Trust, but verify. That’s a popular Russian proverb President Ronald Reagan introduced to the Western world during the latter years of the Cold War, and one he used with aplomb when signing arms treaties with the U.S.’s rival nuclear power.
The wry aphorism also summarizes the basis for the zero-trust architecture Dell is developing as part of its ESG goals, which mandates that no tech component in a computer system should be assumed safe: Only verified sources can be trusted.
“Zero trust is a long-standing principle in the security profession that essentially says technology systems should be designed where only components that are known and trusted are allowed to operate within it and, by default, everything else is not going to be permitted,” explains Dell chief security officer John Scimone.
The premise is simple enough but is, Scimone notes, rarely implemented. Most tech systems presume nodes operating within a set sphere—say, a corporation’s cloud intranet—to be secure, although they often aren’t. That oversight is usually due to, well, a lack of oversight. As companies scale and digitize, they acquire troves of tech, and many larger firms will be unaware of exactly what components are incorporated in their architecture.
By 2024, Dell expects to offer its U.S. Customers the first zero-trust architecture accredited by the Department of Defense, which Scimone says will combine “hardware and software not just from Dell, but from our many partners,” and users “can be assured to actually deliver zero-trust outcomes.” The project is a cornerstone of Dell’s ambition to become its client’s “most trusted” technology partner by 2030—a target the company has determined as part of its ESG goals.
Privacy and ethics were already a component of Dell’s ESG ambitions, nestling under the Governance side of that equation. But, Scimone says, after the company decided to include security in that framework too, Dell reimagined the metric as “Trust.”
“We thought it’s important to encompass security so that we ensure we’re engineering security into our products, services, and supply chain as a whole, increasing the trustworthiness of products amongst our customer base,” Scimone says, differentiating between providing “secure technology” and “security technology.” Dell wants to be very much in the business of the former.
To that end, another of Dell’s core trust goals is to make it so all Dell products produced after 2030 offer users a password-less means of verification, such as incorporating a biometric identifier into the hardware. That might provide an extra level of security, but as password-less methods will also require Dell to handle more sensitive user information, the switch can only be achieved if Dell secures its customers’ trust.
“That’s why we think having choice is important and is core to our privacy programs as a whole [as well as] transparency in everything we’re doing,” Scimone says. “Just being transparent is a core component of making sure we’re operating in a trustworthy manner as we all forge forward into this brave new world.”
Eamon Barrett
[email protected]
IN OTHER NEWS
Bots can’t pay
Twitter owner Elon Musk told Israel Prime Minister Benjamin Netanyahu that he plans to add an even lower payment tier for users of the app rebranded X, asserting that making users pay for the service is the most surefire way to guard against bots. But obliging X users to link their bank or card details with the app also paves the way for Musk to expand X into a payments service, à la China’s "everything app" WeChat.
TikTok trash
TikTok’s push into e-commerce—an area its Chinese counterpart, Douyin, expanded into years ago—has been hamstrung by a lack of trust in the quality of its new service. According to several e-commerce industry insiders, interviewed by Coins2Day’s Alexandra Sternlicht, a glut of low-quality products for sale on TikTok Shop—as well as TikTok’s policies around customer data—are turning off some prospective partners.
AI finance
Morgan Stanley has launched an AI assistant to help its financial advisors service customers, building the tool with OpenAI’s GPT-4. The tool, unimaginatively dubbed AI @ Morgan Stanley Assistant, helps the bank’s financial advisors parse Morgan Stanley’s database of 100,000 or so research reports and documents to pull out required information. Coins2Day’s Sheryl Estrada says there are three main tasks for which advisors use the tool currently. The humans haven’t been replaced yet.
Auto strikes
Some 13,000 workers at Detroit’s three major automakers have joined union strikes, calling for substantial pay increases and a reduction to a four-day workweek. Despite the number of workers joining the picket line, and the fact that this is the first UAW strike in 88 years to target the Detroit Three all at once, the strike is only affecting a fraction of total production. But with inventories already low, the strike action could cause a price spike for consumers.
TRUST EXERCISE
“Despite the staggering innovation all around us, AI is still in its infancy. If we hope to continue to benefit from the promise of AI, we need to focus considerable time and energy on addressing the risks.”
In an op-ed for Coins2Day, Indeed CEO Chris Hyams outlines the real and current risks that AI poses to both employers and employees, while advocating for greater diversity at the helm of AI development to help prevent bias being baked into algorithms.
Learn how to navigate and strengthen trust in your business with The Trust Factor, a weekly newsletter examining what leaders need to succeed. Sign up here.
