content which is not
intended for the recipient.
And so we didn't have any mechanism in place
that would point out that you're making a mistake.
For instance, the most--
we did see that a lot of data leak reports
were about sending stuff to the wrong recipient.
I think, actually to be fair, everyone in business
has done something like this in the past.
I think getting real analysis off
of email and the real artificial intelligence about behavior
as implemented in Tessian technologies
will also find stuff which we actually didn't know
until now and in the future.
It is also something which--
a part of policing rules, it's also
getting information about behavior which we didn't have.
For instance, even how much email is
going out there and coming in.
How much email is actually sent to private email addresses.
But the second thing is that because people--
a lot of stuff they aren't doing it on purpose
and they just are unaware about the risks there are.
I think it's nice that you could have
more a leveled or a nuanced approach in the response,
in the intervention.
You could say we with this kind of technology, you could say,
hey, you're sending this.
Are you sure you want to send this?
And if it's really bad, you can just block it.
So like a pop up like this is blocked
because it's really bad.
LUCA BERTOLI-MITCHELL: How quickly did you
see results with Tessian?
That's one thing.
So you could actually calculate the risk
before and after the investment in Tessian.
So that's one thing to look at it.
The other thing is, and that's the indirect value,
is the behavior.
What you're actually doing is helping people
to do the right thing.
And I think people are feeling assisted.
If they are assisted by the technology,
instead of having a feeling in the back of your mind,
am I doing the right stuff?
And what we did actually see was actually really exciting
but also a bit frightening, a bit scary,
because now we did see stuff going on which we actually
didn't know until then.
So we did actually see how much email was sent to private email
addresses.
So we did know that some things were going on,
but the scale of it wasn't really transparent for us,
I think.
And now, it did.
So it really accelerated the pace
in which we want to do something about it, I think.
And we could also see that people were actually
starting already to just press the No button.
Do you still want to send this email?
No.
And that's interesting, because there
are people actually getting to make new choices which
they didn't make before.
[MUSIC PLAYING]