0:00:07 Hi everyone, welcome to the A6NZ podcast. Today’s episode is hosted by A6NZ co-founder Ben Horowitz
0:00:13 interviewing special guest Dapper Dan. Dapper Dan pioneered high-end streetwear in the early 1980s,
0:00:19 remixing luxury brand logos into his own designs for gangsters, athletes, and musicians dressing
0:00:25 cultural icons from Eric B and Rakeem to Jay-Z. He went on to define an era, and his work has been
0:00:31 featured in exhibitions at the Museum of Modern Art, The Met, The Smithsonian, and more. But Daniel
0:00:38 R. Day, aka Dapper Dan, began as a hungry fast learner in Harlem, who became a gambler, spent a
0:00:43 brief stint in a foreign jail where he nourished himself with reading, and then studied the market
0:00:49 to build his business, rising to the top, falling to the bottom, and rising again, reinventing himself
0:00:54 over and over. The conversation is based on an event that we hosted for the launch of his memoir,
0:01:00 Made in Harlem, where throughout, Dapper Dan shares inspiration for all kinds of makers
0:01:04 from the struggle, especially when not given the privileges and opportunities that others have,
0:01:09 to the power of studying the game and the power of listening to your customers, but not in a
0:01:15 typical way. To what cultural influence and leadership really means, especially because, quote,
0:01:22 “you cannot be in it and not be of it.” It is a story of the OG Hustler and spans 70 years,
0:01:26 with the first 30 minutes of this episode focused on his growing up in Harlem,
0:01:32 visiting Africa, and cultural influences at the time, and then 30 minutes in, going into his
0:01:38 trendsetting and fashion, including the concepts of logomania and later influencer marketing.
0:01:43 And finally, the story ends where it begins, with reopening his boutique and his partnership with
0:01:48 Gucci, which involved the power of voice, including that of Black Twitter.
0:01:54 So I’d like to thank everybody for coming out. And this is probably one of the most difficult
0:01:58 introductions that I’ve ever had to do, because how do I explain Dapper Dan? That’s like almost
0:02:05 impossible. And, you know, I didn’t know who Dapper Dan was really. I knew Dapper Dan, but I didn’t
0:02:10 know until I read the book Dapper Dan Made in Harlem. And so I thought to introduce him,
0:02:14 there were a couple of things that were sent to me leading up to the event that were like,
0:02:22 right on point. We put like a tweet out, and this came tweeted back from David Doswell.
0:02:27 Is David Doswell here? Oh, all right, what’s happening? Thanks for coming out. So he tweets,
0:02:33 “Such a legend. When I was young, I thought his name was a term. I didn’t know he was a person.”
0:02:42 And then the second one is from my business partner, Mark Andreessen. You guys know Mark?
0:02:48 Software eats the world. He invented the browser, all that. So Mark’s from Wisconsin,
0:02:53 and he didn’t really know anything about Dapper Dan until he read the book. And
0:03:00 he sends me this. He says, “I read Dapper Dan’s book. I got a couple of reactions. One,
0:03:08 he is an actual entrepreneur and an innovator, parentheses, tech twice over, once screen printing
0:03:15 onto leather, the other using a hospital badge machines to fabricate credit cards. Number two,
0:03:21 similarly, in another life, he’d have a major national global apparel brand by now worth
0:03:27 billions of dollars. And I was like, yeah, that’s right. So that’s Dapper Dan. And without further
0:03:47 ado, I welcome Dapper Dan. Thank you. All right. Well, let’s get into it. So the book starts
0:03:53 with Harlem in the ’50s. And that was like a very different Harlem, the Harlem that you
0:03:58 grew up in than the Harlem that came after it and for sure the Harlem of today. So what was that
0:04:05 like? Well, the Harlem that I grew up in was a village. Now the Harlem you find today is like
0:04:11 a little city. The difference between a village and a little city is like, I grew up, I’m the
0:04:17 first generation of the great migration that came from the South. So when I, my family,
0:04:24 my mom and my pop got to Harlem, they were still, and it sounds crazy, they were still
0:04:30 horses and buggies in the street. Wow. So cars hadn’t quite gotten there. Yeah. It wasn’t many,
0:04:35 but they were there. All the neighborhoods was comprised of mostly in Harlem, even though it
0:04:40 was sectional. You see, like, this neighborhood here, everybody would be from a particular part
0:04:45 of the South and the next neighborhood, a particular part. So people knew each other. So
0:04:52 that a different kind of community. I think the most warming thoughts that I have a Harlem man
0:04:56 is like 11 o’clock Sunday morning, 11 o’clock Sunday morning, you see everybody leaving out
0:05:02 their houses, everybody converges on the church. My family went to the church. We had a little
0:05:10 storefront church we used to go to. The congregation was like 23 people and 18 of us was in the same
0:05:18 family. Right. And we called it “Hallelujah Sunday” because, you know, even though we was poor, I
0:05:24 think nothing made me feel as good as, you know, leaving church on Sunday. You know, we was poor.
0:05:30 So food wasn’t plentiful back then, but we used to, you know, after church, you get the meals. Oh,
0:05:36 yeah. And today, that still goes on today. Like the big churches on Sundays, they still help,
0:05:41 they serve meals. But you know what? The most significant thing about Harlem that you won’t
0:05:50 see today in Harlem was that I grew up with the diversity. You know, I didn’t even realize how
0:05:58 diverse Harlem was until I began to travel like places like Detroit, Chicago, and I always had
0:06:06 different ethnic groups as friends of mine. And I think that cultural part, that like gumbo of
0:06:12 culture was what made Harlem the way it is. So then, you know, your father came to Harlem
0:06:19 when he was just 12 years old. You know, it’s like, it’s hard to imagine because we tend to think
0:06:25 that, you know, slavery was a long time ago, but, you know, it’s been like maybe 153 years.
0:06:35 And my father left home when he was 12 years old. My father was born in 1898. That’s 33 years after
0:06:42 the Emancipation Proclamation. My father’s father was born a slave and later free. So when my father
0:06:48 came here, this is the Reconstruction Era in 1910 when my father came to Harlem. He was 12 years old,
0:06:54 but at 12 years old, and 10 and 12 years old, young blacks was leaving the South because they
0:06:59 didn’t want to put up with that. And that’s what made Harlem so unique. In every aspect, what made
0:07:05 Harlem unique is that we had the most revolutionary, spirited people that you could find. The ones who
0:07:12 were not going to tolerate like the Jim Crow and the Haines and things that were that was taking
0:07:17 place in the South at that time. And so do you think that’s one of the things that made Harlem
0:07:22 such a center of culture was that the people who came out were the people of the strongest will,
0:07:28 the people coming out to Harlem? Yeah, when you look at when you look at like the
0:07:39 what happened to us with the slave trade, first you get captured. I read in liberal art and
0:07:45 before the Mayflower, they talked about sharks used to pick up the slave ships on the coast of
0:07:50 Africa and just follow them across the ocean. And that’s how many slaves were thrown off.
0:07:56 So you had to survive that middle passage. Then your family had to survive 300 years of slavery.
0:08:02 And then you had to tolerate the Jim Crowism. And so we had the most strongest blacks that
0:08:07 were leaving the South to go north. So I’m a product of those powerful people. So when
0:08:13 I got when the people who were in Harlem was the ones that stayed and put up with it,
0:08:17 that wouldn’t go back. They were really the strongest of the strong.
0:08:24 So I learned from the people who were the best hustlers and people like my fathers who were
0:08:28 the best workers. Because my father worked 15 years straight
0:08:37 for the city and he was never absent and he was late once and that was the great snowstorm of 47.
0:08:44 Nobody was at work that day. And that’s because he walked to work and was snow was deep.
0:08:53 Wow. And you and your father had an incident that changed your life in Ripley’s department store.
0:09:01 Oh yeah. That was like growing up like even a well a neighbor down the street from me used to laugh
0:09:07 at us a lot because they was just doing slightly better than us. And a lot of the times I had
0:09:12 holes in my shoes man. So we used to put paper in our shoes to keep our feet from touching the
0:09:19 ground. Then we got more innovative. We stopped using linoleum because it last one. But one day man
0:09:25 my feet was hurting so bad because the borders of the shoe could not no longer hold linoleum in
0:09:31 right. So I think I was like about eight and I come on and say mom my feet is killing me.
0:09:36 Mom my feet is killing me man. And before my mother could say anything my brother was there.
0:09:43 He said don’t worry mom. He said come on. I go with my brother and we walked four blocks.
0:09:49 And I never forget we walked four blocks from one hundred and a half to one hundred and twenty
0:09:54 four or four or five blocks. He turned the corner and it was a good wheel there. So we won the good
0:10:00 wheel. And my brother said you see any shoes you like. I saw some nice mahogany split toes with
0:10:08 the tassel. I said I like them right there. He said try them on. I said they feel good.
0:10:16 He said okay pick your shoes up. I picked my shoes up. He said put them in the rack.
0:10:27 I put them in the rack. He said let’s go. That probably wasn’t fair trade there.
0:10:33 I’ll never I will never forget that. But you know as you know all our clothes was
0:10:38 hand me down right. But my brother right over to me he always got the first pick.
0:10:43 You know so he had the best clothes from Goodwill’s right. So I wanted to go to school man. I wanted
0:10:48 to be fine. You know I really wanted to be sharp as I could stand up front of school with the girls
0:10:54 and everything in front of the candy store. But my brother wouldn’t let me wear his clothes right.
0:11:00 So I had to sneak him out. And he got to the point where he was sitting by the door where I had to
0:11:08 go out so I couldn’t walk out with his clothes on. So what I did I had my two best friends but
0:11:12 my two best friends heard their thirming. I told her their thirming wait outside the window.
0:11:17 And I would take his clothes and I’d drop them outside the window.
0:11:26 And I go in the hallway and change them right. But then by the time I’m 13 now right my father’s
0:11:30 going to take me to get my first suit. I’ll never forget that. No no 13 I was already hustling
0:11:36 about 11 years ago. So we’re going to Ripley Ripley department store. And my father’s going to buy
0:11:45 me a suit on credit right. And I said wow I saw a charcoal brown suit with with pinstripes.
0:11:51 I said daddy you want to get me. He said he’s going to pay on credit. But I had just learned
0:11:55 mathematical equations to tell you know interest time rate and see how much he’s going to pay.
0:11:59 And then when I read the contract I said daddy don’t buy this. Of course they’re going to charge
0:12:05 you to and they have time with the suit board. So we’re coming down the steps from the store.
0:12:10 And this is this is the moment that changed my life. And we’re coming down the steps from the
0:12:16 store. And my father stopped me. And he looked in my eyes. I saw the tears well up in my father’s
0:12:23 eyes. And he said boy don’t you know you could read. You could read boy. You could read. But I
0:12:28 you know I’m saying I’m seeing how emotionally getting I’m seeing the tears well. But what
0:12:33 what happened was my father only went to the third grade. And he had to teach himself how to read.
0:12:38 Because you know during during times of slavery and back then you know it was against the law
0:12:42 to teach the slaves how to read. And my father only got to go to the third grade. So he had to
0:12:48 teach himself how to read. And from that point on I learned something. I said man no matter what
0:12:54 happened or what kind of fix I get in I’m going to read my way out of it. And that ended up being the
0:13:01 key to almost everything you did after that. So how did you get into hustling?
0:13:12 Life is about life is about the tools that you get based on how you come up you know.
0:13:21 It was seven of us. Me and six siblings. And my mom and dad. And three had three had three bedrooms
0:13:29 you know. So my father in all the relationships like we have with people that’s auntie so and so
0:13:36 but you know it’s just that it wasn’t our blood relationship but the communal relationship that
0:13:42 you take on those titles right. But the ones that were in my neighborhood they were all hustlers.
0:13:47 My father’s the only one wasn’t a hustler right. But my father used to have poker games what we
0:13:56 call rent parties. A rent party is is a circle of people. This one week this one give a party have
0:14:03 a poker game you know they have red rice chicken colored greens and they sell dinners you know
0:14:10 like that. So when my father when they gave their poker game and I used to stay up every time my
0:14:15 father went with a hand this is the first time I was exposed to gambling. Every time my father
0:14:20 went a hand he’d take all the change and put it in my pocket and I’m just standing there. Couldn’t
0:14:28 stand up no more and let it and take it away. So the first exposure I got to anything was like
0:14:35 gambling. And I became a real proficient like that. But I had an uncle Eddie Henry is just him
0:14:40 and my mother right. Eddie Henry had went had ran away when he was young and he joined he had
0:14:45 joined the circus and was one of them guys yeah one of them guys join the circus. I mean this is
0:14:51 yeah that era. I’ve heard that story but I never knew anybody. Yeah he was a handyman they had him
0:15:00 doing like what in errands but he was he um hooked up with the um the the magician told him all these
0:15:08 kind of tricks with the cards. So Eddie Henry taught me them tricks. So those tricks helped me
0:15:15 out later on in life you all hear a lot about them tricks later. So anyway the Harlem that I
0:15:21 grew up in we are I’m the last product of a generation that saw Harlem without a drug epidemic.
0:15:27 I’m growing up in the 50s the drugs epidemic didn’t hit to the 60s. So the first part of Harlem
0:15:33 you see was like numbers the number game policy that used to take place and everybody used to
0:15:40 bet on numbers and then it was like they had people who was like on head maybe drinking problems
0:15:48 but they were um functional right nowhere near like like the drugs were then in the 60s when
0:15:52 the drugs hit and then we start seeing all the drug dealers with all this money all the shiny
0:16:00 things that we wish we had yeah and then they we started drifting away drifting away and then a
0:16:06 drug it went from a street game the street thing went from a number culture to a drug culture
0:16:11 and that’s when Harlem changed right we never used to have to unlock our doors nobody locked
0:16:16 their doors until the drug epidemic hit and that changed the whole complexion of Harlem
0:16:26 and I got caught up in that um because of the uh the lore me and all my brothers my sisters never
0:16:31 did nothing wrong but me and all my brothers got hooked up caught up in that and um I remember
0:16:43 it was June 19 1967 I got busted for selling drugs I got out three months later with probation
0:16:50 September 27 1967 the one of the assassins alleged assassins from Malcolm X was in there
0:16:57 Johnson 3x butler right and when I what I observed he was in lower A1 I was in upper A4 so it was
0:17:05 tears and we had to pass by and um I saw all respect that this man used to get and the way
0:17:12 they treated him and did he get respect for allegedly killing Malcolm X or was it it was a
0:17:16 different it was a different town like Malcolm X today the Malcolm X these young people in here
0:17:22 know today at the time was all there was a shism that was taking place in the nation in Islam right
0:17:29 so to the bulk of people when Elijah Muhammad was still alive Malcolm X was considered a traitor
0:17:37 Martin Luther King was considered an Uncle Tom so history has showed that that wasn’t true it’s just
0:17:43 that these men chose a path that was the right path to choose they were all like idolized then
0:17:48 because people didn’t really know what happened but anyway the story is like when I saw that respect
0:17:54 he got I said I might go to jail again but I will never go to jail for doing anything like that to
0:18:02 my people yeah and that and that’s what changed my life so that was like that was 1967 when I got out
0:18:10 I went back to school I was 23 then now and I went back to school high school that was like murder
0:18:16 being on the bus going from home oh yeah yeah oh man because I’m seeing the young kids that I’m going
0:18:21 to high school with doing that making mistakes I’m making I’m coming out of it and I’m seeing
0:18:27 them go into I said oh man it was hell so um and I started writing for a newspaper 40 acres in a
0:18:34 mule a student newspaper and then I got real revolutionary and I said you know what I had
0:18:42 from writing for 40 acres in a mule I was offered a scholarship over the summer of 68 as an intern
0:18:48 at Columbia University either I take that or I can go to Africa and study in Africa with 40 acres
0:18:54 in a mule scholarship to Columbia go to Africa but I wanted to go to Africa um Dr Henry Clark
0:19:01 I want to find out what happened so Dr Henry Clark said one day he said at the paper right
0:19:07 you know we tend to think of ourselves as victims all the time so one of uh me and one of the
0:19:11 students we always have these conferences every week with a different scholar Dr Henry Clark
0:19:16 Dr Ben Jockerman you know all kinds of scholars used to come through and so Dr Henry Clark he’s
0:19:24 the one who minted Malcolm so he’s in at the paper one day and one of the students like myself
0:19:29 on the editorial board asked Dr Henry Clark he said um if we are the first people on the planet
0:19:34 and we had chosen people why are we going through what we’re going through today and Dr Henry Clark
0:19:39 says that’s because of a transgression we made before your opinions came into our life
0:19:45 he never elaborated on that so when I was going to Africa I wasn’t looking for what he was talking
0:19:55 about you know what that took a little bit of the anger away you know and gave it gave me like a
0:20:00 focus say I’m gonna find out what’s wrong because what was whatever this that’s wrong might be what’s
0:20:08 wrong with me right and when I say me us so I had to figure out a way to get to that so when I
0:20:15 went to Africa I traveled like it was fortunate for me I’m in Harlem Martin Luther King is alive
0:20:22 Malcolm X is alive all that energy I go to Africa I’m in Ghana Kwame Nukuma with the pan-Africanism
0:20:28 movement it’s just got disposed that right then I get to Tanzania Neary is in his governor
0:20:35 is uh is the president and I get to Kenya Jomo Kenyatta’s ago so I got all this energy and we
0:20:41 study in Africanism I stayed in Tanzania I stayed at Curuscini International School
0:20:49 where they were training South Africans to fight in South Africa so we will um we were like a really
0:20:58 radical group and even the um Urban League had gathered money had gotten pan-American airlines
0:21:04 to donate the airfare for the seven countries we was going to visit in Africa to yeah to us and
0:21:08 when we got to the airport they didn’t the state department meaning the United States government
0:21:14 didn’t know how radical we were so when we got to the airport the state department put pressure
0:21:20 on pan-American allies and they canceled our reservations oh wow they withdrew the reservation
0:21:25 but then a black or philanthropist put up with the money at the last minute so that we can go on
0:21:30 this trip to Africa you know that philanthropist was today no they I never found out who he was I guess
0:21:39 he didn’t want the state department to know so when we get to the when we get to the first leg of
0:21:47 the trip in Ghana a car our passports disappeared right and the passports turned up at the state
0:21:53 department at the United States embassy so we go there picking up we didn’t find out to later on
0:21:59 that it was a CIA agent following us around you know because this was a time 1968 well I mean
0:22:08 young black radicals wasn’t going to Africa yeah yeah yeah not without a CIA escort if you go to
0:22:15 the library and you read 40 acres in a mule and you can see that the Schoenberg library on microfilm
0:22:21 and you see the things that we were talking about to give you an example I wrote an article in 1968
0:22:25 when they was building the state building the state building in Harlem
0:22:33 in 1968 I did a study on that state building and found out what this plan was about
0:22:37 Constance Baker-Montley had mentioned that plan earlier but the state building was the first
0:22:45 building they was going to put in Harlem to start gentrification taking place so I had got a prototype
0:22:50 of that state building and I put it on the front page of 40 acres of the mule and I made it look like
0:22:57 a Trojan horse you know to let people in know and Harlem know and this is 15 52 years ago
0:23:01 to let people in Harlem know that gentrification is coming to Harlem and when you go to Harlem
0:23:06 to date yeah you see gentrification don’t kick them so that’s how radical we were and how advanced
0:23:13 we was and we were all young like all from the 18 to 23 but we had so much energy we had all these
0:23:20 revolutionary and these Dr. Benjamin all these scholars coming in and um talking to us now when
0:23:25 you were in Africa for the fight in Zaire which was later oh yeah that was really interesting
0:23:30 now I went back to Africa on my own in 1968 because I went with a group and when we went
0:23:35 with that group wasn’t no all hotel things we stayed with families we did live ins everything
0:23:42 like that there you know so 1973 I went back and I because they had the Muhammad Ali and
0:23:47 George Foreman the Rommel in the jungle yeah yeah yeah so my hustling skills kicked in wasn’t selling
0:23:52 drugs but I was a professional gambler then so I go back to Africa for the fight George Foreman
0:23:57 get busted in the head you know me and training and training that’s not what Ali busted in the
0:24:02 head yeah Muhammad Ali why he’s training so I said man I gotta stay here a month and a half
0:24:08 wait for him to get well yeah so I said you know what I might just travel around again so I stayed
0:24:17 in um Zaire for a while then I went to um back to Lagos Nigeria and then from Lagos
0:24:26 Nigeria I went to Liberia and so um and that’s in Monrobio Liberia I had uh a Fulani Taylor and um
0:24:33 that’s where the whole concept for me um getting involved in fashion yeah you know I’m tell that
0:24:43 story so come back I’m hustling again it’s like like as I mentioned earlier you get these tools
0:24:49 when you grow up poor and you use these tools but as you move along you start learning things
0:24:56 but um in 1968 when I came back from Africa I was in the Panther Party Nation Islam the Panther
0:25:02 Party had got really radical you know we they had us like we would have to study the battle
0:25:07 of Algiers where young people was kicked kicking the dope dealers down the steps and just cleaning
0:25:15 up the city and at that time it was the uh drug dealers was considered the blood suckers of the
0:25:21 poor those are the reasons that we were doing so bad so the people the Nation Islam was moving on
0:25:28 the drug dealers Panther Party was moving on them then father the head of the uh five percent of
0:25:33 all of them was zeroed in on the problem with drugs because that’s that’s what had the devastating
0:25:40 effect the reason that they were doing that because everyone during this time knew what Harlem was
0:25:46 like before drugs but the second generation that grew up with a drug culture don’t understand
0:25:52 what we were like before that happened I refused to go back and get drawn into that
0:26:01 so that’s when I um I got into what is called let me give you an idea what what what what you
0:26:06 learn in Harlem in the streets you learn the paper game that’s credit cards and checks you learn how
0:26:11 to do that illegally the paper the corn game that’s everybody know what that is everybody in here
0:26:20 been calling some kind of way here no doubt yeah the corn game you know I mean and um so these are
0:26:26 all the things out that we we learned from profession so I definitely wasn’t going to get
0:26:30 involved with um anything that’s going to be detrimental to the community so I say you know
0:26:39 what I’m gonna study this paper game yeah yeah the paper game so I divide credit cards yeah credit
0:26:47 cards and everything so I divide this method by which um I create my own credit cards yes yeah so I
0:26:54 was a bank official me and my friends all of us muslim but broke away from nation is not for the
0:27:02 same reason I never accepted the concept of a biological devil so it wasn’t suitable for me
0:27:08 in the nation islam I couldn’t accept that part so we come across this credit card scheme so I’m
0:27:14 the one who initiated the scheme so now we we go in country uh hopping catch a plane here we go to
0:27:23 we go to st. Thomas st. Croix aruba venezuela they’re spending these folks money like you’re
0:27:32 blowing us yeah we leave barbados and we go to venezuela and we’re in venezuela and some soldiers
0:27:36 pull the guns out on us right and I’m looking at colliding and this race is getting all excited I
0:27:40 said damn what’s wrong I don’t even know what’s wrong I don’t I want to know why the soldiers
0:27:44 was taking us into the bush anyway yeah they said man they was gonna kill us and rob us so I got
0:27:48 we got back in the car we went back to the airport yeah that was the second warning
0:27:56 now we get to aruba right then all of a sudden I’m trying to call my friend and I can’t get them
0:28:02 and then I see these cop cars and then we we figured it out they’re looking for us
0:28:08 they had already got one of the two friends so yeah I didn’t know where to go I’m on the island
0:28:12 I didn’t know where to go so I started ripping up all the all the receipts and I’m on the beach
0:28:20 ripping up the receipts next thing I know they pull up on us and I didn’t and I didn’t know I didn’t
0:28:26 see freedom for nine months right man you do not want to get in trouble in a foreign country please
0:28:34 please and so for nine months all I did was read read read because that was my out read read read
0:28:39 when I got out of that there then I became more proficient at that more proficient at the paper
0:28:46 game I got really proficient and I made a lot of money so and then the paper game ended up like
0:28:52 weirdly leading you into the fashion game yeah I used to make everybody listen uh what was it
0:28:56 know when to hold them know when to fold them know when to walk away and know when to run
0:29:00 Kenny Rodgers never count your money while you’re sitting at the table there’d be plenty time for
0:29:08 counting when the deal is done yeah that was my philosophy so uh after I made the money I told
0:29:14 everybody who was down with me man quit that you are on the laws too though so you knew you
0:29:20 were up you knew there was new legislation coming too that was going to make the paper game yeah
0:29:26 more dangerous yeah the banking system had not figured it out yet yeah right so there was this
0:29:31 loophole and even if you got caught you would get just 90 days but we never even got caught making
0:29:34 credit cards so but when they changed the law I said I said I ain’t doing that no more and you
0:29:38 never go back when you do something wrong but while all this is taking place I’m doing all this
0:29:44 spiritual reading and so my mind is constantly changing my mind is constantly changing and I’m
0:29:51 looking for a way to to to really fit into society you don’t want I just want to be I just want to
0:29:58 be regular I just want to be normal I just want to be you know buying to this American idea but
0:30:04 what’s also working behind my head is the only you know the fact that I didn’t have the privileges
0:30:10 and opportunities that other people had right so after the paper game I buy me a brand new Mercedes
0:30:18 Benz pay $42,000 cash you know with with paper from the paper game from from the paper game
0:30:25 and um then I said um I’m gonna drive around for a while figure out what I want to do
0:30:32 and then um I said you know what I’m gonna do I know all the gangsters I’m gonna open up a store
0:30:39 and sell to them and with the gangsters you knew they had money and like clothes in a way you knew
0:30:42 about that market where nobody else yeah I knew what every gangsta in Harlem I knew them because I
0:30:48 used to break them yeah used to call me gambling Danny yeah yeah because I studied everything I
0:30:52 learned from the best that was the best gamblers that was in Harlem and then I read all the books
0:30:58 on gambling so that I can have even a better perspective and I read um John Scotty John Scotty
0:31:04 was the world authority on gambling I read all his books yeah and when it came to hustling I read
0:31:11 hustling and con men he studies the hustle game like people can study the computer science game
0:31:17 look listen here if you want to get an inside look at what my mindset was and what my skills
0:31:25 was watch the movie with um Robert Redford and Paul Newman the sting the sting yeah the movie
0:31:32 you got ten academies war and if you can pick up on the move that they made in the sting then you
0:31:40 gifted hustler it gives you a idea of what the hustlers who came out of the south was like
0:31:46 right and it involves gambling and it involves the con game it’s the epitome of everything you
0:31:51 want to know about the inner workings of the streets and how other things other than drugs
0:31:56 how you can make money so in this thing right this is this is an older black guy
0:32:04 so the black guy he dies he can never play he can never make the big sting yeah you know
0:32:09 it was always his goal to make the big sting so when Robert Redford and Paul Newman come and say
0:32:16 man you’re white y’all can make the big sting you know and one of the guys he con had killed him so
0:32:21 Robert Redford is going to avenge that and then the whole plot emerges from them but the sting
0:32:26 comes right out of the book hustlers and con men so you can get a really good view of that if you
0:32:33 want to know what that but then that portion of that but then his life was like i’m a good guy
0:32:40 it’s just that this is what happened to my life if you march backwards in my history is the this
0:32:46 was what’s opening to me this is the advances i could make i took advantage of all the opportunities
0:32:51 that were available to me this is not an apology this is the so that you understand me
0:33:00 anyway so fashion so i thought that i could go and open up a store i said you know what people
0:33:07 with high aspirations they want everybody to know that they’re moving up the ladder yeah
0:33:13 so hustlers and everybody like that especially hustling the main thing they used to like is furs
0:33:18 diamonds and gold right right so i know i couldn’t mess with them diamonds and gold like because
0:33:25 that’s a whole new study i got to go into there right so what i did was i started reading everything
0:33:33 that i could find out about furs right so it just so happened i left the paper game but there’s two
0:33:39 guys that’s still in the paper game right they use check uh certified check machines right and so when
0:33:47 people like yourself want to sell your old fur you advertise in the paper they say yeah we’ll buy it
0:33:51 and then you show up with your fur and you get one of the special main certified checks
0:34:00 there you hear that you need to take bitcoin venmo something else don’t take that so all right
0:34:07 so um i’m with these guys so they’re gonna sell me the furs all right so they head the fur they
0:34:12 bring it to me to take them out of the line in right go down into the big check for yeah yeah
0:34:17 so i go down the fur this week this is when i meet urban chakens my jewish friend so urban
0:34:22 chakens takes the fur as well and i say hold up man maybe i need to be making these furs with you
0:34:27 yeah instead of me buying hot furs so me and every check it’s hooked up i start reading everything
0:34:33 and studying everything with the fur game and then what i did was i did my research and was
0:34:38 only three black furriers in the in the country it was one called the he was the most popular black
0:34:43 furrier uh in new york and it was two in chicago and i went to visit all of them see how they
0:34:49 operation work and i come back and i started doing the furs but um what i thought was that i
0:34:54 would be able to buy and replace other clothes when i want to do other clothes with all the
0:35:00 manufacturers i went to that’s so luxury goods would not sell to me okay and why did they just
0:35:05 went to sell to you because they wouldn’t they just like that you know i’m not gonna you know
0:35:10 all i can say is that they sold to people who wasn’t my color so yeah that was the intention
0:35:17 so anyway so that wasn’t working out for me but the furs was working out for me but furs
0:35:25 is a seasonal item right so i’ll start going to this uh uh a furrier in new jersey called a fur
0:35:29 factor and he was selling furs for me another jewish guy he’s selling furs to me and i was doing
0:35:35 good off those furs right he said listen my son and his and my nephew are opening up this company
0:35:40 and they’re going to be making leather jackets i said okay cool he said go see him his son and
0:35:46 his nephew is andrew mark they’re cool they was almost like young black guys i said yo what’s up like
0:35:54 that you know that’s cool right there so we um i’m i’m buying these leather jackets with the
0:36:00 opossum lining from them right yeah so i’m paying four hundred dollars for the for the jackets
0:36:06 and i’m selling them for eight my competition was the most popular store in holland called aj
0:36:14 lessons a lay lessons is selling the same coat for 1200 so i’m smoking them right yeah one day
0:36:21 a guy comes with his friend who had already bought one from aj lessons and he was proving to his friend
0:36:26 these are the same coat so he came to me where he got this from right right he said i told you man
0:36:33 that guy got so hot he went over to aj lessons and had a fit oh yeah aj lessons goes down so andrew
0:36:38 mark and tell andrew mark if you sell the dappadam i’m not buying from you anymore i’ll
0:36:43 say cut off the supply you know when i go down to re up down to andrew marks and i’m to get some
0:36:49 more jackets they say dapp we got a problem man i can’t sell to you no more because aj lessons
0:36:56 say if i sell you then they won’t buy from me no more they have six stores you only have one
0:37:04 yeah i’ll say oh man i didn’t even you know i didn’t even debate the issue with them because they
0:37:10 told me well we will let you continue to buy but you got to take the label out you know the label
0:37:16 is everything yeah you can’t you know so i got mad i just left and i came uptown now when i left
0:37:23 when i was on that trip in africa and i was in monrovia Liberia i went down to buy me some artifacts
0:37:28 and when i was buying these artifacts right you gotta like the way i dressed and all because i was
0:37:34 you know super fly yeah you say i like it still are yeah you say i like the way you
0:37:38 you say i like what you got on i’ll say i like the artifacts i’ll say you want to trade you say
0:37:44 yeah i want them got all my luggage i took every all the clothes that i took on the trip with me
0:37:50 i came back down to the marketplace and i exchanged all my clothes for artifacts and
0:37:58 for him to make me clothes you know with african style material with hollum style cuts yeah and
0:38:02 that’s how i came back and that always stayed with me so when andrew mark and them did that i
0:38:09 said you know what man hold up i’m gonna look i’m gonna figure out how to do this myself so i’m
0:38:16 downtown in some uh Senegalese african selling uh from from senegal warlords and they sell
0:38:20 some of this stuff on the street i gave him a card i said you know anybody so tell him come see me
0:38:29 yeah right and so first i got one then i got two then i got four then eight right i was up to 23
0:38:37 tailors all right from senegal yeah all from senegal i’ll never do that again so anyway so i had
0:38:45 these Senegalese tailors and um i need something new right now i’m working with furs i’m working with
0:38:51 11 and the guy comes into the store one day and he got a louis Vuitton pouch and was that that’s
0:38:58 little man yeah little man this was a kingpin in hollum the guy was the guy was jack jackson jack
0:39:04 and he was in hollum jack jackson is the one who told on john goddys brother gene goddys they got
0:39:11 him there 50 years but the pouch is little man’s boss’s pouch yeah right and he got all this money
0:39:16 he got a hundred dollar bill and i look at that pouch i say damn what is it about this pouch
0:39:22 ain’t but six dollars worth of vinyl yeah you know this louis Vuitton pouch you know but everybody’s
0:39:31 excited i say wow so it all it clicked in my head now you got furs diamonds and gold now here’s symbols
0:39:36 yeah i say it’s the symbols that’s making that’s popular so i wouldn’t study all about the symbols
0:39:42 and stuff and i figured out the science behind textile printing and all that yeah i say if i could
0:39:49 take them symbols and make them look like that bag yeah and have them walking around looking like
0:39:57 luggage and at that time at that time louis louis Vuitton Gucci they didn’t they didn’t use the
0:40:02 symbols like that nobody louis Vuitton Gucci none of them and let me tell you all your future
0:40:09 designers and stuff i never ever went to a runway show where you see people you know
0:40:13 the models in it i never went to one until i did the deal with Gucci
0:40:20 i didn’t want to know what it looked like when it’s finished i wanted to know how it was made
0:40:28 so all i used to study is technology fashion technology fashion construction and i would go to
0:40:36 all the trade shows associated with with garment construction so i began to teach myself everything
0:40:44 about textile printing and then in addition to that what i used to do was like when the industry
0:40:50 was moving from united states to china when everybody was going offshore right when the unions
0:40:56 this listen this is very important when the unions tricked everybody into constantly
0:41:02 asking for raises but they didn’t put pressure on the corporations that were producing the goods
0:41:11 but the prices was rising they said look we can move our factories offshore which end up in china
0:41:18 and then still get the same prices that we sell goods from here so all the industries was moving
0:41:23 to china well this is the same time i opened up my store so now i’m going to auctions at all
0:41:28 these businesses these factories just closing down right and i’m learning things i would get to
0:41:32 the auction early and walk around like i knew something and listen to the auction you know
0:41:38 listen to the people who buy the machines see what they be saying about machines and ask questions
0:41:43 and i’d be the only like black guy in there i learned all about the different types of machines
0:41:49 associated with the industry right and i bought them and and i put started bringing them to to the
0:41:56 to my my location so i end up having a three-story building on 125th street and a 2000 square foot
0:42:04 factory on 120th street all in hollow all run by me and my africans right yeah and you’re
0:42:14 and your uh your design process was also very different in that that’s the most time with the
0:42:19 the customers in a way that the guys in france never would have thought of yeah my approach to
0:42:28 fashion is like you see designers they come from their ideas and that’s good they approach it like
0:42:36 their painting a canvas and that’s good you know because that that’s an input but what i’ve always
0:42:43 done was to embrace the culture and translate the culture and how i did this is like when my
0:42:49 customers came in i asked them how they feel about themselves how do they want to look now i got all
0:42:53 this fabric this your piano and i’m printing everything you know whatever design you want
0:43:00 everything but now the creative process kicks in how do you want this to look on you and we
0:43:07 sit down and we discuss how you want to look so now i got all this input from all these people
0:43:15 coming out of my community and so this is the infusion of ideas that’s taking place between
0:43:21 me and those who want to be transformed because clothes transform me and i know how it feels
0:43:28 when they got them nice outfits on so what i did was i continued that process you hear that i just
0:43:36 all these entrepreneurs you hear that okay good so it’s an important part in doing that i come up
0:43:43 with all these different ideas with a person who designs for themselves if if they mess up if they
0:43:48 make something wrong then they stuck with a collection now i got two pluses in my favor
0:43:54 i got fabrics that i’m making and that fabric can be anything once you have a garment that’s all
0:44:00 it is is that garment right so i got that working for me and i got the fact that i’m getting all this
0:44:05 input from the people from my community who have these ideas but i had to remind them i know you
0:44:16 got ideas but everything in your mind might not look good on your behind now i’m shifting there’s
0:44:26 a shift now from the hustlers and then it’s the birth of hip hop perfect timing you know now i have
0:44:38 my personal collection of influences all to me so i got this creative idea i got the knowledge of
0:44:47 textile printing right i have upcoming influences yeah so i got all this working for me now what’s
0:44:57 missing i needed a social vehicle your mtv wraps now you’re on television i got all the components
0:45:03 that i need to be successful right but i ain’t have permission to use those labels
0:45:10 right yeah so i’m making all this stuff and i’m under the radar i got all the wrappers and everything
0:45:16 now then the uh athletes start coming got all the black athletes and stuff
0:45:23 then mike tyson comes to the store he’s with me when we camber when she’s starting out
0:45:28 now i’m getting all this attention on top of that mike tyson gets into a fight
0:45:37 with mitch blood green in my store next thing it comes out uh monday night football
0:45:43 and then you get up in the helicopter you know over the ganky state down there somewhere
0:45:50 dapper dance 24 hour boutique ha ha ha you know it’s like they’re making a joke out of it but but
0:45:57 now everybody everybody knows so the brands say who the hell is a dapper dan the next thing i know
0:46:05 hip hop is moving on moving on the om tv is bursting out so all this all this attention i’m getting
0:46:14 all this attention now and now there’s something very particular is happening with the major european
0:46:24 brands the luxury houses right they are bankrupt for ideas yeah you know so you couple that with
0:46:31 what i’m doing yep and then it becomes notice say wait a minute so what i did with these symbols
0:46:40 is to create this new idea which they named after me which is called logo mania yeah today
0:46:51 today you see the reason louis Vuitton gucci fendi every major brand is using the format that i use
0:46:58 when you go to the store look around look at the artist they have logos all over and that’s
0:47:05 what i gave birth to that idea so that was the infusion that the luxury brands use so now here’s
0:47:19 the plan first part of the plan work like this cease and desist cease and desist next thing i
0:47:27 know the brands is coming to my store yep with anything with their logo on it yeah giving me a
0:47:33 letter to desist what you’re doing now they all started reading you all started reading that’s part
0:47:38 that’s part one right kept reading every time they come they taking all my merchandise and everything
0:47:47 so that’s cost of me money in addition to that right tommy hill figure starts going to the hip hop
0:47:54 clubs and giving out tommy hill figure jackets uh yeah you know right right right right right
0:47:58 i’m here for your jacket right figured out yeah the influencers were yeah he figured it out earlier
0:48:06 you know right so um now that infusion is coming from outside the pressure is coming from this with
0:48:13 the brands right the next thing they do yo m tv rep ted ted demmy was the producer of yo m tv rep me
0:48:19 and him had a tight relationship ted demmy told me anytime you want you just call me i’m sending
0:48:24 a film crew to here because this is the birth of two things this hip hop here fashion here this is
0:48:30 other side of the coin that’s moving on right they go to ted demmy and tell ted demmy if you show
0:48:36 anything that dapper dan wears we’re not advertising with you and that’s when you started seeing the
0:48:42 blur yeah on what the rappers was wearing right so now they’re raiding me you know what i mean
0:48:50 they blurring the next step is to give the contractors yeah so what the first door that
0:48:56 opened was i remember when jam message j came to the store he said that man adidas just gave me a
0:49:07 crazy deal you remember he came in with a big gold chain with a big gold adidas shoe oh yeah and that
0:49:14 was the beginning that was beginning of a thing then ll cool j then fooboo comes about fooboo
0:49:22 for us by us yeah who said that for us by them do your homework
0:49:33 do your homework so fooboo steps it
0:49:44 ll cool j wears a hat for a photo shoot that he was doing for um for the gap yeah
0:49:51 bam takes off everybody see that fooboo starts clocking numbers yeah so now the next idea now
0:49:56 listen to this next idea this was our opportunity right now i’m gonna go to that next i got 23 people
0:50:02 working i got a three-story building on 125th street 2000 square foot factory on 120th street
0:50:12 so this is all money that’s going out right so one day fendi comes to the store with the marshes
0:50:20 season to sys order i got a jacket a three uh a full link coat look like an aqua school coat
0:50:26 with tuxedo black mink color black plange leather with all the black on black f’s on it
0:50:35 soda mayo anybody know who she is soda mayo she’s a supreme court justice yeah at this time
0:50:39 she’s working for fendi as one of the lawyers for fendi’s she comes in the store with the team
0:50:47 she’s saying that jacket that coat is so amazing he belong downtown they don’t take me downtown
0:50:55 they take all my clothes downtown so that these raids kept raiding me broke and raiding me broke
0:51:01 and i kept losing money on top of that the most critical thing is now you know i started out
0:51:08 with the gangsters but now because of the drug culture it’s imploding because they’re fighting
0:51:14 against each other right and when they couldn’t find each other to fight late at night they knew
0:51:22 that but they was making money so 231 warning i’m sitting in my van and these drug dealers
0:51:28 who were no longer making money was struggling attempted to kidnap me i fought them off and
0:51:37 they shot me and today that’s why i have a bullet at the base of my neck so what happens is and
0:51:45 that’s why you might hear me say you cannot be in it and not of it so after after that i had to
0:51:51 figure out you know what i had to start all over again i went from a table and selling clothes
0:51:58 out my car to a three-story building with 23 people sewing five family members working
0:52:04 you know in a big factory where i’m doing the cars because i did cars everything anything you
0:52:12 wanted with symbols on it i give you all the symbols you want anyway you want so i’m doing all
0:52:18 that so all of that vanishes yeah because you know my payroll was 12 000 dollars a week back
0:52:25 then that’s 48 000 a month i’m just with just with the workers 48 000 a month and then i had
0:52:31 rent on the three-story building and rent on the on the factory so all i was adding up but my my
0:52:41 passion for the for my work is because like we was like a family so even when i got shot i’m
0:52:47 laid up for a month i’m still paying them so that’s one month is 50 000 so all is caved in on me the
0:52:58 next thing i know i um back on the sidewalk with a little table like this yeah selling t-shirts
0:53:08 but i said to myself you know what i’m gonna come back so i never i remember when um my daughter
0:53:12 said dad what’s wrong with daddy she never saw me like that i laid up for like three months
0:53:18 just wondering what i was going to do next and then um my wife said we got to do something
0:53:24 so i made iron on chanel t-shirts and went on 125th street the table like that dear
0:53:30 i’m counting tour buses i counted 144 tour buses that came through i ain’t said one t-shirt
0:53:36 but i said you know what i’m gonna figure this out again at the time guests came out right yeah
0:53:40 i started making these little outfits for girls these little guests with the little
0:53:48 this little like uh little uh cheerleader skirt and and nice little tops with the guest symbol
0:53:54 and skirt and the symbol match with that little guess what order yeah and and i started selling
0:54:01 like 30 or 40 them a day straight for six months next thing i knew i had another 100 000 you know
0:54:08 i’m calling call it africa right so now i got enough money and i’m building me up another little
0:54:14 team so i still can’t go off the radar right so my nephew there i get my little nephew there me
0:54:21 and him hit the road all right so because i knew all the gangsters i would drive from new york
0:54:26 city to chicago hitting all the black cities ah let me tell you a trick that i can tell you about
0:54:30 this one i had a friend work for fooboo so i knew what their distribution was so i went to every
0:54:37 place they was at going west and i come back and did the same thing going south i struggle
0:54:44 next thing i know i had all this money again yes and then i was stable and in addition to that
0:54:49 something new took place with the rappers now the rappers got money they forgot all about me though
0:54:55 right no i can’t say that jz didn’t forget you know because he came of age and what they would do
0:55:00 is send this is this gay birth to what you call the stylist today all the artists are working
0:55:05 with stylist now so the stylist was the mediator between me and them i didn’t like that but i worked
0:55:12 with that anyway but um i think um by the time i’m getting ready to come out the underground
0:55:18 we had this big gap right so from the time this is important from the time that they rated me
0:55:25 to the time that i came back all these black brands these mundari brands emerge but what they
0:55:31 did not do was study the game they didn’t do no reading no studying and so they took
0:55:39 the luxury idea that i created for us and took it downstairs right right one thing you never
0:55:46 see me do i never made no gang paraphernalia i never did anything associated with that try to keep it
0:55:51 on a luxury level so they they made it so that anybody can have it anybody can do it and then
0:55:56 it went down so between the time that i went underground and all these brands emerged they
0:56:02 all collapsed but this time is giving all the brands besides beside tommy hillford because
0:56:09 he’s the first to peep it yeah all the other brands start kicking in even raffle rent because
0:56:16 that’s why raffle rent opened up raffle rent sport and got that black model tyson yeah all
0:56:24 that was to the lure to bring us in so now we lose all of that time while these minority brands
0:56:28 is the emerging but they don’t understand how this is supposed to be marketed and all of those
0:56:36 crash that give the luxury brands that gave the luxury brands time out the step in and do exactly
0:56:42 what i was doing but charge way more yes and so that’s what we have today but they made a mistake
0:56:53 my partners and the best guys out there today gucci created this jacket that i created in the 80s
0:56:59 for diane dixon ha the difference now and as opposed to when i first started
0:57:06 is that now i have a voice and i didn’t know i had a voice but that voice was black twitter
0:57:26 black twitter said uh uh that’s dapper dance you know no that’s dapper dance
0:57:31 trap black twitter went in right yeah so the next thing i know my son is of age now
0:57:40 my son said dad gucci want to talk to us first we got all these entertainers and
0:57:45 all these big wigs calling us and man yo dad man gucci’s trying to get to you through us
0:57:52 right my son say dad gucci want to talk to you no child and i don’t trust them i haven’t been
0:57:58 rated like crazy what i’m gonna talk now but i said they want to rape me again hey they ain’t
0:58:03 gonna find me don’t give him my number don’t you say nothing
0:58:13 you say no dad they want to really talk i say oh yeah i say oh you sure something he said yeah
0:58:19 man i say tell them come to hollam they came to hollam i say damn they serious
0:58:24 they came to hollam we ironed out this deal they said we know
0:58:30 that the world knows who you are yeah now he say and all these brands
0:58:38 are paying you homage but they’re not paying you yeah you’re gonna change that
0:58:48 so they came to me with this partnership deal let’s say this is what we’re gonna do
0:58:53 we’re gonna allow you to open up a store in hollam beautiful store a telly air no more
0:59:01 store a telly air y’all got that yeah they’re gonna allow you to open up the telly air in hollam
0:59:06 and you’re going to be able to do what you’ve always done produce steel only thing is without
0:59:11 fabrication and that’s going to be a partnership in addition to that we’re going to have a
0:59:16 Dapper Dan line and we’re going to partnership on that and that’s going to be distributed
0:59:25 around the world and you get a percentage of that and so and and that’s the deal i made right
0:59:33 and it was working fine then there goes another boo boo but before we go to the boo boo
0:59:42 let’s go back to Louis Vuitton soon as Gucci gives me this partnership Louis been number one for
0:59:53 years all of a sudden Louis brings up Virgil right now you know that’s a reaction because
1:00:00 Gucci put me in and we got a collection ready and we’re shooting it out Louis Vuitton reacts to
1:00:04 that by going to get Virgil and they don’t have a collection so you know it wasn’t free plan
1:00:11 but a reaction right and that’s good because we’re getting in these spaces which is where we
1:00:18 need to be you know but before that two important things happen first there was Gucci ghost a great
1:00:25 kid great idea and he was doing some of the things for Gucci that I did right but he wasn’t quite
1:00:32 Dapper Dan and then Louis Vuitton went and got supreme because supreme is connected to the
1:00:40 millennials so they go get supreme right but what the what the public did not know when supreme
1:00:50 made the partnership with Louis Vuitton when they initiated the line and everybody attended the show
1:00:56 was issued a letter stating and I want you all to hear this in the back stating that this whole
1:01:04 collection is inspired by Dapper Dan so do your homework and find out so here it is everything
1:01:10 has come out of Harlem this creative force associated with hip hop that’s circling the
1:01:17 planet now we got two things we got one number one is our ideas of fashion has encircled the world
1:01:27 right to our musical platform has encircled the world the only problem is hip hop has gotten their
1:01:35 money through trials and tribulations but we are not making any impact in fashion yeah because of
1:01:41 what we did from the time I closed down to the time I got this partnership we didn’t approach that
1:01:48 right so now all the brands got the power but now it’s far it’s slipping away it’s slipping away
1:01:53 because they’re making mistakes so when Gucci made a mistake it wasn’t intentional in my opinion
1:02:00 they made a mistake and did the blackface that was another boo boo well now I got to represent
1:02:04 who I am and where I come from so I had to tell Gucci I said listen man I’m a black man before I’m
1:02:10 a brand how you gonna do something you got to come back to Harlem again and explain what you did
1:02:18 so they came back to Harlem again and we sat down and what I did was I organized all the people
1:02:28 that I could find in the corporate world those who were responsible for the for the mechanical way
1:02:33 that corporations work and those responsible for cultural inclusivity so that they can come
1:02:41 around and organize a plan by which we can have a presence in Gucci so that this doesn’t happen
1:02:46 again and we represent it right if you want to read about it it’s called a change makers program
1:02:53 by Gucci and with it so far they didn’t hire two vice presidents they got programs to recruit
1:03:00 young black designers or minority designers and this huge program now if you look and see what’s
1:03:06 happening the world is is becoming a community now people are flying who never flew before people
1:03:11 have visited country normal so the world is getting smaller people are more familiar now with our
1:03:17 culture than ever before so we have to be represented in them places what people have to
1:03:24 realize here man you don’t have to do like I did and start from a table we need to be inside
1:03:29 these corporations on a higher level so we can take advantage of the opportunity to see how they
1:03:36 run yeah and how they work so that we can do these things for ourselves yeah so last question
1:03:41 because this is such an important point that you made when you decided to work like you
1:03:45 could have gone the other way they sued you put you out of business you could have said well like
1:03:49 we’re going to get rid of Gucci we’re going to sue them into the ground
1:03:56 but you kind of took a lesson from what you learned in Africa when you visited Kenya
1:04:03 the very good and then Uganda with Idi Amin yeah very good point so we’re not everything I did
1:04:10 nothing that I’ve done has been I act by accident it’s all been done through research so when I went
1:04:19 to Africa 1968 I studied the how to they handle their government and their industry so when I was in
1:04:27 Kenya I stayed with Chief Richard Karani and he was equivalent to like a borough president right
1:04:32 and what he taught me was that like what Joe Mokinata did when he became president
1:04:37 like all the colonial land and the colonial houses that they had he reappropriated the
1:04:45 colonial house and what he did was he take this clone this uh uh uh colonial house and he give it
1:04:51 it’s two major tribes in Kenya the kikuyu and the luau he said okay you’re kikuyu you live here
1:04:57 this you take this out you a luau you live here so he split it up so that there’d be this unity
1:05:02 the next thing he did and the most important thing he did which is what I implicate and I talk about
1:05:11 in fashion is that Joe Mokinata told all because the the economy was dominated by people from
1:05:17 outside basically in East Africa they’re Indians so Joe Mokinata told the Indians
1:05:23 that uh in Kenya he said all y’all have to have an indigenous partner in your business or you
1:05:32 cannot do business here yeah right so that’s that that’s that the framework for Africans indigenous
1:05:38 Africans to learn how to run these businesses right and Neary did something similar to that
1:05:45 but Idi Amin and Uganda did something that was devastated the economy so what he did he kicked
1:05:51 all the Indians out and he and so you didn’t have nobody inside that could take over those
1:05:57 in the economy collapsed so this is what I was thinking about when I approached the thing with
1:06:05 Wiguchi if we are to move up and move forward we have to be in the rooms to see how these multinational
1:06:13 corporations work before we can start building on our own so somebody tells you this is important
1:06:17 now and somebody tells you oh man we can start our own business tell them go get a table
1:06:24 and let me see you do it tell them go get a table let me see you do it now what’s so important about
1:06:30 that now say they’re gonna say oh yeah then they get bigheaded and they go get a table right now
1:06:37 you know every 20 or 30 something years we get a powerful cultural platform you know we’ve had jazz
1:06:44 calypso rock and roll all these all these powerful platforms by which the whole world embraces our
1:06:51 music that we could take advantage of but they don’t last forever hip hop will morph into something
1:06:57 else you know but now what what’s happening with hip hop today with which I’ve seen happen with rock
1:07:04 and roll is that other people learn how to empower themselves with our culture you know I’m saying
1:07:09 and that’s nothing wrong and that’s going to happen whether you like it or not you know so
1:07:14 what we can do is when we get these platforms that we can take advantage of our culture
1:07:21 then we have to be able to utilize the vehicles that are get our culture around the world by
1:07:27 which we can make money so while you’re sitting on that table gushy louis fendi and all of them
1:07:35 are taking elements of the culture and moving it around the world by using by using influences
1:07:42 that are representative of our culture so that’s how this works so we get a chance to work from
1:07:48 now now as the culture moves it changes people adapt to it so you got to keep going back to the
1:07:53 source from which the culture come from building on that and take advantage of that and if you
1:08:08 don’t do that you’re not paying attention on that note thank the legend

0:00:05 Hi everyone, welcome to the A6NZ podcast. I’m Sonal and today’s episode is all about a compliance
0:00:10 topic, FedRamp, which is going to affect a lot of enterprise SaaS companies selling to government,
0:00:15 and actually even if not. So, we share everything that startups need to know in this episode.
0:00:19 Please note you can find all the pointers, templates, and other links they mention
0:00:24 in the show notes at A6NZ.com/FedRamp. I highly recommend you check that out, too,
0:00:29 to get all the resources after listening to this episode. Okay, so now onto the intros.
0:00:35 This episode is hosted by A6NZ board partner Stephen Sinovsky, who interviews Lisa Hock,
0:00:40 VP of Security and Compliance at A6NZ company Everlaw. By the way, you can also catch both
0:00:45 Lisa and Stephen on another interesting compliance topic that applies to many tech startups as well,
0:00:52 GDPR, which we covered last year by going to a6nz.com/GDPR. But this episode is all about FedRamp,
0:00:57 which stands for the Federal Risk and Authorization Management Program.
0:01:02 And here’s what they cover, what risk means in selling to the government depending on your
0:01:06 product features, some of the most commonly used acronyms to be aware of, which they quickly
0:01:12 lightning round in between, how similar or different FedRamp is to other types of certification,
0:01:18 authorization, and compliance, such as ISO, SOC2, GDPR, even HIPAA. Most importantly,
0:01:23 they break down the steps to FedRamp certification, including how and when to engage third-party
0:01:28 auditors and advisors, how long it takes, and how it affects sales. They also share the best
0:01:33 strategy for moving forward with a customer lined up first, but they begin by discussing
0:01:39 why startups should consider FedRamp in the first place. Before everybody gets cynical about
0:01:46 acronyms with the word Fed in them and security and the government and all this other stuff,
0:01:51 this is some pretty interesting things that you can do for your company, and it opens up a world
0:01:57 of opportunity in terms of selling to the United States government and beyond, as we’ll talk about.
0:02:02 So first, welcome, Lisa. Thanks, Stephen. So if you’re the CEO of a company, what are the core
0:02:09 benefits of pursuing a FedRamp authorization? So if you’re the CEO of a cloud company and you
0:02:14 want to sell your product to federal agencies, FedRamp is probably going to be the only way in.
0:02:19 There are some exceptions, very limited, for instance, if you wanted to a private deployment
0:02:23 in a facility for a single agency, but that’s not what we’re talking about today. We’re talking
0:02:29 about having a FedRamp authorization, which, for the record, we are in process at Everla. We don’t
0:02:34 have our authorization yet, but it does open up a whole new market for you for all of the federal
0:02:39 agencies, and as well, it provides some credibility to the general market from a security standpoint
0:02:43 outside of government. Yeah, that’s something that we hear all the time, is that even if you want
0:02:50 to sell to a company, a private or public company that isn’t the government, they might look to see
0:02:55 like, “Hey, did you get FedRamp certified?” So we know now that FedRamp’s a requirement to sell
0:02:59 to the government, and in most markets, especially in the US, the government is potentially a very
0:03:06 big or the biggest potential customer for enterprise SaaS. No matter which agency you want to sell to,
0:03:11 you know, from DoD to Ag or HHS or whatever, FedRamp is going to be required. And in many cases,
0:03:15 like these connected or affiliated state organizations as well, something we learned in
0:03:20 Everla is that if you want to sell to a state attorney general, they’re going to want FedRamp
0:03:25 authorization as well, just because chances are they’re going to be involved in litigation with
0:03:31 the federal agencies. So what is it that FedRamp actually, you know, quote, tests for in its process?
0:03:38 So FedRamp stands for the Federal Risk and Authorization Management Program. So FedRamp,
0:03:44 like the acronym says, it’s all about risk. It’s really a program that’s designed to provide
0:03:50 federal agencies with the information they need to make their own informed risk-based decision
0:03:55 about whether to adopt cloud and, you know, a specific product. I think there was a general
0:04:01 recognition that in order for federal agencies to adopt cloud, they had to put in place a way for
0:04:08 companies to meet the federal standards and, you know, allow the federal agencies to do these risk
0:04:13 assessments. Risk is a very amorphous concept. How do they actually evaluate what risk? Well,
0:04:18 for the security folks listening, hopefully this will be comforting in the sense that
0:04:27 they didn’t make up something new. They use the CIA framework. Not the CIA. No, confidentiality,
0:04:34 integrity, and availability. So for companies that have been through, say, a SOC2 or maybe ISO,
0:04:41 they’ll have heard these terms. And in addition, they also look at baseline or impact levels,
0:04:45 high, moderate, or low. The high, moderate, or low are actually pretty important because that
0:04:51 puts people into buckets of sort of users of the product. Yeah, exactly. So when you’re going
0:04:56 through a FedRamp authorization, you’re going to have to look at your product and figure out,
0:05:02 okay, based on the impact and the information that is going to be in that cloud product,
0:05:10 what level are you high? So think law enforcement for high. Think DoD, federal criminal information,
0:05:15 or are you moderate? Like normal, the agriculture department or something like that, where it’s
0:05:23 sort of routine work. Yeah, exactly. And then for low or there’s even another… Like a low or low?
0:05:28 A low or low. Yeah, it’s called low impact SaaS. That’s a mean name. We don’t mean that your product
0:05:34 is low impact. No, but they did create the low impact SaaS for products that only contain enough
0:05:39 personal information to essentially set up an account. So they need your name, they need your
0:05:44 email, there’s going to be a password, but you’re not holding really confidential or sensitive
0:05:50 agency information. So based on those impact levels, that is going to determine which baseline,
0:05:56 and the baseline is the set of controls, and they have on the high end, the most controls on the
0:06:02 moderate, around 300. The four levels of impact levels, it’s super interesting. There’s only
0:06:07 seven authorizations for high security stuff, and they’re all mostly… They’re just the
0:06:11 cloud infrastructure providers. In fact, of the seven highs, I actually went and looked at
0:06:14 those, I thought it was interesting, three of them are Microsoft, just the different parts of
0:06:20 Microsoft, and then Oracle and some specialized ones and AWS. So nobody has to worry about this
0:06:25 extreme bar if you’re mostly an app. They’ll guide you to moderate or low.
0:06:31 One cool thing about the FedRAMP.gov website is they have a marketplace for the folks out there
0:06:35 kind of wondering, all right, what companies are doing the high, who’s doing low, who’s doing
0:06:40 moderate, you can sort by that. And it’s kind of interesting because like you pointed out,
0:06:45 the great majority are in the moderate category. And then there’s a handful of highs and a handful
0:06:50 of lows. So given that they’re not there to really bug Silicon Valley companies and make it hard for
0:06:54 the government to become a cloud provider, it’s the opposite. The directive was specifically,
0:06:59 we want to get the government on cloud. Like it’s too expensive to be on-prem, it’s let’s secure,
0:07:03 it’s harder to do, it’s less agile. So we want to get the government on cloud.
0:07:08 If you’re a government agency, what are some of the things that you observe right away when you
0:07:13 see a FedRAMP authorized product sort of show up? Like what is it different about it?
0:07:19 Well, I think if you’ve gone through FedRAMP, you’re going to show up looking a lot more organized.
0:07:24 You’re going to have that governance infrastructure in place because FedRAMP is a mix of very
0:07:30 technical things, but also governance related things. So if you’ve set up your security program
0:07:36 in a way that addresses things like personnel security, policies and procedures for specific
0:07:41 things like role-based access control, then you’re going to show up as looking like you really have
0:07:47 your act together compared to a company that has these various security controls in place,
0:07:52 but maybe hasn’t gelled them into a program. I should have mentioned this earlier. So all of
0:07:58 these sets of controls for the high, moderate and low baseline are separated into control families.
0:08:02 So for example, incident responses of family, but the more technical ones are things like
0:08:07 configuration management, which deals with creating blueprints for the server types to
0:08:12 meet functionality and hardening requirements, things that require implementing center for
0:08:18 internet security benchmarks. And we’ll provide a link to the CIS benchmarks as well.
0:08:23 Obviously, one of the things that ends up mattering the most security is just sort of access and
0:08:28 identity and the role of authorization in general. Where does that fit in in these families?
0:08:34 So it spans several of them, but there is one control family called IA, which means identification
0:08:39 and authorization, which deals with how you implement your system accounts, including credential
0:08:44 management, version control, multi-factor authentication, which has to meet certain
0:08:51 cryptographic standards. And it’s worth noting that in these control families, sometimes you,
0:08:57 as a cloud service provider, are going to have the responsibility for the implementation,
0:09:03 like something for authentication, but also sometimes the federal agency also has a responsibility
0:09:08 in terms of how they implement their users and distribute out their user names and so forth.
0:09:12 So that is also something that’s noted in the control family.
0:09:16 So you don’t go through this authorization process and it’s a recipe. There’s like
0:09:22 lots of decisions to make, lots of product design questions that are favorable to enterprise SASS
0:09:26 and have to sort of allow room to adapt to the variations across the government.
0:09:31 And most of the controls a company can implement them in their commercial
0:09:35 environment as well. We want all of our commercial customers to benefit from the
0:09:39 same level of security as our future federal customers.
0:09:43 Because chances are, whether you try to sell to a big tech company or a non-tech company,
0:09:49 that they’ve probably developed some list of things that look like these families,
0:09:53 but might not be exactly the same and ultimately you’re going to end up in the same boat trying
0:09:57 to get all these done. I mean, the federal government and federal agencies are not the
0:10:01 only ones that use the NIST framework for security and privacy. Many companies do it.
0:10:05 A lot of security questionnaires are going to be based around NIST. So
0:10:08 it’s one of many acronyms. I think we’re going to go over it today, right?
0:10:11 Yeah. So I’m just going to go through a few of them and like make sure people know because
0:10:15 we’ll say them and then we’ll forget to expand them. And so NIST is one of my favorites because
0:10:20 that goes so far back. That feels like 1950s NASA and they’re like in charge of
0:10:24 weights and measures and stuff like that. But what do they do with this?
0:10:28 NIST does a lot of cool stuff. But as it relates to what we’re talking about today,
0:10:33 NIST, the National Institute of Standards and Technology is the agency that defines
0:10:39 government-wide standards for technology and security. And the one specific NIST document
0:10:44 that we’re talking about today is a special publication, 853, which deals with security
0:10:50 and privacy controls for federal information systems. So FISMA? Yeah. So FISMA stands for
0:10:55 Federal Information Security Management Act. And this is something that applies
0:11:01 to federal government agencies and requires them to put in place a security framework
0:11:04 to secure their information. So it doesn’t apply to the private sector.
0:11:07 So next was obviously a big government agency called OMB?
0:11:13 Yeah. OMB is sort of like the COO for the federal government. They oversee budgeting
0:11:21 and spending. And then their sibling agency GSA is the General Services Administration
0:11:25 and the FedRAMP office. So our friends in the FedRAMP PMO, which means Project Management
0:11:31 Office, they sit under GSA. Awesome. And then finally, this whole thing is about
0:11:36 the acronym they invented called CSPs. Yeah. CSP stands for Cloud Service Provider,
0:11:42 and you’ll also hear CSO, which stands for Cloud Service Offering. So FedRAMP is all about cloud,
0:11:46 which is why I think we’re here today talking about it for the SAS folks out there.
0:11:50 Okay. So we have a bunch of acronyms out of the way. I got to tell you, as Lisa took me through
0:11:56 the EverLaw certification, I have never seen so many acronyms exist in this process.
0:12:03 So your typical Series B enterprise startup, is FedRAMP anything like what they’ve done before
0:12:10 in terms of running the sales process or a security process? Is it like SOX2? Is it like GDPR?
0:12:15 I think it depends on what a company has done up until the point they decide, “Hey, let’s do FedRAMP.”
0:12:21 So if you’ve been through a SOX2 type 2, which is the audit that tests your operational effectiveness,
0:12:26 then you’re probably in a better position than if you’d only done a SOX2 type 1,
0:12:31 which is just, “Do I have a program in place?” So I would say it really depends on what the
0:12:34 company has done up until then. And what are some of the dimensions to really think about?
0:12:38 Like, is it the size of the company thing? Is it the number of people you have dedicated
0:12:42 security? Is it like how much data you store? Like, what are some of the variables that people
0:12:49 should be aware of that might impact their time and effort and need and complexity of going through
0:12:55 authorization? Yeah, it’s a great question. The first thing is that if you have a motivated
0:12:59 federal agency, that is going to be the biggest factor that either pushes you ahead or slows you
0:13:04 down. So if you’re in a place where a federal agency has already expressed interest in your
0:13:09 product or you’ve already been in conversations and they’re motivated to be your partner in the
0:13:15 process and give you the confidence you need to make that financial commitment because it’s
0:13:20 going to take internal resources, which has a cost. Like, one of the things that you mentioned was
0:13:26 just how the lens of FedRAMP changed the Everlaw culture a little bit to be much more focused
0:13:32 on sort of this continuous monitoring sort of mindset. How did that come about? From a continuous
0:13:39 monitoring standpoint, we found that the FedRAMP controls helped us gel around things like configuration
0:13:46 management, making sure there are security checks and security impact analyses. So putting in some
0:13:51 of those processes, which on a continuous basis, now we’re doing every release, in addition to the
0:13:55 things that are just straight up required by continuous monitoring like vuln scanning. I think
0:14:01 there’s a perception of FedRAMP that it’s, you know, a lot of policy, it’s a lot of checking
0:14:08 the box. And like any team that is staring down the face of a major security compliance and
0:14:13 technical project, we were kind of thinking, oh no, there are going to be so many controls in
0:14:19 here that are just check the box. And like any compliance framework, there certainly is some
0:14:25 box checking involved. It’s a lot of governance, which is true. There are a lot of control families
0:14:31 that deal with a company’s infrastructure like personnel security is the PS control, AT is
0:14:35 the awareness training control. But we found that on the whole, a lot of the controls really
0:14:40 pushed us forward. And a lot of things we were already doing, there were some things that we
0:14:46 needed to improve. But the process has really made our entire infrastructure more secure.
0:14:51 No one at Everla had FedRAMP experience before. I mean, we’d been through SOC2,
0:14:57 and we’d been through, we were actually undertook it at the same time as GDPR, which looking back
0:15:01 is a little bit crazy. We didn’t really get a choice in GDPR though, so. That’s true.
0:15:05 So if you’re a startup where the team has varying levels of experience and actually
0:15:09 haven’t gone through all of these things collectively, it sounds like what you’re
0:15:13 saying is just by virtue of having gone through the process, the whole organization
0:15:18 sort of gets up leveled and consistent based on just using this as a framework.
0:15:22 You mentioned that it is also deeply technical. Like this is not just a list of, you know,
0:15:26 do you have a security policy manual? Do you have cipher locks on your door?
0:15:31 There’s stuff about the code and the product. What are some of the things that are technical
0:15:36 that you had to sort of bring in engineering or product or DevOps and security ops to really
0:15:41 think about? Yeah, and I’ve already mentioned a few of the other more governance-related
0:15:46 controls before. There’s also IR, which is incident response, but some are very technical and just
0:15:52 anecdotally in the system where Everla tracks sort of our features and what the things our
0:15:56 engineers are working on, there were over a hundred tickets in there. I don’t know if
0:16:01 ticket’s the right word, but basically, you know, feature ideas, functionality that we
0:16:06 were going to implement that all required dev resources. And they ranged from simple things
0:16:10 like adding a banner into the platform that says, you know, you’re entering a federal
0:16:14 environment in our federal environment to very complicated things.
0:16:18 I think one of the things that is kind of interesting too is that this is not like a
0:16:23 secret part of the government. Like all the CIOs across all the agencies sort of know this is
0:16:28 going on. And so it sounds like it’s become their common vocabulary and security is for the
0:16:32 government the first order priority before functionality. So their sales team is just
0:16:37 going to need to know all of these words just to interact with the customer.
0:16:42 Yeah, I presented our sales kickoff this year presentation on selling security to help them
0:16:48 understand what does it mean to be FedRAMP in process to make sure that they’re not misrepresenting
0:16:52 what our status is to the market, but also so that they can talk about it confidently and
0:16:55 understand how it’s different from our SOC2 and so forth.
0:17:01 So clearly there’s a series of steps that have to happen. Like what are these steps?
0:17:07 So that flowchart is actually in the cloud service provider playbook, which will provide a link to.
0:17:12 And the first step is going to be establishing a partnership with a federal agency. I mean,
0:17:16 like we were talking about before, it’s just really critical that you have that agency support.
0:17:21 And then once you have that agency support, then you’re probably going to feel confident enough to
0:17:26 start using your internal resources. So that’s going to be putting together the package. And when
0:17:31 I say the package, it means system security package or SSP, which is another acronym.
0:17:36 So working on that documentation and then also working on any technical remediation you might
0:17:41 have to do. And so then eventually, like someone who doesn’t work for the agency or
0:17:44 forever law is going to show up and sort of test you.
0:17:50 That’s right. The step before that authorization is a full security assessment by an independent
0:17:57 auditing firm. And in FedRAMP lingo, it’s called a 3POW. It’s a third party assessing organization.
0:18:02 And there’s a small set of companies that can do this because they have to meet FedRAMP standards.
0:18:07 And so you have to bring them in just like any other independent auditor and they review all of…
0:18:08 And this is like on site?
0:18:14 Yeah. Yeah, they came on site for a week, but they review all of your implementations. I mean,
0:18:18 your screenshotting, your work in the command line in front of them to show them how you’ve
0:18:20 implemented specific things.
0:18:23 And do they like snoop around and everybody’s like, who are these people in suits?
0:18:27 And like, do they have special badges? Like, how does this really work?
0:18:33 I mean, they’re very technical. And they’re there to make sure that what you’ve represented
0:18:36 in your security documentation is the actual thing you’ve implemented.
0:18:41 I mean, the federal agency is trusting them to help them form their risk-based decisions.
0:18:43 So they’re serious about it, but they’re great. They’re nice.
0:18:50 And they’re basically consultants that come in on behalf of the OMB basically execute on this plan.
0:18:54 I mean, they are working for the agency, not for you. You can engage an advisor.
0:18:55 What does that entail?
0:19:00 So there are other companies that can serve as the independent assessor or they can serve
0:19:06 as a consulting advisor. The key thing though is that if you engage a FedRAMP consulting advisor
0:19:10 to help you put together your documentation, you can’t use them as then the independent assessor.
0:19:11 So you’ve got to swap.
0:19:17 Basically, there are these specialists in doing security audits and there are a list of them
0:19:23 that OMB supports and you can use them either to help you or to audit you.
0:19:23 Yeah.
0:19:26 And you just pick and you might end up engaging too.
0:19:27 But they’re basically it’s a consulting engagement.
0:19:30 That’s right. And you might be thinking, why would I want to engage a consultant?
0:19:32 To help you with a consultant.
0:19:38 Yeah, exactly. But the fact is, even with all of the program documentation that we had at Everlaw,
0:19:42 you know, the whole suite of infosec policies, we had great procedures around personnel security
0:19:47 and training. But we still needed to engage a consulting advisor to help us put together
0:19:52 the system security package. It’s of course a template that you can pull down from FedRAMP.gov.
0:19:58 And since we’re an AWS customer and we inherit a lot of the cloud infrastructure controls from AWS,
0:20:01 AWS will also provide you with that as well.
0:20:08 But some things are just hard to navigate without the experience of knowing what the
0:20:14 agency will accept. So a couple of examples are the consulting advisor can help you translate
0:20:17 what the agency is actually looking for when it comes to an implementation.
0:20:21 So if you have to do a deviation from a CIS benchmark.
0:20:25 Ultimately, this process boils down to creating a lot of documentation.
0:20:27 Like they don’t just have a phone call and take your word for it.
0:20:32 So a lot of it sounds, I mean, like you said, like, oh, you inherit some of it from AWS.
0:20:36 So it sounds like sort of this large amount of paper that has a bunch of forms that are all
0:20:42 filled in already. Well, our full SSP without the attachments with the implementations described
0:20:47 is around 500 pages. But the template itself, even without those is probably, I don’t know,
0:20:52 it’s probably 30 pages or 40 pages just without all our info in it. It’s a big lift to do that.
0:20:58 So we found that a consulting advisor could we could spend some time talking with them chatting
0:21:02 with them on the phone explaining things. And then they would go write it up for us.
0:21:06 And then we would QA it. So instead of us having to do that big lift,
0:21:10 they did that for us. And then it was much more efficient that way.
0:21:13 So, you know, obviously, there’s a bunch of sections and chapters and different parts,
0:21:17 which part of it was the part that really was like a ton of work where like,
0:21:22 the engineers needed to engage and you needed really detailed technical answers.
0:21:24 Like, what was the scope of that and where in the process?
0:21:28 So we went back and forth with our consulting advisor. So we would
0:21:34 describe our technical implementations and then they would take the first crack at writing them
0:21:38 up. And then our director of infrastructure had to edit things out because every once in a while,
0:21:45 but also describing our entire system architecture and doing the architecture diagrams. Those are
0:21:48 all things that, you know, our engineering team definitely had a hand in.
0:21:51 Right. And it turns out it’s one of those things that like, well, we didn’t really
0:21:56 have a good architecture diagram of our system. And so now we have one. And now we keep it up to
0:22:00 date because we have to because of con mon and all that, but sort of ended up being beneficial.
0:22:07 Anyway, okay. So you’ve got like this 500 page SSP thing sort of all bound up and ready to go.
0:22:12 How do you know you’re getting to the finishing line? And what does that start to look like?
0:22:17 So once we had all of the documentation wrapped up and, you know, you can’t get too hung up on,
0:22:21 you know, the final product, because the whole thing is meant to be a living document,
0:22:25 because, you know, when we finished documenting it, then we knew we were going to implement
0:22:28 something else. So it’s sort of, you know, you’re going to have to keep updating it.
0:22:33 But the finish line comes when you’re ready to actually hand that package over to the independent
0:22:37 auditor and to say, all right, you know, here is all our stuff. We’re putting it out there for
0:22:43 you to review and schedule that onsite audit. And so then the auditors show up, they read a lot,
0:22:49 they watch you doing the work. And then what happens? Then they put together what’s called
0:22:56 a SAR, which means security assessment report. The SAR is the auditor’s report on your overarching
0:23:02 compliance with the baseline. And if they have findings, they’ll rank them as, you know, high,
0:23:11 medium or low. Like concern? Yeah, exactly. Because what their job is, is to describe to the agency
0:23:16 what the risks are to using the system. So if they find things during the audit that they deem as a
0:23:21 high risk, and, you know, it’s all scoped out what those risk categories are, but they’ll deliver
0:23:27 that to the agency. And again, to your point about risk, it’s not like a pass fail, because then the
0:23:34 agency who’s the customer looks and says, ooh, you have two highs, that might be too, too many. Or
0:23:37 are you planning on fixing this? If you’re planning on it, there’s like a whole give or take.
0:23:42 After you do 18 months worth of work or nine months worth of work, you don’t fail and have to go back.
0:23:48 And the customer is in control of evaluating the risk of like still buying you or not.
0:23:54 Yeah. And those findings would go on to what’s called a POAM or plan of action and milestones.
0:24:00 So once you have those findings, then you would describe what you’re going to do to fix it. What’s
0:24:04 your timeline? What are your milestones and so forth. And one of the benefits of having that
0:24:07 consulting advisor looking at your package and helping you do that is they’ll tell you what a
0:24:12 showstopper is. They’ll say, hey, that implementation is not going to cut it. Don’t do that. Let us help
0:24:17 you. So sometimes people think about compliance. They think about it as sort of like getting your
0:24:21 driver’s license. Like you get annoyed, you go through a process, you take a test and then poof
0:24:26 you have a driver’s license basically for the rest of your life. But FedRAMP isn’t really like
0:24:30 that. There’s a lot about monitoring and keeping things. And so what did you learn going through
0:24:34 the process that was different than other types of certification or authorization?
0:24:39 I mean, the one thing I’ve learned is that FedRAMP is not over. And I have to laugh.
0:24:43 Okay. That’s like an uplifting motion. Like, yeah, please list our podcast for the thing that’s
0:24:48 never going to end. Well, it’s just funny because we’ve been working on this and every time we hit
0:24:52 a big milestone, we like to celebrate it with the wider team and everybody’s like, yay. And then
0:24:58 they’re like, oh, you’re done with FedRAMP now, right? And we’re like, no. So continuous monitoring
0:25:04 is one thing we already mentioned where even once you obtain your authority to operate or your ATO
0:25:08 and you have that authorization, you’re still going to be working with the agency on a regular
0:25:13 basis. So you have your ATO and you’ve got a bunch of Kanman going on just to use all the
0:25:18 acronyms in one sentence. Yeah. And we’ll link to the Kanman guide, which talks about what that
0:25:24 looks like. But in a nutshell, you’re doing monthly scanning, your ranking vulnerabilities,
0:25:28 you’re responding to those on a specified time basis, et cetera.
0:25:34 So let’s say that the company is ready to dive in. They have a product that they’ve been selling to
0:25:40 commercial customers. The first cohorts believe it meets their needs for security and privacy and
0:25:44 things like that. The product is selling, but now if agency is interested, for whatever reason,
0:25:50 that inbound or you spoke at a conference or something. So first, how long do the salespeople
0:25:57 have to wait until the deal is closed now? Well, be nice. Yeah. I mean, again, it depends on how
0:26:02 motivated the agency is. That’s a super important point. It’s not just how motivated you are as
0:26:06 the company. Like if the agency really wants you, they can pull you through in a lot of ways.
0:26:12 Yeah. Because again, it’s all about risk and the agency is the decider of what kind of risk
0:26:18 they’re going to tolerate. And so if an agency is really motivated, then they can help push you
0:26:25 along to becoming in process. And in process is a designation that requires explicit agency support.
0:26:30 But if you’re at that stage where you’ve got that interest, you have to choose, okay, am I going to
0:26:34 go, there are two ways to get authorized. There’s the agency route and then there’s something called
0:26:39 the JAB, which is the Joint Authorization Board, which is a little bit harder to do because you
0:26:44 have to do a business case. So I think for our purposes, it makes more sense to address the agency
0:26:49 route, which is probably the situation you’re talking about, where somebody expresses interest.
0:26:53 Right. So that’s probably a good lesson for folks, which is that the best bet for going
0:26:58 through this is in a sense to first line up a potential customer rather than just sort of say,
0:27:01 oh, well, let’s preemptively go and do FedRAM because it actually makes more work for yourself
0:27:05 if you don’t have the first customer lined up. Yeah, that’s right. And they do have that JAB
0:27:11 process, which is for companies that might have a broad application, but it’s a much different
0:27:17 process. Okay. So there’s a bunch of actual bureaucracy stuff about getting on the GSA list
0:27:24 and filling out those forms. But then is it a year, two years, five years? How long is this exactly?
0:27:28 Yeah, let’s not keep the sales team hanging too long. So if you’re counting from the time you
0:27:33 have your package already, it could be as little as a few months, maybe even six weeks we’ve heard
0:27:39 for the agency to review that package and grant you the authorization. I think if you’re counting
0:27:44 from the day, the team says, hey, let’s do FedRAMP and you still have to put the package together,
0:27:50 you’re probably looking at at least nine months or a year possibly. So it’s actually not wildly
0:27:54 out of bounds with what a procurement team might do or like any of the large tech companies that
0:27:59 just do what they call a security audit or something might easily take that same length of time.
0:28:04 It comes down to how many resources the company has to bring to bear on the project because,
0:28:08 you know, we took a little bit longer, but that’s because we didn’t stop people
0:28:13 from doing their full-time jobs only to work on FedRAMP. We didn’t stop feature development for
0:28:18 the product. So you decided you’re like flipping the switch and you’re going to go for it. Did
0:28:23 you have a team of 10? Like how many people have to do all of this checkboxing and process
0:28:30 documentation and conmon stuff? So when we started, it was just myself on the security team.
0:28:36 We had our engineers that were involved in sort of scoping and looking at how much work we thought
0:28:41 it would be. And then over time, we brought on a DevOps person. We hired a couple of people onto
0:28:47 my team. But again, none of us have been doing it full-time. So it’s been probably a core group
0:28:53 of five people working on various elements of it. And then when we were doing the push to
0:28:57 complete a lot of the technical and engineering work, we brought in other engineers.
0:29:01 And this is an interesting point because of the way you chose to do it. But you overlaid
0:29:07 like SOC2 and GDPR and other privacy work sort of all at the same time, which sounds overwhelming,
0:29:11 but it’s also closely related. Was it more efficient to do it that way?
0:29:17 Doing a lot of these broader things like GDPR and FedRAMP, you know, there is overlap. So
0:29:23 it certainly helps. I don’t know that I would wish that all those things on anyone, but certainly
0:29:28 you’re doing a lot of the same things. And, you know, for folks that do SOC2, you probably know
0:29:34 the COSO standards were added, I think last year. Okay. So one last thing, which is you go through
0:29:40 all of this, you’re given the label like in-process, authorized, like what is the specifics of that?
0:29:44 Because that’s something that salespeople often do get confused because of the FedRAMP lingo,
0:29:50 so to speak. The lingo can be slightly confusing. So in order to be listed in the FedRAMP marketplace
0:29:54 on the website, a marketplace, which is literally like these are the cloud things you can go buy
0:30:01 as a federal agency. Yeah, exactly. So there’s FedRAMP ready and FedRAMP in-process. And I think
0:30:07 people swap those around a lot. So FedRAMP ready means that you’ve gone through sort of a high
0:30:14 level of valuation. And if you get that ready stamp, it means that they think that you’re capable to
0:30:19 meet the FedRAMP requirements. And it’s just intended to help agencies look out there and say,
0:30:24 oh, well, you know, there’s an independent assessment that these folks are ready and can
0:30:31 probably do it. Whereas in-process is a designation where you have to have the authorizing official
0:30:36 add an agency, tell the FedRAMP office that we are working with this cloud service provider on
0:30:41 an authorization. You’re not authorized yet, but you’re affirmatively working on that authorization.
0:30:45 And don’t play fast and loose with those terms with your salespeople. Like,
0:30:50 don’t make up what they mean and don’t say what you aren’t. Because they like branding guidelines
0:30:54 and stuff. Yeah, the FedRAMP office has branding guidelines. And, you know, for a good reason,
0:30:59 they don’t want companies out there saying that, you know, they have a FedRAMP authorization if
0:31:04 they don’t. They’ve worked hard on creating this process and creating this framework. And
0:31:09 they don’t want companies misrepresenting. And so ultimately with security things, the reason,
0:31:13 you know, nobody wants anything to happen, like a breach or anything like that. But
0:31:17 if you’re operating in this environment where you’ve committed to a customer, in this case,
0:31:24 a federal agency that you do all this stuff, and then something happens, does FedRAMP have say in,
0:31:28 like, are they part of like adjudicating the failure? Or do they have remediation duties?
0:31:32 Like, or is they’re not involved in that? Like, where does the government come in
0:31:38 in terms of a security issue? Well, fortunately, I don’t have direct experience with that. But
0:31:45 the Kanban guide on continuous monitoring does cover various types of escalations like incidents.
0:31:51 And so I think if a company had an authorization and they had some kind of security incident or
0:31:57 breach occur, it would go through that escalation process in the Kanban. And certainly they contemplate
0:32:03 revocation of your authorization. But I imagine it would be a conversation with the folks at the
0:32:07 agency, you know, talking about your plan for remediation. Did you catch it? Did you limit the
0:32:12 damage? So I don’t have sort of a black and white answer on what would happen there, but
0:32:16 I know that they’ve put a framework in place to address those kinds of things.
0:32:20 All right. So in your role in Everlaw, you’ve gone through quite a few certifications. Like,
0:32:26 you’ve gone through GPR, you’ve gone through SOC2, you’re working on FedRAMP. Like, where does this
0:32:31 fall in the spectrum of effort and time and complexity compared to you’ve done some health
0:32:36 care, even though HIPAA is not a certification? Yeah, we’ve done the privacy SOC2, but we’ve
0:32:41 also done an independent sort of HIPAA compliance assessment as well. And FedRAMP has definitely
0:32:47 been the most work because it involves, you know, from an architectural standpoint, you know,
0:32:53 we’re creating a federal environment and there’s a lot of work that we’ve done to improve on the
0:32:59 back end. But I’m trying to think because GDPR is also a ton of work. It’s actually a good time
0:33:02 to mention too. One of the things that I found particularly interesting as I dove into this
0:33:10 with you is that at every step, the OMB has really worked to make this like attractive and easy.
0:33:15 That sounds weird, but their goal is not to stop you from getting authorized. It’s actually to
0:33:21 find ways to get you authorized. And for what it’s worth, the FedRAMP.gov website is one of the best
0:33:26 federal websites out there. They have a person who’s the customer success manager. So they really
0:33:32 are trying to make it easier for cloud companies to go through this process to understand. And,
0:33:37 you know, EverLaw, we met with those folks and they helped us. They helped guide us. And so
0:33:41 we found that to be really helpful. Yeah. So unlike what you’d normally think of in terms of
0:33:45 regulation or certification, they don’t come across as like, we’re here to prevent you from
0:33:50 getting this. No, not at all. It’s not even like the DMV in that regard. They actually just want
0:33:55 to help you. Yeah. I mean, their mandate is to help carry out the cloud first or, you know,
0:34:00 the policy that the government has to push IT modernization and cloud adoption in the federal
0:34:05 government. Well, this was super fun. So thanks so much. This has been Stephen Sinoski and
0:34:07 Lisa Hawk. Thank you. Thank you very much.

0:00:05 Hi everyone, welcome to the A6NZ podcast. I’m Sonal and this is our seventh episode of 16 Minutes,
0:00:10 our news show, which in addition to our regular podcast show in this feed, is where we cover
0:00:15 recent headlines of the week, the A6NZ way, why they’re in the news, why they matter from our
0:00:19 vantage point in tech, and share our experts’ views on the trends involved. You can catch up
0:00:26 on past episodes at a6nz.com/16minutes or subscribe to the 16-minute show directly wherever you get
0:00:30 your audio. And to be clear, none of the following should be taken as investment advice. Please be
0:00:37 sure to see a6nz.com/disclosures for more important information. This week, we cover two topics.
0:00:41 We briefly discussed the latest news from the front lines of cyber fraud, where the FBI made a huge
0:00:47 number of arrests for BEC scams in what was described as one of the largest cases of its kind in U.S.
0:00:53 history. But first, we go deep on the new Apple credit card, what it means beyond the headlines.
0:00:58 Okay, so the first news item we’re covering this week is that Apple released a credit card,
0:01:03 and it was actually announced a while ago, but only became available this week to U.S. iPhone
0:01:07 users. And let me quickly summarize the news, and then I’ll introduce our A6NZ expert. They’re
0:01:11 partnering at Goldman Sachs as the issuing bank and mastercard for the Global Payments Network.
0:01:16 The card, which is of course coded white, is made of titanium, but that’s still heavier than other
0:01:20 plastic cards in the market. And by the way, a funny little anecdote here is that Verge reported
0:01:25 via MAC rumors that Apple is advising against keeping the card in a leather wallet or in direct
0:01:30 contact with Denim as such fabrics, and I quote, “might cause permanent discoloration that will
0:01:36 not wash off.” That part’s pretty LOL. That said, it is news that Apple, a tech company, is moving
0:01:40 into financial services. And this matters in the bigger picture of credit, which drives personal
0:01:45 finance and our economy overall in so many ways for better or worse. So let me quickly also summarize
0:01:48 some of the salient details here. There are no typical credit card fees, such as sign-up fees,
0:01:53 late fees, international fees, annual fees, overdraft fees, et cetera. And there are other
0:01:58 features such as greater transparency into interest paid and so on. So that’s a quick context. And
0:02:03 now let me welcome our A6NZ expert to put that news in context. Our newest general partner for
0:02:07 Fintech, Anisha Charya, who is most recently VP of product at Credit Karma. Welcome, Anish.
0:02:10 Thank you. Excited to be here. Excited to have you on here.
0:02:14 Long time listener, first time guest. I’m excited. So the real question here,
0:02:20 why does this news matter and why the hell should we care? I’m not supposed to cuss anymore.
0:02:28 You can with me. So the least interesting way to think about this is Apple released a new credit
0:02:32 card because, you know, a credit card is a credit card. There are more interesting credit cards with
0:02:37 better rewards or credit cards that have fancier designs. And a lot of the discussion has been
0:02:41 about that and it’s just sort of a distraction in my view. So what do you think the real significance
0:02:45 here is? Well, I think there’s two things to talk about. First of all, you know, whenever Apple enters
0:02:49 a category, it’s worth looking carefully at what they’re doing because they’ve reinvented
0:02:55 existing categories over and over again. If you take a look at the actual features of the card,
0:03:00 they’ve taken a bunch of things that credit card companies do sort of behind the scenes to the
0:03:06 detriment of consumers like charge fees for being late, charge fees for overdrafts, charge fees whenever
0:03:11 you swipe the card internationally as well as giving you a terrible FX rate. So these are
0:03:16 all lines of business that credit card companies have historically monetized and
0:03:20 it’s mostly been invisible to consumers and really has done them a bit of harm.
0:03:25 So Apple has actually changed all of that. The second thing they’re doing is showing you how
0:03:29 much interest you’re actually paying. So if you actually just pay the minimum amount that your
0:03:32 card company asks you to pay every month, it is going to take you years and years and potentially
0:03:37 even decades to pay that card off. And that trade off has never been clear to consumers.
0:03:41 Consumer credit card debt is over a trillion dollars right now. We’re starting to approach
0:03:46 historical highs. There’s never been a better time for us to be thinking and talking about
0:03:51 credit card debt. And the first step is a product that’s really transparent. So that’s sort of level
0:03:56 one of what’s interesting. I have a quick question. The transparency feature, that seems like something
0:04:01 that’s very easy for other credit card companies to do. Yes. So A, why haven’t they done that yet?
0:04:05 And B, can’t they just quickly copy this now? Yeah. So it’s really interesting. There’s this sort of
0:04:11 innovators dilemma and it looks a lot like SMS did 10 years ago. That’s right. If you look at what
0:04:16 happened with carriers, they knew that SMS was going away, but there was some powerful executive
0:04:21 whose name was attached to the SMS revenue line and they would not let it go away. And as a result,
0:04:25 carriers missed messaging. Right. So basically the innovators dilemma in the classic context of
0:04:29 disruption theory where an entrenched business does not want to disrupt its core business when
0:04:33 there is a new business on the horizon because even if they know it’s coming, they are actually
0:04:36 making money off their core business. You’re essentially cannibalizing yourself in order to
0:04:40 go into the new area. Exactly. Powerful internal stakeholders don’t want to see it happen. So
0:04:44 it doesn’t. And by the time they realize that Apple’s got a significant edge by offering this
0:04:48 transparency, it may be too late. Okay. So now let’s go back to the next level. Yeah. So least
0:04:53 interesting is that it’s a new credit card. But I think the most interesting thing here is that
0:04:57 Apple is actually unbundling the credit card. Tell me what that means because I feel like
0:05:00 people in tech talk a lot about cycles of bundling and unbundling, whether it comes to things like
0:05:04 cable and TV or media, software packages. I mean, the phrase comes up in lots of different
0:05:09 contexts. What does bundling and unbundling specifically mean in this context? So there’s
0:05:13 a few aspects of the credit card. There’s a physical piece of plastic that I have in my wallet.
0:05:19 There is a payment network that processes the payment when I swipe that piece of plastic.
0:05:25 And then there is a debt provider beneath it that typically provides me with this unsecured debt
0:05:30 that I’ve made a commitment to pay back. So what this means in terms of unbundling is that Apple
0:05:36 actually owns the customer relationship. They’ve partnered with Mastercard to handle the payments
0:05:40 and then they’ve partnered with Goldman to handle all of the debt. If tomorrow they decide, “Hey,
0:05:44 Goldman, we’re going to replace you with Capital One,” or more importantly,
0:05:48 Goldman and Capital One, we’re going to allow you to compete to see who can give the customer
0:05:52 the lowest price debt. All of a sudden, those companies have very little leverage to say no.
0:05:56 It’s like they’re almost white labeled, essentially. Exactly. We did a wonderful podcast
0:06:00 a couple of years ago on B2B2C business models where we actually go in a lot of depth around
0:06:06 the challenge of that kind of thing. So on that note, why then are Goldman and Mastercard
0:06:10 incented to work with Apple on this? And has Goldman actually ever had a consumer-facing
0:06:15 line of business like this ever? Well, I think there’s a short-term, long-term trade-off happening
0:06:20 here. The street has really wanted to see Goldman grow their business. Goldman typically has not
0:06:24 been a big consumer lender. They dip their toe in it with the launch of personal loans via Marcus
0:06:30 over the last two years. So great brand Apple, huge footprint. It’s a great way to drive growth
0:06:35 in the short term, but it may be a peric victory. Okay. Let’s talk about the connection between
0:06:40 Apple’s new credit card and Apple Wallet. So there’s been a lot of hype, quite frankly,
0:06:44 over the years around digital wallets, and there’s been many forms. Can you help orient
0:06:49 where this fits in that sort of arc of where we are in the wallet space, digital wallet space?
0:06:55 Yeah. My partner, Alex, has done a ton of thinking and published some important work on
0:06:59 the wallet. So it’s worth referencing that. One of the things that’s happening here is Apple is
0:07:06 offering 3% cashback for purchases from Apple and 2% when you use Apple Pay. 1% if you use a
0:07:12 physical card. So you effectively double from 1% to 2% if you’re using their payment mechanism.
0:07:17 And the word is that the fee that Apple charges merchants is on the high side, the interchange
0:07:22 fee. If they can then start to take a portion of those fees at scale for whenever people are
0:07:27 spending money, it becomes a very large business. If Apple becomes your default payment instrument,
0:07:34 if Apple effectively white labels the way that you get debt, if Apple owns all aspects of the
0:07:39 consumer product experience around financial services, they’ve talked about pivoting to being a
0:07:44 services company, there’s no bigger segment of the industry that’s more backwards and has more
0:07:48 opportunity for product innovation than money. So what do you make of the fact that they have no
0:07:53 points? And how does a role of kind of loyalty programs play into all this? The thing is the
0:07:57 cashback is actually the simplest form of points. It’s largely the same thing. Some of the most
0:08:01 popular cards out there are cashback cards because you don’t have to navigate some crazy
0:08:07 matrix of blackout dates and conversion rates. So it’s very Apple of them to actually go after
0:08:12 the thing that’s most clearly understood by consumers, which is cashback. If you take a look
0:08:17 at what’s happening with credit card companies, they effectively have to acquire customers by
0:08:21 using messages that they can put on billboards. So what are things that you can put on billboards?
0:08:27 You can put eye popping rewards rates, cashback rates, some of them do it using a big brand
0:08:33 presence like American Express. So this has really been a way to drive customer acquisition
0:08:39 for credit card companies. But the question is, are customers actually receiving value from it?
0:08:43 How many are using their rewards and how many are overpaying for the rewards because they’ve got
0:08:48 a really expensive line of credit card debt that they actually revolve on month after month
0:08:53 after month. So I think the reorientation opportunity here is to things that are actually
0:08:56 in consumers financial benefit versus things that look good on a billboard.
0:09:00 Then let’s go into the tech because the elephant in the room or maybe the opportunity in the room
0:09:05 that we haven’t really talked about here is that this is really one of the first, maybe not the
0:09:10 first times a significant tech company is really moving into financial services. So let’s talk
0:09:13 about what that means on the technology side. And just to quickly summarize some of those tech
0:09:18 aspects. First of all, Apple Card uses machine learning and they also have geo location with
0:09:22 Apple Maps to clearly label where and when people made a purchase. You also already mentioned
0:09:28 transparency and interest paid. And while apparently 74 of the top 100 US merchants already accept
0:09:34 Apple Pay, including Target, Taco Bell, and Hi-V supermarkets in the Midwest, the budgeting
0:09:38 feature is actually not integrated with other credit cards in an Apple Pay account,
0:09:41 which is something that David Pierce pointed out in the Wall Street Journal. But the point is that
0:09:46 Apple is giving users weekly and monthly spending reports that help turn wallet into a budgeting
0:09:51 app that can help them keep track of purchases. So I think one of the most interesting opportunities
0:09:55 on the tech side is today a lot of product features are built in a functional way.
0:10:00 And if you take a look at our relationship with money, it’s actually much more emotionally
0:10:04 oriented than functionally oriented. That’s such a good point. Yeah. And ironically,
0:10:08 all of the financial services products that have existed in the past. Now the technology
0:10:11 companies are sort of making the same mistake are highly functional. Here’s your budget,
0:10:15 here’s what you spent money on, here’s what the end of the month looks like.
0:10:20 So I think actually the real product inflection point here is to start to lean into that emotion,
0:10:25 to acknowledge that emotion, and start to help people make financial decisions they feel good
0:10:31 about versus makes sense in some abstract, classically rational sense. And when it comes
0:10:35 to the product features, guess what? Most people don’t like to budget because most people don’t
0:10:40 like to diet. It’s the same concept. Nobody actually wants to be reminded every week that,
0:10:43 “Hey, you went out for Mexican last night and you blew your calorie limit out of the water.”
0:10:48 Totally. So the magic product feature here is not a budget. The magic product feature here is
0:10:54 actually helping to automate all of the small financial decisions to help you achieve a better
0:10:59 outcome. Angela has spoken about this, Alex has spoken about this. A lot of great founders
0:11:03 have talked about the concept of self-driving money. Tell me more, that’s fascinating.
0:11:09 Self-driving money means not having to actually make all of the decisions to optimize your financial
0:11:14 life. So if you look at how much we’re overpaying on our mortgages, our credit cards, our personal
0:11:18 loans, there are better products that we could get today that we just don’t have because we either
0:11:24 don’t know about them or it’s too high friction to apply for them. So I think that the orthodox
0:11:28 see is that we need to tell people to stop drinking Starbucks every day to save money.
0:11:34 That’s actually not true. If we can just use technology to efficiently price all the financial
0:11:37 products they have, we put a lot more money back in Americans’ pockets.
0:11:41 So speaking of putting money back into America’s pockets, what do you make of the headlines from
0:11:46 analysts at Nomura that Goldman could lose money here if losses come? Because basically the analyst
0:11:52 is assuming that Goldman has to spend about $350 to acquire each new user, which means it would
0:11:56 only break even after four years. But what happens if a recession comes before that,
0:11:59 then they would lose revenue, especially because the margin is already tight to begin with.
0:12:03 So how do I tie that back into the Apple news? Because Goldman Sachs is approving the subprime
0:12:08 borrowers. Yeah, I think the story here is that traditionally credit cards have a whole approval
0:12:14 process that is very onerous. Not everyone gets approved. Apple has clearly been pushing their
0:12:20 partner to approve a larger set of people. In the future, there will be no credit card application
0:12:25 as retrograde that we even need that. And everyone should have access to some form of payment and
0:12:30 unsecured debt, even if it’s a low credit limit. There’s many orthodoxies which are not true when
0:12:35 it comes to money. One of the orthodoxies that’s not true is we have this belief that there are
0:12:39 people who are credit worthy, who have great credit scores, who are good people. And there are people
0:12:44 who never pay their bills and have bad credit scores. And when there is a recession, things are
0:12:50 going to go haywire, it’s overblown. The truth is for people who have a lot of fluctuation in
0:12:55 their means or limited means, they’re always living in a recession. So the variability that you see
0:13:00 while it exists, it’s not as high as the perception is. And often people who have these great credit
0:13:06 scores are on the edge of being wealthy, end up being ones who get in trouble. So I think that
0:13:13 there’s a broader discussion about “subprime credit card” sort of customers and how do you
0:13:18 think about them? And I think that we take an overly negative view. We should actually be thinking
0:13:23 about them in a more holistic sense. All right. So Anish, bottom line it for me. How should we
0:13:28 think about this news and its broader significance in the financial services ecosystem? Bottom line,
0:13:32 it’s not just another piece of plastic in your wallet. It has the opportunity to fundamentally
0:13:36 change the way that we think about our money. This product has the opportunity to change
0:13:40 Americans’ relationship with their credit cards, with their debt, and potentially with their money
0:13:44 more holistically. Fantastic. Well, thank you for joining the 16 Minutes. You’re welcome.
0:13:49 Okay. So for the next segment of 16 Minutes, we are going to be talking about the news this week
0:13:56 about a type of fraud, BEC scams, where the FBI recently made a huge number of arrests. And 14
0:14:02 arrests were made in a 252 count federal grand jury indictment that was unsealed just this past
0:14:08 Thursday. And it named 80 defendants charged with defrauding victims of up to $10 million in what
0:14:14 was described as one of the largest cases of its kind in U.S. history. The type of fraud is BEC,
0:14:18 which stands for business email compromise. And just to quickly summarize a bit more of the stats
0:14:25 and context of why this matters here, just in the period from 2013 to 2018 and five year period,
0:14:31 $12 billion of losses were due to this kind of fraud. And this kind of fraud is growing at a rate
0:14:37 of 123% year over year, which is basically more than doubling every year. And it costs about
0:14:43 $300 million per month. So it’s very costly and dangerous in that context and a big effing deal.
0:14:48 So I’m now going to introduce Joel de la Garza, who’s actually becoming a bit of a regular unfortunately
0:14:53 on 16 Minutes to talk about all the security news and whatnot. Joel, let’s talk about this
0:14:58 news and what it is and why it matters. Yeah, absolutely. So this is actually one of the
0:15:03 simplest and just kind of most ridiculously easy forms of fraud. Business email compromise
0:15:10 is basically a form of fraud where I create an email address that seems somewhat similar
0:15:15 to someone you may know and be working with in your company. So I could create a fake email
0:15:22 address for your CEO or your CEO, make it sound like their name. And I send email messages into
0:15:27 your company asking people sort of lower down the stack to send me money. Is this like spearfishing?
0:15:33 It is even more simplistic than spearfishing. The way it typically works is people in the
0:15:37 workplace are generally conditioned to respond very quickly to anyone above them who sends them
0:15:42 an email. So in the way that emails are typically displayed in an email client is that you just
0:15:47 see the name of the sender. And so when your CEO sends you an email saying, I need money,
0:15:50 I can’t get into my work account, can you please route the money to this address,
0:15:55 people tend to do it. And they do it to the extent of losing $300 million a month.
0:15:59 I feel shocking that they would do that. So it goes back to sort of the everything that’s old
0:16:03 is new again, right? This is the oldest form of fraud, right? It’s the walking around asking
0:16:07 people to give you money and seeing who’ll give you a dollar out of their pocket.
0:16:09 Can you tell me a little bit more about why this matters in the context of all the other
0:16:12 frauds and cyber crimes that we’ve talked about on this podcast? Oh, yeah. Well,
0:16:17 I think broad strokes, if you sit back and you take a look at the way that fraud is evolving,
0:16:22 in the very beginning of online fraud, attacks were super sophisticated. They use custom malware.
0:16:27 You had all these different intermediaries. A whole industry popped up to support them.
0:16:31 Whole businesses were dedicated to actually solving and finding the malware that created
0:16:35 this fraud. As we’ve actually gotten better at technical security, we patch our systems,
0:16:39 web application vulnerabilities are harder to find. Fraud is now just asking individuals
0:16:42 to send you money, right? Like you said, everything old is new again. It’s basically
0:16:46 back to basics. We’re back to social engineering. And that’s the most effective form of fraud that
0:16:50 exists. Okay. So bottom line it for me, Joel. How should we think about this news? So the
0:16:54 interesting thing about this fraud is that it’s able to grow at such a rapid rate and it sort of
0:16:59 creates this new fraud at scale category that we’ve never seen before. And I think that fraud
0:17:03 in its current form is going to continue to grow and scale in ways like this,
0:17:06 in very simple, trivial ways that can hit multiple people and steal lots of money.
0:17:11 It’s just an incredibly low effort to do. You create an email that looks like someone that’s
0:17:15 already out there in the public domain and you start sending messages to people that work inside
0:17:18 their country to send you money. And is technology going to be able to fix this if it’s a social
0:17:22 engineering problem? So obviously there are things that technology providers can do. They can
0:17:26 flag email messages to say they’re coming from outside of your company. They can actually give
0:17:30 you warnings to say be careful. We’ve seen other scams that look like that. And we’re seeing a
0:17:34 lot of providers start to do that. I think ultimately this is the kind of problem that gets
0:17:38 solved with knowledge, that gets solved with information. It’s one of those things where
0:17:42 the user is ultimately kind of the last line of defense and a lot of attacks like this. And if
0:17:46 someone asks you to send the money and you send the money, there’s not a whole lot that technology
0:17:50 can do there. Making people aware of these frauds tends to be the most effective way to prevent
0:17:54 them and it’s the path that I advocate. So education basically? Absolutely. Knowledge is power.
0:17:55 Thank you. Thank you.