Podcast Episode 14

Episode 014 52 min

Biff Clark, Cybersecurity Specialist and Owner of Coefficient Technologies, Frontiers of Cyber Security

with Biff Clark · Coefficient Technologies

0:00 / 52:00

Also on Spotify, Apple Podcasts, YouTube, Podbean, Player FM

Episode 14 of The Security Podcast of Silicon Valley, published March 1, 2022. Host Jon McLachlan talks with Biff Clark, co-founder of Coefficient Technologies, a cybersecurity firm for small and midsize businesses. Biff traces a path from pharmaceutical sales to technology and cybersecurity, and makes the case that customers can't outsource understanding their own security. The talk covers security as revenue retention, managed security services that plug gaps and transfer knowledge, a CISO on demand for companies in growth mode, a company that reinvented itself after the recession, subscriptions, trust and integrity, incident work that looks like policing, a contract that should have been scoped first, the pandemic's push to managed services, managed service providers as one choke point, how cyber insurance will raise the bar, and a mentor's lesson to understand the why. About 52 minutes.

Episode notes

In this episode of a YSecurity.io production, we have the pleasure of speaking with Biff W. Clark, the Managing Partner and Cyber Security Consultant of Coefficient Technologies LLC. With an impressive career spanning over 25 years in sales and sales leadership, including 15 years dedicated to consulting on information technology and cyber security solutions, Biff brings a wealth of knowledge and experience to the conversation.

Biff shares his journey from obtaining a BA in Business Management from Midland University to earning an MS in Cyber Security, Cyber Operations from Utica College. His passion for cyber security is matched only by his commitment to community and education, as evidenced by his roles with The Hidden Genius Project, Mindblown Labs, and Telescopic Ventures. Biff discusses the importance of mentoring the next generation, particularly black male youth, in technology, leadership, and entrepreneurship.

Listeners will gain insights into the evolving landscape of cyber security, the challenges businesses face in protecting their digital assets, and the innovative solutions that can help mitigate these risks. Biff's experience in selling and consulting provides a unique perspective on how companies can navigate the complex world of information security.

In addition to his professional achievements, Biff's involvement in non-profits and advisory roles highlights the intersection of technology, education, and social impact. He speaks on the significance of financial education through gamification and the potential of emerging technologies to transform industries and societies.

Join us in this YSecurity.io production for an inspiring and informative discussion with Biff W. Clark. Whether you're a cyber security professional, a technology enthusiast, or someone interested in the broader implications of digital security on society, this episode offers a comprehensive look at the challenges and opportunities in the field, underscored by Biff's dedication to making a difference both within and beyond the cyber security community.

Listeners interested in learning more about Biff's work or reaching out for consulting services can contact him at bwclark@coefficient.us. This episode is a must-listen for anyone looking to deepen their understanding of cyber security's current state and future directions, all through the lens of a seasoned expert and community leader.

Hosted by Jon McLachlan — co-founder of YSecurity.

The deep dive

Protect what you built

Biff Clark, co-founder of Coefficient Technologies: from pharmaceutical sales to cybersecurity, why customers have to understand their own security, revenue retention, managed security by subscription, a CISO on demand, a contract that should have been scoped first, the pandemic's push to managed services, one choke point, insurers raising the bar, and the lesson to understand the why.

Episode 14 of The Security Podcast of Silicon Valley came out on March 1, 2022, with Jon McLachlan hosting. The guest was Biff Clark, co-founder of Coefficient Technologies, a cybersecurity firm for small and midsize businesses (Podbean, Apple Podcasts, Spotify, LinkedIn, Coefficient). The episode is called “Biff Clark, Cybersecurity Specialist and Owner of Coefficient Technologies, Frontiers of Cyber Security.”

Biff’s case is that security keeps the revenue a business has already earned. The rest of the talk is about how a smaller company can buy that protection: managed security by subscription, a CISO on demand, honest scoping, and insurers who, in Biff’s view, will set the bar.

This page follows the conversation in order: a section for each part of it, twelve figures, nine clips from the tape, a post from Biff’s LinkedIn, the full transcript, and five tools: a quiz, a scorecard for a cyber insurance renewal, a calculator for what an outage costs, a timeline, and a to-do list. Where the decodes of the tape disagree on a word, the transcript puts its best guess in brackets, and the page doesn’t quote or retell those words.

From the business side

Jon introduced Biff as co-founder of Coefficient Technologies, around since 2004, and as chair of the board of directors at the Hidden Genius Project. Biff came to security through the business side, with a background in marketing and sales.

“it was a passion later in life.”

Biff Clark, at 0:50

The first career was in the pharmaceutical industry. Biff was fast-tracked and moved to a new department every 18 to 24 months. LinkedIn lists 12 years at Block Drug Company and GlaxoSmithKline, from senior sales representative and trainer in 1992 to sales director (LinkedIn). Wikipedia describes Block Drug as a maker of dental care products, bought by GlaxoSmithKline for $1.24 billion in 2001 (Wikipedia).

Then Biff left the industry to start over. A friend talked about technology, and the two of them mapped the skills that carried over. Cybersecurity came next, once Biff saw how hard it would be for people to identify threats and protect their assets.

Six cards. Block Drug and GlaxoSmithKline: pharmaceutical sales from 1992, sales director by 1999. Light Rock Video: executive producer and co-owner from 2003. Coefficient Technologies: founded in 2004 as an IT services company for small and midsize businesses. A partnership: from about 2009, three years with a commercial firm. The reform: 2014, Coefficient restarts and pushes managed services. Filled, since: co-owner, with the firm doing business as Surveillent Cyber.
Biff's path, from LinkedIn and the episode. Sources: LinkedIn, Coefficient's site and the episode.

You can’t outsource understanding

Jon asked what Coefficient does. Biff called the team cybersecurity specialists whose job is to help customers understand security. A customer can roll out a tool or check a box, and it still has to understand what it bought.

“You can’t outsource the requirements around cybersecurity.”

Biff Clark, at 4:07

The customer has to know how to protect its employees and users, its data and its systems. Biff added that the answer is often a smart solution that addresses a concern and shifts behavior, more than a complicated one.

“if you can get some behavior modification, sometimes you can address some of the biggest threat issues that would be in front of you.”

Biff Clark, at 4:34

Jon agreed: the goal is to understand how the money helps the bottom line and the top line, more than to throw money at a problem.

Listen · Biff Clark on episode 14, from 4:01
About 40 seconds: Biff on why a customer has to understand its own security. The clip stops on its own. Read the full transcript.
Three cards. People: how to protect employees and users. Data: how to protect the data. Filled, systems: how to protect the systems, sensibly. Below: a tool rolled out, or a box checked, doesn't add up to understanding, and the answer is often a smart solution that shifts behavior. Quote: "You can't outsource the requirements around cybersecurity."
What a customer needs to know about its own security. Source: the episode.

Revenue retention

Biff added a second element. Most people treat security as a cost. Coefficient treats it as a way to keep the revenue a business already earns, because security protects the business an owner spent a life building.

“it’s sad that it can be taken away from you in less than three days”

Biff Clark, at 5:16

The threat in that sentence is a ransomware attack, with no experts nearby to answer it. Wikipedia defines ransomware as malware that holds a victim’s data hostage until a ransom is paid (Wikipedia). Everything a company worked for, and the families it feeds, can be lost.

Listen · Biff Clark on episode 14, from 5:03
About 30 seconds: Biff on security as a way to keep revenue. The clip stops on its own. Read the full transcript.

Plug the gaps, then hand it over

Coefficient’s answer is the managed services model. Wikipedia describes managed security services as network security services outsourced to a provider, a managed security service provider, or MSSP (Wikipedia). Coefficient lays its tools over a customer’s environment to plug the weak spots. Then it transfers knowledge, so the in-house IT team or security staff learn the products while the gaps stay covered.

“if they need you to stay, you stay.”

Biff Clark, at 6:09

If not, the service works on demand: the customer pays a monthly or annual subscription, and Coefficient becomes a trusted advisor. Biff described three roles in one firm: a reseller of security tools, a managed services provider and a consultancy.

Four boxes joined by arrows: layer tools over the environment, plug gaps where it's weak, teach the in-house team, and, filled, stay or go by subscription. Below: three roles in one firm, a reseller of security tools, a managed services provider and a consultancy. Quote: "if they need you to stay, you stay."
How a managed service covers the gaps while the team learns. Source: the episode.

A CISO on demand

Jon compared it to the vCISO role, for companies too small to justify a full-time chief information security officer but big enough to need help. Wikipedia describes a CISO as the senior executive responsible for the strategy and program that protect an organization’s information assets (Wikipedia).

Biff pointed to salaries on both coasts. A network administrator, a security analyst and a CISO are significant investments, and a company has to ask whether it has enough work to keep them busy. A company in growth mode may want its money in research and development. Coefficient fills the gap until the company is ready to hire.

“a CISO on demand service, because we understand the industry, understand the environments, and understand the threats.”

Biff Clark, at 7:59

Listen · Biff Clark on episode 14, from 7:27
About 40 seconds: Biff on a CISO on demand for companies in growth mode. The clip stops on its own. Read the full transcript.
Two cards. A full-time hire: a salary in six figures, and the question of whether the work will keep the hire busy. Filled, on demand: a provider fills the gap until the company is ready to hire. Below: Jon's case is companies too small to justify a CISO on staff and big enough to need help, and Biff's case is a company in growth mode that wants its money in research and development. Quote: "a CISO on demand service, because we understand the industry, understand the environments, and understand the threats."
A full-time hire next to a CISO on demand. Source: the episode.

Reinvented twice

Jon noticed that Coefficient is an LLC, which suggested no outside investors. Biff confirmed there were none so far, and said outside money might be the quickest way to grow a managed services business, which needs a lot of bandwidth. The LLC dates to the early 2000s, when much of the work was subcontracting on open-ended contracts that grew through referrals and networking.

Then the recession hit, around 2008 and 2009. Wikipedia dates the Great Recession from late 2007 to mid-2009 (Wikipedia). Around 2009, Coefficient partnered with a company that did a lot of commercial business and had no service arm, and worked with it for about three years. When that company shifted toward federal work and managed services gained ground, Biff and a business partner restarted their own company.

“we reformed in 2014 and started pushing the managed service option.”

Biff Clark, at 10:20

LinkedIn dates Biff’s current role as co-owner of Coefficient to August 2014 (LinkedIn). Jon liked how the company moved with the market, like water.

Four boxes joined by arrows: early 2000s, subcontracting work. 2008 to 2009, the recession hits. About 2009, a partnership. Filled, 2014, reformed. Below: Wikipedia dates the Great Recession from late 2007 to mid-2009, and LinkedIn dates Biff's role as co-owner to August 2014. Quote: "we reformed in 2014 and started pushing the managed service option."
Coefficient's two starts. Sources: the episode, LinkedIn and Wikipedia.

Security by subscription

Jon called subscriptions the magic word for investors. Biff described how the model bends to a customer’s strategic plans. Coefficient supports the tools a customer already has and rolls them into its security operations center. Wikipedia describes a security operations center, or SOC, as the function that protects an organization against threats (Wikipedia).

Biff gave two cases. A company loses a security person and can only hire someone junior, so Coefficient lays its tools over the top, for a year or for 18 months. Or a company acquires another facility with significant vulnerabilities and needs stronger tools in place fast.

“It’s a lot easier than saying, hey, I’ve got to lay out this fee for three years in advance”

Biff Clark, at 12:14

Wikipedia notes that managed services are typically delivered under a subscription model (Wikipedia). Jon liked seeing subscriptions applied to services delivered by people.

A partner you can read

Jon noticed the “we” and asked about a business partner. Biff’s partner is Dennis Moore, a long-term friend. They reconnected years later, and with Dennis already working in cybersecurity, they went into business together.

Jon pointed out that the trust was there from the start. Biff agreed, and added that two people who have known each other that long still have brother fights. They work through them.

Jon’s view: honest, direct people make for a textured relationship, and that’s where a team becomes better than the sum of its individual parts, trying on each other’s perspectives like a pair of sunglasses. Biff added that you still remember an old friend’s habits from years back.

Coefficient was a team of five at the time, with two additional engineers, a sales and business development team, and an enterprise salesperson. For deeper expertise, Biff described a consortium of subject matter experts, since a lean company can’t keep every specialist on staff.

“I couldn’t have a better friend or partner.”

Biff Clark, at 16:53

Biff credited Dennis’s military background with the high integrity that matters in security: say what you mean, deliver on the services, and keep the focus on the customer.

Called in when it’s already bad

Biff’s aim is to be the trusted advisor a customer can ask anything, even about services Coefficient doesn’t offer. Sometimes the answer is a referral to someone else.

“we fight every day to become a trusted advisor”

Biff Clark, at 17:35

Jon tied it to leadership: relationships need trust, trust needs integrity, and integrity lets people have vulnerable moments without being taken advantage of. Biff’s life lesson was to treat people the way you want to be treated, which includes honesty about a learning curve or an availability problem.

Then Biff described the work itself.

“it’s similar to policing in some regards”

Biff Clark, at 19:13

Nobody calls to say everything’s fine and ask for a check against a gold standard. The call comes during an incident, when intensity is high, people are suspicious and questioning why things happened, and nobody knows the final cost. The firm has to show it’s trustworthy and get things done at an affordable price.

“a couple hundred dollars, that could be a couple thousand dollars, it could be a couple hundred thousand dollars”

Biff Clark, at 20:20

Listen · Biff Clark on episode 14, from 19:11
About 35 seconds: Biff on why security work looks like policing. The clip stops on its own. Read the full transcript.
Three cards. The call: nobody calls to say everything's fine, and the phone rings during an incident. The room: intensity is high, and people question why things happened. Filled, the cost: unknown at the start, for the customer and for the firm. Below: Biff's range for a fix runs from hundreds of dollars to hundreds of thousands. Quote: "it's similar to policing in some regards"
What an incident call looks like, and what it can cost. Source: the episode.

A hard sell when things are calm

Jon named the problem for anyone selling proactive security: when everything is peachy, the risk analysis gets pushed to next quarter, or next year, until the day it’s needed.

“That’s why I pushed the phrase, you know, revenue retention”

Biff Clark, at 20:49

Customers see security as a capital expense. Biff listed what an incident takes instead: a hit to the brand, a hit with employees who no longer feel the environment is stable, and a hit to revenue.

“your whole objective is to make sure you make more money year over year”

Biff Clark, at 21:17

The alternative, in Biff’s words, is $2 or $3 million snatched out of the coffers because a company didn’t want to pay for a solution, or for a person to lay out a real strategy.

Two cards. Seen as a cost: a capital expense, pushed to next quarter while everything is calm. Filled, seen as revenue retention: it protects the business an owner spent a life building. Below, three boxes joined by arrows for what an incident hits: the brand takes a hit, employees feel less stable, and, filled, revenue takes a hit. Quote: "your whole objective is to make sure you make more money year over year"
Security as a cost next to security as revenue retention. Source: the episode.

Most people are good people

Jon asked a standing question: what’s the one truth that most people miss?

“I believe that most people want to do the right thing, and most people are good people.”

Biff Clark, at 21:59

Biff tied it to the crisis calls. A company waits too long on a refresh and has 30 days to choose a solution. Or privileges are lost, or someone misplaces a fob that gave access to highly sensitive information. Leaders want to do the right thing, and something holds them back today. Coefficient’s work is to help them decide sooner, and to think past this quarter about how to protect the organization and the people who handle sensitive data.

Every thank-you is a best day

Jon asked about Biff’s best day at Coefficient. The first answer was the day the company launched and Biff signed the document that made it official.

“It’s a continuum for us.”

Biff Clark, at 28:56

Every customer thank-you brings the same feeling back, especially after a switch from one solution to another, when a customer wonders whether it will work as promised, or after a network comes back up. Jon liked that the best day could come again tomorrow. Biff invoked Groundhog Day. Wikipedia describes the 1993 film as the story of a weatherman trapped in a time loop, reliving February 2 (Wikipedia).

“I’m always overjoyed when someone’s happy with the work that we do.”

Biff Clark, at 30:17

Scope it before you sign it

The worst day was a story Biff had talked over with Dennis, because it was an emotional one. A friend and mentor chairing a board asked Coefficient to replace a contracted IT team that wasn’t transparent. Biff expected a scoping exercise, maybe an audit and a report with recommendations. It turned into a contract to sign, before anyone had scoped the environment.

“it was a nightmare.”

Biff Clark, at 32:14

The network had no service contracts. Solutions weren’t deployed properly. The organization was short on money and people, and staff walked off the job in the middle of a major rollout. Dennis woke at three in the morning to reset systems every day so the rollouts could go ahead. Coefficient hired a team it could stay only an hour ahead of, and third-party consultants ate much of the contract money.

When Coefficient finally found the budget for new solutions and hardware with service contracts, the client decided it couldn’t afford Coefficient anymore, and asked to hire the two engineers Coefficient had placed there. The engineers had families to feed, so Biff and Dennis agreed, kept part of what they were owed, and let the engineers stay on site.

“you have to scope an exercise, or you have to scope an environment, prior to assessing what your cost might be.”

Biff Clark, at 35:22

Coefficient had also covered some costs for the client, to do the right thing. Biff sees two goals in contract work.

“get the contract, complete the contract.”

Biff Clark, at 36:12

The client ended up with a solid team that understood its environment, and Jon called that a success. Biff’s joke for next time: when a friend calls, let it go to voicemail.

Listen · Biff Clark on episode 14, from 35:17
About 20 seconds: Biff on the lesson of a contract signed before scoping. The clip stops on its own. Read the full transcript.
Four boxes joined by arrows: asked to scope and report, signed before scoping, found no service contracts, and, filled, the lesson: scope, then price. Below: what it took was system resets at 3 a.m. every day, third-party consultants, and a team only an hour ahead, and how it ended was that the client hired the two engineers and Coefficient kept part of what it was owed. Quote: "get the contract, complete the contract."
The worst day, and the lesson. Source: the episode.

The future is now

Jon asked what a smashing success looks like for Coefficient, and how far away it is.

“Actually, I think the future is now.”

Biff Clark, at 38:08

The pandemic and the shutdown were a quantum leap. Biff recalled an old joke: people who said they didn’t believe in the cloud while sending email through Hotmail, Gmail or AOL. With everyone working remotely, managed services took off, and so did a smaller footprint, with fewer data centers, less money spent on leases and less greenhouse gas.

Biff added that managed security tools get patched around the clock. A company running its own tools waits for a patch and schedules it 30 days out.

“So we believe now that the whole managed service model is upon us.”

Biff Clark, at 39:55

One more trend helps: when the economy resets, a whole new set of companies starts, and smaller companies need more help than mature ones.

Listen · Biff Clark on episode 14, from 38:20
About 35 seconds: Biff on the cloud joke and the pandemic's push to managed services. The clip stops on its own. Read the full transcript.
Four cards. Managed services: remote work fast-tracked them. A smaller footprint: fewer data centers, less spent on leases, less greenhouse gas. Patching: managed tools patched around the clock, with no 30-day wait. Filled, new companies: each reset starts a new group that needs help. Quote: "Actually, I think the future is now."
What the shutdown sped up, in Biff's account. Source: the episode.

One choke point

Jon saw the same rush to managed services. Biff added a twist: a managed services provider needs managed security on top of its own environment, and that’s a new market for firms like Coefficient. Providers built big businesses around Office 365, Workday and other offerings, and they need tools to make sure they aren’t vulnerable.

“Because now it’s just one choke point.”

Biff Clark, at 41:37

If a criminal gets into a managed services provider, in Biff’s words, the attack takes down companies all around the country. Wikipedia describes such a case from July 2, 2021: attackers exploited a vulnerability in Kaseya’s VSA remote monitoring software, and ransomware hit about 60 managed service providers and their customers, with downtime for over 1,000 companies. Wikipedia calls it a form of supply chain attack (Wikipedia). Biff added that providers need cyber insurance too.

Listen · Biff Clark on episode 14, from 41:33
About 30 seconds: Biff on managed service providers as one choke point. The clip stops on its own. Read the full transcript.
Three numbers. July 2, 2021: the Kaseya VSA attack. About 60: managed service providers and their customers hit. 1,000 plus: companies with downtime. Below: Biff's point is that a managed services provider needs managed security on top of its own environment. Quote: "Because now it's just one choke point."
One provider, many customers. Sources: the episode and Wikipedia.

Insurance will raise the bar

Jon asked where cyber insurance goes, given the ransomware attacks and what they cost.

“it’s going to go through a level set.”

Biff Clark, at 42:14

Biff expected insurers to decide which tools count, since a simple checkbox won’t give them confidence. Coverage would come in tiers by company size, with quality products rated against certain threats. A 10-person company might buy Norton’s personal product, and the insurer would only cover the business or enterprise version. Wikipedia describes Norton AntiVirus as part of the Norton family of security products, sold since 1990 (Wikipedia).

Insurers would also check behavior: best practices, security awareness training, backups, redundancy and disaster recovery plans. Wikipedia notes that many cyber insurance policies already require an IT security audit before the carrier will bind the policy (Wikipedia). Biff’s comparison was taxes: you can do your own, and when the IRS calls, you have to answer the questions.

“Let us do your taxes. Let us do your cybersecurity”

Biff Clark, at 43:52

Listen · Biff Clark on episode 14, from 42:13
About 35 seconds: Biff on how insurers will set the bar. The clip stops on its own. Read the full transcript.
Six cards. Tools: business or enterprise editions, rated against certain threats. Tiers: requirements scaled to the size of the company. Behavior: best practices and security awareness training. Backups: how backups are done. Redundancy: how critical systems keep running. Filled, recovery: a disaster recovery plan. Below: Wikipedia says many policies already require an IT security audit before coverage starts. Quote: "it's going to go through a level set."
What insurers will ask about, in Biff's account. Sources: the episode and Wikipedia.

A small world

Jon noticed on LinkedIn that Biff knew Prakash Darji, then general manager of cloud services at Pure Storage, who had worked at SAP. Biff had met Prakash during Prakash’s SAP years, and later had a one-on-one with Prakash about presenting a product that found bugs in SAP HANA as a service to support the HANA rollout. Wikipedia describes SAP HANA as an in-memory, column-oriented, relational database management system from SAP (Wikipedia).

Prakash had been a guest on episode 6, and Jon heard the same message from both: the future is services, and those services need security. Jon had also reported up through Prakash’s chain at Pure Storage, in cloud security.

“It’s a small world, isn’t it?”

Jon McLachlan, at 46:28

Understand the why

Jon’s last question was Biff’s favorite interview question. Biff’s favorite is a question Biff likes being asked: what shaped your life? People rarely stop to reflect on the moments that shaped them, and the answer is a kind of homage to the people who helped.

Biff’s answer was a mentor. Early on, Biff wanted to work in sales, left a job to find it, and took a holiday job in retail. A customer brought in a broken high-end leather briefcase, and Biff kept the customer updated until it was fixed. The customer turned out to be a national sales director at a pharmaceutical company, who recruited Biff as a traveling salesperson who could fill an open territory within three days. That became Biff’s first sales job, and the director became Biff’s mentor.

“it’s not what someone does to you or for you, it’s why.”

Biff Clark, at 49:28

When someone gives you an opportunity, ask why they trusted you and what they’re trying to accomplish.

“Because then you can align with their mission.”

Biff Clark, at 49:52

Listen · Biff Clark on episode 14, from 49:15
About 40 seconds: Biff on a mentor's lesson to understand the why. The clip stops on its own. Read the full transcript.
Three boxes joined by arrows: a broken briefcase, fixed, with updates. A job offer, to fill territories fast. Filled, a mentor, and a lesson. Below: ask why someone trusted you, and what they're trying to accomplish. Quote: "it's not what someone does to you or for you, it's why."
A mentor's lesson. Source: the episode.

Small victories

Jon praised Biff’s philanthropic work. Biff enjoys creating opportunities for others and exposing them to new horizons.

“You got to give back.”

Biff Clark, at 50:47

Jon talked about continuous learning and being the change we want to see. Biff noted that the work isn’t easy, and Jon offered a way to keep going.

“Small victories are still victories.”

Jon McLachlan, at 51:34

What happened after the tape

Coefficient since. LinkedIn lists Biff as co-owner of Coefficient Technologies, which now does business as Surveillent Cyber, and describes the firm as “enterprise grade cybersecurity backed by over 20 years of proven experience” (LinkedIn). The company’s site offers a 24/7 security operations center as a service and readiness work for CMMC 2.0 (Coefficient).

Giving back. LinkedIn lists Biff as past board chair and emeritus board member of the Hidden Genius Project since May 2018, and as a mentor in the SF CITI Future Grads interns program from 2013 to 2018 (LinkedIn). The project says it trains and mentors Black male youth in technology creation, entrepreneurship and leadership (The Hidden Genius Project).

Prevention as an investment. On October 20, 2026, during Cybersecurity Awareness Month, Biff made the same point in other words: “PREVENTION is an INVESTMENT and, RECOVERY is an EXPENSE.” The post invites readers to a risk assessment from Surveillent Cyber.

Biff on prevention as an investment and recovery as an expense.

Biff Clark · October 20, 2026
Biff's post for Cybersecurity Awareness Month. View on LinkedIn.

The same themes on this show. Episode 6 had Prakash Darji of Pure Storage on ransomware and pricing each level of security. Episode 45 had Craig Goodwin, then Bleach Cyber’s CEO, on simple security for small businesses and MSSPs. Episode 83 had Phil Howie of Sydekick on making security doable for small businesses and selling through MSPs.

Did you catch it? A seven-question quiz

Seven questions from the episode. Each answer links the moment in the transcript or its section.

Quiz · seven questions

Did you catch it?

Pick an answer to see whether you caught it.

  1. Where did Biff's first career happen?

    b. "I had a successful career working in the pharmaceutical industry." Transcript, 0:56.

  2. What does Biff say a company can't outsource?

    c. "You can't outsource the requirements around cybersecurity." Transcript, 4:07.

  3. What does Coefficient call security, where most people see a cost?

    a. Security protects the business an owner spent a life building. See Revenue retention.

  4. What did Coefficient do in 2014?

    b. "we reformed in 2014 and started pushing the managed service option." Transcript, 10:20.

  5. What lesson did Biff take from the worst day?

    a. A scoping job turned into a contract before anyone had looked at the environment. See Scope it before you sign it.

  6. Why does Biff call a managed services provider one choke point?

    b. Providers need managed security on top of their own environments. See One choke point.

  7. What did Biff's mentor say to understand?

    a. "it's not what someone does to you or for you, it's why." Transcript, 49:28.

Ready for your cyber insurance renewal?

Eight questions on what Biff expects insurers to check, built from the episode. Each tip links the section behind it.

Scorecard · eight questions

Ready for your cyber insurance renewal?

Answer for the business as it runs today. If two answers fit, pick the lower one.

  1. Are your security tools business or enterprise editions?

    • Some consumer editions
    • Mostly business editions
    • All business or enterprise, each with an owner

    Biff's example: an insurer may only cover the business or enterprise version of a tool. See Insurance will raise the bar.

  2. When did you last restore from a backup, start to finish?

    • Never
    • More than a year ago
    • In the last quarter

    Backups are on Biff's list of what insurers will check. See Insurance will raise the bar.

  3. Does everyone get security awareness training?

    • No
    • Once, when hired
    • Yes, every year

    "if you can get some behavior modification, sometimes you can address some of the biggest threat issues that would be in front of you." See You can't outsource understanding.

  4. Is there a written disaster recovery plan?

    • No
    • Written, never tested
    • Written and tested

    Disaster recovery plans are on the same list. See Insurance will raise the bar.

  5. Do your critical systems have redundancy?

    • No
    • Some of them
    • Yes, and we test the failover

    Redundancy is on the list too. See Insurance will raise the bar.

  6. How fast do critical patches land?

    • On a 30-day list
    • Within a week
    • Within days, around the clock

    Biff's case for managed tools is that they get patched around the clock. See The future is now.

  7. Does your IT provider watch its own security?

    • We don't know
    • They say so
    • Yes, and they showed us how

    "Because now it's just one choke point." See One choke point.

  8. If an incident hit tomorrow, who would you call?

    • We'd search for someone
    • We know a firm
    • A firm on retainer, with a plan

    Biff compares security work to policing: the call comes when there's an incident. See Called in when it's already bad.

A hard renewal ahead

Start with a backup you've restored and business editions of your security tools.

Close, with gaps

The basics are there. Test the recovery plan and ask your IT provider how it protects its own environment.

Ready for the renewal

Keep testing, and keep the evidence where an insurer can see it.

What would a three-day outage cost?

The calculator prices an outage in lost sales, as in Revenue retention, and compares it with a monthly fee for managed security.

Calculator

What would a three-day outage cost?

Five numbers: yearly revenue, working days in a year, days down, the share of each day's sales lost while down, and a monthly fee for managed security.

$48,000sales lost in the outage
$20,000sales on an average working day
16.0months of the managed security fee

At $5,000,000 a year over 250 working days, a 3.0-day outage that stops 80% of each day's sales costs about $48,000. That equals 16.0 months of a $3,000 monthly fee for managed security.

The defaults are placeholders, so swap in your own numbers. The math leaves out recovery work, ransom, legal costs and the hit to the brand, so treat the result as a floor. Biff's phrase for keeping that money is revenue retention.

From pharmaceutical sales to managed security

Biff’s path, the field around it, and this show. Filter by topic.

Timeline

From pharmaceutical sales to managed security

  1. Pharmaceutical sales

    Biff starts at Block Drug Company as a senior sales representative and trainer (LinkedIn, on this page).

  2. Sales director

    Biff becomes a sales director, a role LinkedIn runs to 2004 (LinkedIn).

  3. GlaxoSmithKline buys Block Drug

    The deal is worth $1.24 billion (Wikipedia).

  4. Light Rock Video

    Biff becomes executive producer and co-owner at Light Rock Video, into 2007 (LinkedIn).

  5. Coefficient Technologies

    Biff founds an IT services company for small and midsize businesses (LinkedIn, Coefficient, on this page).

  6. The Great Recession

    A downturn that runs to mid-2009 (Wikipedia, on this page).

  7. Miami Music Project

    Biff becomes a senior advisor, into August 2010 (LinkedIn).

  8. A partnership

    Coefficient partners with a commercial firm for about three years (on this page).

  9. The Hidden Genius Project

    The nonprofit is founded to train and mentor Black male youth in technology creation, entrepreneurship and leadership (The Hidden Genius Project).

  10. Future Grads

    Biff mentors in the SF CITI Future Grads interns program, into 2018 (LinkedIn).

  11. Coefficient, reformed

    Biff becomes co-owner of the reformed company, which pushes managed services (LinkedIn, on this page).

  12. A board seat

    LinkedIn dates Biff's board role at the Hidden Genius Project, now past chair and emeritus member, to May 2018 (LinkedIn, on this page).

  13. The Kaseya VSA attack

    Ransomware hits about 60 managed service providers and their customers (Wikipedia, on this page).

  14. Episode 6

    Prakash Darji of Pure Storage on ransomware and pricing each level of security (episode 6).

  15. This episode

    Biff on the show (Podbean).

  16. Episode 45

    Craig Goodwin on simple security for small businesses (episode 45).

  17. Episode 83

    Phil Howie on making security doable for small businesses (episode 83).

  18. Prevention as an investment

    Biff's post for Cybersecurity Awareness Month (LinkedIn, on this page).

What to do this week

Five things, in the order of the episode.

  1. Write down what you can’t outsource. Name who owns your security decisions, your data and your systems, even when a provider runs the tools, as in You can’t outsource understanding.
  2. Put a number on an outage. Run the calculator with your own revenue, as in Revenue retention.
  3. Scope before you sign. Before you take over another team’s environment, or hand yours to a provider, check the service contracts, the deployments and the staffing first, as in Scope it before you sign it.
  4. Ask about your provider’s security. If a managed services provider runs your IT, ask how it monitors and protects its own environment, as in One choke point. The scorecard covers the rest of an insurer’s list.
  5. Get help with it. Our vCISO service runs security on demand, 24/7 Monitoring & Response watches your environment, and Penetration Testing finds the gaps an attacker would. If you want to talk it through, book 15 minutes with us.

Key takeaways

  1. You can't outsource understanding

    A customer can roll out a tool or check a box and still has to understand how it protects its people, its data and its systems.

  2. Security as revenue retention

    Biff treats security as a way to keep revenue. Without experts nearby, a ransomware attack can take a business away in less than three days.

  3. Plug the gaps, then teach

    A managed service lays tools over the environment and transfers knowledge, so the customer can keep the service or let it go.

  4. A CISO on demand

    A company in growth mode can rent security leadership until a full-time hire makes sense.

  5. Subscriptions bend with the plan

    A subscription covers a junior hire or an acquisition for a year or 18 months, with no fee paid three years up front.

  6. Trust is the job

    Customers call during incidents, so a security firm has to prove it's trustworthy and affordable under pressure.

  7. Scope before you price

    A favor for a friend became a nightmare contract. The lesson was to scope the environment before setting a price.

  8. Managed services need managed security

    A managed services provider is one choke point, so it needs security over its own environment.

  9. Insurers will raise the bar

    Biff expected tiers, required business or enterprise tools, and checks on training, backups, redundancy and recovery plans.

  10. Understand the why

    A mentor's lesson: ask why someone gave you an opportunity, so you can align with their mission.

Chapters

Tap a chapter to play from there.

Pull quotes

“it was a passion later in life.”

Biff Clark ·

“You can't outsource the requirements around cybersecurity.”

Biff Clark ·

“if you can get some behavior modification, sometimes you can address some of the biggest threat issues that would be in front of you.”

Biff Clark ·

“it's sad that it can be taken away from you in less than three days”

Biff Clark ·

“if they need you to stay, you stay.”

Biff Clark ·

“a CISO on demand service, because we understand the industry, understand the environments, and understand the threats.”

Biff Clark ·

“we reformed in 2014 and started pushing the managed service option.”

Biff Clark ·

“It's a lot easier than saying, hey, I've got to lay out this fee for three years in advance”

Biff Clark ·

“we fight every day to become a trusted advisor”

Biff Clark ·

“it's similar to policing in some regards”

Biff Clark ·

“That's why I pushed the phrase, you know, revenue retention”

Biff Clark ·

“I believe that most people want to do the right thing, and most people are good people.”

Biff Clark ·

“It's a continuum for us.”

Biff Clark ·

“you have to scope an exercise, or you have to scope an environment, prior to assessing what your cost might be.”

Biff Clark ·

“get the contract, complete the contract.”

Biff Clark ·

“Actually, I think the future is now.”

Biff Clark ·

“Because now it's just one choke point.”

Biff Clark ·

“it's going to go through a level set.”

Biff Clark ·

“it's not what someone does to you or for you, it's why.”

Biff Clark ·

“It's a small world, isn't it?”

Jon McLachlan ·

About the guest

Biff Clark, Co-founder and Managing Partner, Coefficient Technologies

Biff Clark is co-owner and managing partner of Coefficient Technologies, a cybersecurity firm for small and midsize businesses that does business as Surveillent Cyber. Biff came to security from pharmaceutical sales, with 12 years at Block Drug Company and GlaxoSmithKline that LinkedIn dates from 1992, founded Coefficient as an IT services company in 2004, and has been co-owner of the reformed company since August 2014. LinkedIn also lists Biff as past board chair and emeritus board member of the Hidden Genius Project since May 2018.

About the host

Jon McLachlan is co-founder of YSecurity, the on-demand cybersecurity team for startups, and of Cyberbase.ai. The Security Podcast of Silicon Valley is hosted by Jon McLachlan and Sasha Sinkevich. Jon McLachlan on LinkedIn ↗

Context and sources

  • Episode 14 on Podbean: Biff Clark, Cybersecurity Specialist and Owner of Coefficient Technologies, Frontiers of Cyber Security. Source ↗
  • Biff Clark on LinkedIn: co-owner of Coefficient Technologies, doing business as Surveillent Cyber. Source ↗
  • Biff Clark's experience on LinkedIn: Coefficient co-owner since August 2014, founder of Coefficient from 2004, and 12 years at Block Drug Company and GlaxoSmithKline from 1992. Source ↗
  • Biff Clark's volunteering on LinkedIn: the Hidden Genius Project board since May 2018, and SF CITI Future Grads from 2013 to 2018. Source ↗
  • LinkedIn, October 20, 2026: Biff on prevention as an investment and recovery as an expense. Source ↗
  • Coefficient Technologies: cybersecurity services for small and midsize businesses, a 24/7 security operations center as a service, and CMMC 2.0 readiness. Source ↗
  • About Coefficient Technologies: formed in 2004, with Dennis K. Moore and Biff W. Clark as managing partners. Source ↗
  • The Hidden Genius Project: its mission, to train and mentor Black male youth in technology creation, entrepreneurship and leadership. Source ↗
  • Wikipedia, Block Drug: a maker of dental care products, bought by GlaxoSmithKline for $1.24 billion in 2001. Source ↗
  • Wikipedia, Ransomware: malware that holds a victim's data hostage until a ransom is paid. Source ↗
  • Wikipedia, Managed security service: network security services outsourced to a provider. Source ↗
  • Wikipedia, Managed services: IT outsourcing typically delivered under a subscription model. Source ↗
  • Wikipedia, Chief information security officer: the executive responsible for the program that protects information assets. Source ↗
  • Wikipedia, Great Recession: a downturn from late 2007 to mid-2009. Source ↗
  • Wikipedia, Security operations center: the function that protects an organization against threats. Source ↗
  • Wikipedia, Groundhog Day: the 1993 film about a weatherman trapped in a time loop. Source ↗
  • Wikipedia, Kaseya VSA ransomware attack: on July 2, 2021, about 60 managed service providers and their customers, with downtime for over 1,000 companies. Source ↗
  • Wikipedia, Norton AntiVirus: part of the Norton family of security products since 1990. Source ↗
  • Wikipedia, Cyber insurance: many policies require an IT security audit before the carrier binds the policy. Source ↗
  • Wikipedia, SAP HANA: an in-memory, column-oriented, relational database management system from SAP. Source ↗

Transcript

Automatic transcription. Jon McLachlan hosts this episode with Biff Clark, co-founder of Coefficient Technologies. There is no diarization on the tape, so speaker labels were assigned from the content and checked against reference recordings of each voice from this episode, and a few short lines may sit with the wrong speaker. Names and terms were normalized where the recognizer misheard them (Jon McLachlan, Biff Clark, Coefficient Technologies, Mindblown Laboratories, Prakash Darji, Pure Storage, SAP HANA). Words in [brackets] are best guesses where the audio is unclear, and [...] marks words no decode made out. Speech is transcribed as spoken, though many repeated words and false starts are left out, and so are short backchannels such as "yeah" where they overlap the other speaker.

Read the full transcript 9,438 words

Jon McLachlan

Welcome, everyone, to the Security Podcast of Silicon Valley. I'm here today with a very special guest, Biff Clark, a cybersecurity specialist and co-founder of Coefficient Technologies LLC. They've been around since 2004, focused on all things cybersecurity. Before that, Biff, you actually have a lot of philanthropic work here. You're the chair of the board of directors at the Hidden Genius Project, the Marcus Foster Educational Institute, Mindblown Laboratories out in Washington, DC. And before that, it looks like you actually came in through the business side of things with a strong foundation in marketing and in sales. But if you've always had a special place in your heart for all things security,

Biff Clark

You know, it was a passion later in life. And what was fascinating to me was, you know, I had a successful career working in the pharmaceutical industry. And I was fortunate to be somewhat fast-tracked, so I moved to a different department every 18 to 24 months. And you pick up these skill sets, and then you reach a certain age and you wonder, are there other things I can do? And so I created this make-believe retirement in my mind that I was going to retire at 40 or 45 if I could find a way to do it. And I found a way. So I retired from that industry, and I said, okay, I'll reinvent myself and find another thing that interests me. And technology was something that a friend was talking to me about, [and] we were able to map some of the parallel skill sets. And we just jumped in, and that's how I ended up in the technology space, and then moved into cybersecurity, because I realized how difficult it was going to be for people to identify these threats and then protect their assets. And so the more you [read about] it, the more fascinating it becomes.

Jon McLachlan

Reinventing yourself. I love that. That's similar to what Madonna does every couple of years, right?

Biff Clark

Very true.

Jon McLachlan

And to focus it on a hard problem, I know I'm attracted to difficulty and to solving difficult problems myself. So I totally understand the drive and that pull. It looks like you went off and you got your MS, actually, in cybersecurity, electronic operations and warfare. And you actually graduated with magna cum laude.

Biff Clark

Yeah, thank you.

Jon McLachlan

Congratulations.

Biff Clark

That was great. It's interesting because at some point, I realized that not only is this the future, but this is definitely something I wanted to be part of. Knowing that when you, certain industries, when they go from tradecraft to institutional, which is, you know, they start to build degrees around it, I wanted to be one of the early adopters. And so I felt no better way to really establish myself than to say I'm committed to it by going and getting an advanced degree in it, and then integrating myself into the community, you know, both feet in and saying, hey, I'm here to stay. And so that was the motivation. And then the, just the relationships you build at that level, especially on the academic side, were key to helping me figure out how to really navigate the future. So I'm really glad I, I did those late hours and earned that degree.

Jon McLachlan

Hard work always has a way of paying itself off, doesn't it? I'm super happy to hear that. So tell me a little bit about Coefficient Technologies. What do you guys do there?

Biff Clark

Yeah, so we've been at it for a while. We've had, you know, the typical things companies go through as you go through your maturation process. But, you know, we are cybersecurity specialists. And so our focus is really developing the companies that we work with to help them better understand cybersecurity, as we define as our area of expertise. [No], we realize the customer has to understand cybersecurity to properly deploy it in their environment. Yes, you can roll out a tool. Yes, you can check a box, but you really need to understand it. You can't outsource the requirements around cybersecurity. You need to understand what people are doing for you. And so we believe in that. We believe that the customer has to understand, how do I protect my employees or my users? How do I protect my data? How do I protect my systems in the most logical way? And it's not always the most complicated solutions. Sometimes it's just smart solutions that address a concern and they shift behavior. And if you can get some behavior modification, sometimes you can address some of the biggest threat issues that would be in front of you.

Jon McLachlan

Awesome. No, that's a really important component, is not just to throw money at a problem, but to really understand how, help your bottom line, help your top end.

Biff Clark

Very true. Yeah, so I'm adding kind of a second element to it. So the reason why we focus strongly on just cybersecurity is because we realize that most people think of cybersecurity as a cost, but we think of it really as a revenue retention [play]. Because end of the day, you have solutions that help you protect the business that you spent your life building. And it's sad that it can be taken away from you in less than three days if you get hit with a ransomware attack and you don't have experts around you to address it. Everything you work for, the families that you feed, can all be lost in a matter of time. And we realized that, that was one of the key elements that we wanted to offer as one of our differentiators, is that, you know, we bring this expertise in-house for you to help you understand it. And [then] we'll do the parts that we need to do to plug gaps. And so part of that strategy was looking at the managed services model as well, where you now have managed security services, and where you can now layer tools over an environment to plug gaps where they're not as strong. And then as you do your knowledge transfer, make either their in-house IT team or some of their cybersecurity professionals more knowledgeable about the products, at least you're plugging the gaps while they're becoming more knowledgeable. And if they need you to stay, you stay. If not, then, you know, it's like an on-demand service. You know, they pay their subscription fee for a month or for annual, and you continue to provide services to them, and then you become a trusted advisor. So we are, without a doubt, a reseller of cybersecurity tools, but we are managed services as well in the consulting field.

Jon McLachlan

And so it sounds very similar to the vCISO role that has been cropping up, where companies maybe are not big enough or don't have the resources to justify a full-time CISO to help organize and orchestrate all of the security needs, but definitely large enough that they do need some level of help and expertise. And because it's tightly coupled to business decisions and operations and day-to-day operations, it's great to have someone in-house temporarily.

Biff Clark

Yeah, well, particularly here on the coast, on both coasts, when you think about, you know, your highest salaries are, they're going to range from, you know, Boston down to Florida. And then the same happens on the West Coast, from Seattle down to San Diego. So to hire a network administrator, a cybersecurity analyst, chief information security officer, they're expensive. They're significant investments. And so you have to think about, do I have enough work to keep them busy? And some companies, when they're in growth mode and all their money needs to go into research and development and really building out, you know, their growth plan, they may not have the resources to pay someone a six-figure salary just to sit there and just define how they're going to protect that. Even though they know it's important, they'd rather use that for something else. And so that's where I think companies like ours can fill the gap for them for a period of time, until they reach the stage where, yes, it's important to have someone in-house. So we can do, like, a CISO on demand service, because we understand the industry, understand the environments, and understand the threats.

Jon McLachlan

Oh, that's excellent. And I also see that you structure your company as an LLC. So what that tells me, just putting my Silicon Valley cap on for a second, is that you don't have traditional investors that have bought shares.

Biff Clark

Not today. You know, as we look at this managed services model, we are considering, that's the quickest way to really grow that. You know, there's a lot of bandwidth that's needed to run a managed services, to [communicate] to get into tier one, tier two services. Right. You know, we've given thought to, you know, this may be a great opportunity if we wanted to really grow our footprint faster, then, you know, this is a pretty stable brand to do it with, because this is the norm now, is people are using third-party services to help with security, to cover, you know, where they have a short amount of staffing, they may have some turnover issues, and they need to make sure those gaps are plugged. But the reason why we're an LLC is when we started out in the early 2000s, a lot of our work was around the subcontractor work in the DC area. And so it was a pretty organic business. You know, you came in, provided a service. It was an open-ended contract. You stayed in there for months on end, years on end. And then you grew basically through referral and networking. And so it was a comfortable business that you could continually expand upon. And you added a service when you identified an issue. And so we were doing very well and very comfortable with that. And the recession hit, and things changed with that model as people start to close shop and shutter. And then you have to think about, how do I reinvent myself?

Jon McLachlan

Was that right, 2008?

Biff Clark

That was right around 2008, 2009. So around 2009, we partnered up with another [boutique] company that was really doing a lot of commercial business, but didn't have a service arm, which we were really strong at. And so we partnered with them for about three years and started to just do that work. They started to make the shift toward federal. And we started to see a stronger push toward managed services again. And so for us, we decided, you know, we had put our business on the side while we were doing a lot on the service work. And we said, let's just start our company up again. And what we did is we reformed in 2014 and started pushing the managed service option. And so collectively, we've never stopped managing the customers that we had, but we did reintroduce ourselves again and did another launch, a soft launch. And now we've been going strong in the managed services space.

Jon McLachlan

No, that's wonderful. I'm, that's great to hear that you've been able to identify the shifts in the market and just, like water, flow with it, instead of fighting the current, fighting the times. You said the magic word for all investors. You said subscriptions.

Biff Clark

Yeah.

Jon McLachlan

So, is that how it works? If I wanted to subscribe to consulting, then I pay a subscription fee, and then I get maybe more help when I need a little bit more help, and a little bit less help when I don't. Things are just smooth sailing.

Biff Clark

Yeah. Yeah, absolutely. Cause you need to, again, as you stated, you have to be able to adapt to the market space and what the needs are. And so companies have strategic plans that they need to work through and fulfill. And so you need to be able to ebb and flow with them. So the way our managed service model works is, you know, we provide the solutions that you need. They either support what you existingly have in your environment, and then we can roll that into our security operating center, and we can manage those components for you. So let's say you've had some turnover, and you haven't been able to hire the person that you really wanted, but you had to find a junior person that has maybe two years out of school, a little bit of work, they've been an assistant, but you need someone that really understands how to do security analytic work. And so we come in and lay our tools over the top. And so they may need that for a year. They may need it for 18 months, or they may be acquiring another facility, and they need to add some stronger tools on top of a company where they identified that they had significant vulnerabilities, but they need to get that organization up and running with their tool set as soon as possible. So yeah, we work the subscription model. It's a lot easier than saying, hey, I've got to lay out this fee for three years in advance, but we definitely can see ourselves growing into it.

Jon McLachlan

No, that's excellent. I like the business innovation there, as usually subscriptions aren't thought of as connected, I think, to the human services. But I like that. That's a nice touch. And you use the first person plural. You were talking about we. And so you have a business partner in with you.

Biff Clark

I do. It's an, actually, very fun story for me. My business partner, Dennis Moore, we've known each other since childhood. He and I went to the same high school. We played on the same football team. We were really good friends, fast friends as well. And come to find out that my brother had bought a horse for his daughter. And he used to take her to, you know, the stalls, and they would ride around. And Dennis's father also had done that for him and his brother. He met my brother when he was like three or four years old. And so he's been around the family my entire life, but we really connected when we got to high school. And so he went on to the Air Force Academy and got his degree in human factoring engineering. I went on to a school in Nebraska where I'm from, and ended up getting a business management, the finance minor, and received a football scholarship to go down there. And then after graduation, some years later, we reconnected in the DC area. He was assigned to Andrews Air Force Base after coming out of the military and working in the cybersecurity space for Boeing and also Andrews Air Force Base. And then I was transitioning down to DC through the pharmaceutical company, and we just reconnected. So long-term friends, and we had an idea about working together, and he happened to be in the space, and this was our chance. So we went for it.

Jon McLachlan

No, that's great. And so you guys already had a solid foundation. They were both family friends, and so the trust was there. Didn't have to worry about any of those messy, like, founder dating scenarios or those sometimes awkward discussions.

Biff Clark

Yeah. The thing, though, is I think with anyone, you spend so much time together, you've known each other for so long, that you still have these brother fights, though.

Jon McLachlan

Oh, of course. I think it just comes with the territory.

Biff Clark

It does, but we work through it.

Jon McLachlan

You're going to be honest and you're going to be straightforward, then that's, that comes with a textured relationship, let me say.

Biff Clark

Absolutely.

Jon McLachlan

And it is, there's no other way to do those, right? You got to bring your full self to the table and invite everyone else to bring their full self to the table. And there's going to be differences. And that's where teams are actually better than the sum of their individual parts, and you come together and you can discuss and make a decision about what's the best path forward, and trying on each other's perspectives as if they were a pair of sunglasses or something.

Biff Clark

That's right. And you still remember their ticks. So I remember, hey, when you were younger, you used to do this. So I know what's going on.

Jon McLachlan

Yep, yep. If you can read them, that also helps. You know, it bubbles up all of the pieces.

Biff Clark

Absolutely. But it's been a good relationship. And, you know, he's like a brother to me. But more importantly, you know, we're focused on success for our families. And we have the same motivations and mission.

Jon McLachlan

Do you guys have any employees with you?

Biff Clark

Yes. So right now we're a team of five. And, you know, we've worked with these individuals now for the past four to five years. Our traditional model has been more of a consortium, especially in the security space, where you need expertise. And it's hard to have that on staff when most of the time you're trying to run lean, unless you have long-term projects that allow you to put a person on site. So we deal with a lot of subject matter experts, but our current five team, our team of five, involves two additional engineers, as well as a sales team, business development team, and then also an enterprise salesperson. And the majority of those folks are managed on the East Coast, but we do have a national footprint.

Jon McLachlan

It's more than just you and your partner, it's those guys too. And I'm happy to hear that you even have the business development folks in house now, too. Somebody's going to help you with this stuff.

Biff Clark

Yeah, exactly.

Jon McLachlan

It's a lot of work in that department. I understand completely. No, thank you so much for the childhood stories, too. It's great that it went back to your meeting your partner just now. It's funny how the universe has a way of just working things out for us.

Biff Clark

Yes, it does. I couldn't have a better friend or partner. So he's been there for us and my family for years. And he's always been a stand-up guy. And you want to work with people that have integrity and character. And one of the great things about his military background, because he had followed his father into the Air Force, but except he was able to go to the academy, was he just has high integrity. And in this space, that's very important. Very important that you, you say what you mean, you can deliver on the services, and that your focus is always the customer. You're focused on the customer and what their concerns are, what their needs are, how you can help them better understand how to protect their businesses. And they need people they can trust. You know, we fight every day to become a trusted advisor, so that they can ask us any question, even if it's not for services that we offer. We're trying to protect them because we believe that that's the mission. You know, we have to give people better defenses. Sometimes it's intellectual. And so we can invite them to go talk with someone that we know. And sometimes it's the solutions that we offer, but we all win.

Jon McLachlan

Yeah, that's the way to do it. To build relationships, you need a foundation of trust. To have a foundation of trust, you need to preserve your integrity. And, you know, when you talk about high performers, you can have high performers very smart in a particular area, but if you don't bring that in, you know, the sense of integrity along with it, then, you know, you're missing something there. 100%. And that's where I believe leadership really bubbles up from. It comes from that strong foundation of trust and integrity. So you can have real relationships with folks, you can have vulnerable moments, and trust that you won't be taken advantage of, that you have everyone's best interests at heart.

Biff Clark

Absolutely. If I was to just add some life lessons for myself, I think, you know, you have to treat people the way you want to be treated. And that involves being honest about situations where there may be a learning curve issue, there may be an availability issue. It could be anything, but you realize that if you want to do good work, then you're going to have to meet people at a place that allows you both to understand how you can get this done. There's a lot of high expectations in this space, because it's similar to policing in some regards, where it's only when the phone call comes in that there's an incident happening that you're called to duty. Nobody just rolls up to you and just says, hey, I want you to know everything's going fine. Can you just do this to be, you know, to help me have a kind of a gold standard, understand where we are? That seldom happens. It's usually an incident that you have to come in and address. You know, the intensity is high, the energy level is high, and questionable. People are somewhat suspect. They're questioning folks on why things happened, but yet they need to pay you to resolve it. They don't know what that dollar amount is going to be. You don't know what that dollar amount might be. And you have to find a way to get them to realize that you're there for their best interest, and you want to get this done as soon as possible, so they can get back to doing what they do best. And so you really have to navigate that. And as you stated, you know, they have to believe that, one, you're trustworthy, and you're not going to try to take advantage of the opportunity, but you're going to do what you think is logical and reasonable to get this done at an affordable price, truthfully. And that could be, you know, a couple hundred dollars, that could be a couple thousand dollars, it could be a couple hundred thousand dollars, depending on how severe their environment is.

Jon McLachlan

That's one of the reasons why proactive sales can be very tough in the security space, because when everything is peachy, and it's easy to push the sort of the risk analysis and the gold standards, I guess, as you put it, down. Oh, that will be good for next quarter. That will be good for next year. It's a good problem to have, you know. And then when you do have that problem, uh-oh.

Biff Clark

That's why I pushed the phrase, you know, revenue retention, because they see it as a cost. They're like, this is CapEx. You know, we got to do this. We got to pay this much money for this service. But at the end of the day, if something happens, there's, you know, you're going to take a hit on your brand. So brand recognition, you're going to take a hit. You're going to take a hit with your employees, because they may have an unstable environment. They're not comfortable there anymore. You, you may take a hit revenue-wise. So your whole objective is to make sure you make more money year over year, not have this $2 or $3 million that gets snatched out of the coffers because you didn't want to pay for a particular solution or a person to come in and actually lay out a real strategy for you.

Jon McLachlan

Yeah. So, actually, one of the questions I like to ask folks is, what's the one truth that you see in the world that most people miss?

Biff Clark

I was thinking about this, and I believe the, all of the social challenges and social injustice and issues that we've had to discuss throughout the country in the past almost two years now, it has brought this to light. And, and I believe that most people want to do the right thing, and most people are good people. I feel like most people want to help. They don't want to hurt. I believe that people understand that being on the wrong side of anything is exhausting. Yeah, we find that it's very challenging at times, because we're brought into crisis situations. And if it's a refresh where they've waited too late to decide, to really evaluate a solution, they've got to make a solution in 30 days, that creates anxiety. Or an incident happens, privileges are lost, someone misplaced a fob, and they know that they had access to some highly sensitive information. You've got to figure out if there's anything that's lost, or. So it creates a situation where companies and individuals and leaders want to do the right thing. And oftentimes, there's something that may be preventing them from making that decision today, but they have, you know, a long-term objective to address it the right way. And so what we spend our time trying to do is helping them, is to help them make those decisions sooner, to realize that it's in your best interest to address it now than to push something down the road. If you want to do good, then let's think about, you know, how you're going to protect your organization, how you're going to protect the employees that manage sensitive stuff, how you're going to make sure that you're able to feed your families down the road, not just do this quarter. And so we try to focus in on making sure we can identify, and that we can relate to the individuals that we deal with. Oftentimes, I've found as a minority business owner, there's a disconnect in some of the social structures that we deal with. And a person that's not African American doesn't really understand an African American's life. But they oftentimes don't think about the fact that we have a lot in common. Like, we both put our pants on one leg at a time, we both enjoy eating pizza and drinking a beer. We have a lot of things in common. We both love motorcycles. There you go. Yeah, you're right. Motorcycles, we both like security. I like to provide solutions. You like to protect environments. There's a lot more things in common than probably are the things that we have different. And the goal is really just getting folks to see that, you know, I'm a good person because I believe you're a good person, and we need to find ways that we can relate, and how I can be a service to you. And sometimes when there's a difference in race, it's easy for people to dismiss, because they don't realize the consequences of the situation. If you've never lived my life, you may think, oh, he doesn't care, he'll just go on to the next customer. But I got to feed a family too. You know, I've got to pay a mortgage, pay for a car, and I've got to keep my employees happy. So there are things that we can identify on, and when we find those, then I'm here to help. That's what my job is. I'm a firefighter for you. Give me the same chance that you give everyone else.

Jon McLachlan

I feel the love, the passion, and the drive, and the, the connectedness. Maybe that's a really good word. I feel the connectedness.

Biff Clark

Yeah, we're always trying to do that. We need it now. And so I think it's been hyperexposed since all the issues that we've had in the country. But I think just even in business, people need to be more focused on, you know, how do we make sure the intelligence is needed to protect folks, you know, are in the same room. No. We're all in the same boat, right?

Jon McLachlan

Yes.

Biff Clark

On the Titanic. So, no, please.

Jon McLachlan

Let's take the Titanic as a lesson learned and not go full steam ahead in the dead of night, you know, a dangerous context or something.

Biff Clark

Nice.

Jon McLachlan

I agree. A hundred percent. No, and I appreciate you bringing up the race question. I was actually just having a discussion with a friend around the 1960s and the MLK speech, and how it was a time that facilitated great change and great positive change, and it really helped build the world that we all share today. And that even today, you know, with George Floyd and everything that had just happened there, that there were a lot of parallels to the 1960s and all of the work that had been done. Mixed feelings, in the sense of, you know, sadness that we're not further along in a lot of those social justice issues, but happiness that it is actually coming up and it's being a subject of discussion again. So we can improve, we can continuously improve. I'm not sure it's about a destination. I think it's more about the journey, and appreciating that we're all imperfect, and that we're all different, but at the same time, we're all connected, and we're all in the same boat together, just as you were saying.

Biff Clark

Absolutely. Absolutely. I think if I was to add to, you know, what you said earlier, to, you know, success and education and just learning in general, requires commitment, discipline. It's hard work. And our country is going through a shift. And it's hard work to get people back on the same page, to buy into the values of a system as it's evolving. And I see our country is trying to figure that out, and I'm really glad we're trying to figure that out. And then folks have a voice, and they're willing to express themselves and share their perspectives, opinions, and experiences, because that knowledge needs to be shared, and vice versa. I think that those that are in, you know, the, you know, the shape-shifting world of politics, of industry, of our social challenges, they need to hear these types of storylines, so they have better or more data points to make better decisions. And when you think about whether a person is white, black, brown, or from other countries that we represent now in the United States, it's important to understand that, that we are all at some point an immigrant, and that we all are here trying to find a better life, and that we are here trying to make sure that our borders are safe, and that people have an opportunity to fulfill their American dream. You know, they bought into what the Constitution said. And so by that, by default, you know, we have to provide them with all of the elements that are in their constitution.

Jon McLachlan

Yep, equal opportunity under the law is supposed to be [blind], right? Not prejudice at all. I couldn't agree with you more. Okay, so tell me about the best day that you've had at Coefficient Technologies. What was that day like, and why?

Biff Clark

It's a continuum for us. It is a continuum. The day that we launched the company, of course, because, you know, we were, we believed we had something, and we wanted to go out and prove it. And then we did. We went out and proved it. And so that has always been the exciting day, where you sign on the document and say, hey, this is the official company.

Jon McLachlan

There you go.

Biff Clark

But the reason why I say it's a continuum is because every time a customer says thank you, or thank you for helping us, or this is great, I still get that same feeling, because we mean, not only did we buy into our mission, they understood it, which is we are here and we're customer focused, and we want to solve a problem for you. And we want you to get back to business and feel confident, you know, reassured that the solutions that we provide allow you to do that. And especially if they're switching from one solution to another, there's that hesitancy. Is it going to work the way you said it's going to work? Or you solved this problem, we're now back up and running, our network is working again. It's just the sound in their voice these days, you know, which used to be in person, the look on their face, that says they're a satisfied customer, and that means that we're doing well, we are fully in our mission. And it gives us another day to go out and sell that service and share that experience. And I'm always overjoyed when someone's happy with the work that we do.

Jon McLachlan

Excellent. No, I love that, because then it's like an opportunity for the best day to be yet again tomorrow, or the next day, or the next day, on average.

Biff Clark

I believe in Groundhog Day. I want that. Yes. I want that.

Jon McLachlan

Okay. All right. I love it. Okay. So what about the worst day? Has there been, like, just a horrible day that you've had at Coefficient Technologies, just for who knows any reason at all? And you clearly have navigated it, because you're here and you're successful and you're sharing all of these great stories. But oftentimes, other entrepreneurs who listen take great advice from experienced and successful, you know, [leaders] just like yourself.

Biff Clark

I do actually have a story, and I talked to my partner about it, because it was an emotional story for us. A few years back, a good friend of mine, a mentor, was chairing a board and said, hey, I've got a problem with our existing IT team. They're contracted. Can you come in and replace them? I'm just not comfortable with everything they're doing. There's not enough transparency. Can you come in and help us out, figure it out? What I thought was going to just be a scoping exercise, maybe an audit, and lay out a report that says, here's the recommendations for changes, turned into, hey, we need you to sign on this dotted line, and you're going to take over this service. And there was some trepidation there, because we're like, ah, we haven't had a chance to fully scope this environment. We're not sure where you are, as far as where you want to get to, where's our starting point. And because he was a good friend, we agreed to do the contract. And when we started to dig into it, it was a nightmare. And we were bicoastal. And so it was a nightmare because we started to understand they didn't have, you know, they didn't have service contracts on their network. They hadn't deployed solutions properly. They were under-resourced, not only financially to address the network, but even bodies. There was an actual coup d'état that took place, where people walked off the job site and said they're coming back. And we're sitting there going, how are we going to handle this? And in this particular case, they were doing a major rollout when all this went down. And this is your friend, a good friend. This is my friend. And he was telling me, thank you, but it was worse even before that, is what he was saying. So he was telling you, thank you. And you're like, wait, hang on, hang on. And so at that point, we knew we were going to be the bad guy in the relationship, because, you know, there's relationships throughout the organization, but they were long-term, and they didn't understand the scope of really what was going on or how bad it was. And so I remember my partner, Dennis, so he would have to wake up at three o'clock in the morning and do these system resets every day, just to make sure that we could get this system up and running for these particular rollouts that they had coming, you know, that were scheduled, like, every other week. And, you know, we had to hire a team, bring them up to speed on a network that we couldn't really give them full knowledge. We were just an hour ahead of them from a knowledge base standpoint. We could think about it and then tell them how to do it. We had to hire a lot of third-party consultants. So that chewed up a lot of the contract money. And we finally got to the point where we were ready to roll out a new system. We had found, you know, a bucket of money that could cover new solutions and also new hardware. So everything would have a service contract.

Jon McLachlan

I love it when you find a bucket of money.

Biff Clark

It just happened. They pulled it out of something, and they finally let it. And then right when we [get] ready to, you know, to make the, they decide that they couldn't afford our services anymore. And, but they wanted to hire our team. Oh, so wait a second.

Jon McLachlan

They, did they want to buy the entire company at this point?

Biff Clark

They're just like, yeah, [we'll] bring you [in the] house. Keep doing this. Yeah, thank you for the work you did, but, you know, you guys are too expensive for us, you know, based on all the work that had to be done. But we do, guys that you do have here, can we hire those? And so the difficult decision for my partner and I was the two individuals that we hired, they've got families to feed, and I can't pull them off this contract if this is helping them meet their day-to-day responsibilities. And so we worked out an agreement that allowed us to separate and retain some of the money that's owed to us, and those individuals now work on that site. But it taught us a very valuable lesson, [and that is], you know, you have to scope an exercise, or you have to scope an environment, prior to assessing what your cost might be. Because there were a lot of things that we decided to, having that honesty and that integrity, to say, hey, you know what, let's just cover this cost for them. And we did that because we were trying to do the right thing. And I'm still glad we did that. But we realized we walked into a show that has some manure on the front of it. And I know what type of show that's called. And when we got out of it, you know, it was a relief, but we wish we could have turned it completely around, so it didn't all fall on us. But, you know, when you come in and you do contract work, you have two goals: get the contract, complete the contract. And so complete the contract is 100%. And when anybody tries to prevent that from happening, you know, you take some of the onus there. So I was sad that we didn't get to roll out that new environment, because that would have solved a lot of their problems. But when your friends call you, pick up the voicemail. Don't answer the phone. Put them to a voicemail. Okay, that's funny. Think about it. No, it's good. It's good.

Jon McLachlan

When you mix, when you shared your earlier story, you know, you had a childhood friend, a family friend, and you go into business with them. I'm happy that, you know, when you mix friendships and you mix business, that can be, I don't want to say conflict of interest, but you will give people more benefit of the doubt, I think, in certain situations, and cross your fingers, hope for the best. I'm sure, it sounds like it was no one's fault in particular, but it's just a difficult situation. Are you still friends with the guy who was?

Biff Clark

A phenomenal person, and we did good work, you know. But, you know, where we set the bar and where we got them to, you know, truly kept them functional. You know, they now have a team that's solid, that has all the experience, understands the environment. They didn't have it before.

Jon McLachlan

So they got it. They got that momentum that you gave them, and they just ran with it. And now they're in a much better position.

Biff Clark

And they've got much better than where they started, when we, when the coup d'état happened.

Jon McLachlan

Well, there you go. So you got, that's a success in my books.

Biff Clark

I don't know.

Jon McLachlan

Yeah, that's definitely a success. I love how your worst day is still a smashing success. That's fabulous. That's wonderful. So if you look into the future, and you look out into the future with your visionary lens on, and you see Coefficient Technologies, and you see it [as a] smashing success, what does that future look like? And how far away is that, too?

Biff Clark

Actually, I think the future is now. And the reason why I say that is because the world did this quantum leap with the pandemic and the shutdown, because there was always this concern, and you were part of this, so you understand this joke, which is, I don't believe in the cloud, but I'm going to send you my response via Hotmail or Gmail or AOL, right? So I don't believe in the cloud, but did you get my email I sent you in the cloud? All right, yeah, totally. All your information is running through it, right? So it was a comical thing for folks, that, yeah, you don't believe in putting data in the cloud, but now, with the shutdown, and everyone was a remote worker, it fast-tracked managed services.

Jon McLachlan

Yes, it does.

Biff Clark

Completely fast-tracked it. Which also meant it fast-tracked the concept of reducing your overall footprint. There's more services you can put in the cloud now. You realize, I don't need to have these huge data centers. And not that folks, you know, they will lose their jobs in that space. They'll just shift them over, maybe retrain them and teach them other skills. But now it's like, you can reduce your footprint, which helps, you know, from a greenhouse gases standpoint, which allows you to be more efficient, by allowing you to reduce not only the amount of money you spend on leases, but also the fact that you can get better tools, that you'll have better security tools that are being managed, you know, and patched 24/7, 365, than waiting for a patch to come down and making sure that it's in your project [pipeline] that says, hey, we're going to do this 30 days from now. No, they're taking care of that, and the updates are happening more consistently and more frequently. So we believe now that the whole managed service model is upon us. This is a new age, and we feel that's really where the growth is going to take place. And so we are primed to just do more business in this space. And, you know, if I had two more hands, you know, I'd be able to do a lot more than what I do now. But I'm excited about that. So the future looks bright for us because of the space we're in. And we started this maybe 15, 20 years ago, of thinking about just cloud services, so we have an expertise in it. But that's key for me. The other thing I think is important is customers, there's just more and more businesses starting, so it's almost a restart. When the country goes through these types of recession-based model challenges, you know, a whole new set of companies start, and so there's a new group of folks that need help. And so for us, it's just a recycling of opportunities, where you now can work with maybe a little smaller company, but they need more help than some of the more mature ones.

Jon McLachlan

All of that resonates with everything that I've seen and noticed, especially with the recent reset with the pandemic, and everyone just stomped on the gas when it came to managed services.

Biff Clark

Yeah, there's one even more interesting point. And so we are a managed security service, because managed services, they're not in the cybersecurity, they're just doing both. And so managed security need, managed services need managed security over the top of their environments. Yes, they do. And so we're finding that is even a new opportunity for those that went out and built big managed service businesses around Office 365, Workday, some other offerings. And they need tools now that make sure that they're not vulnerable. Because now it's just one choke point. If a cyber criminal gets into a managed services, they take down companies all around the country. You know, the managed service person has to think about, how am I going to protect my environment? Because that's now part of my requirements to make sure I'm secure. And I need to make sure that folks have cybersecurity insurance too. You know, we're finding we're helping more than just the end user. We're helping our end users, also managed services too.

Jon McLachlan

What do you see the future of the cybersecurity insurance being, [with] all of these ransomware attacks and costs going [up]?

Biff Clark

Yeah, it's going to go through a level set. They're going to have to determine what tools will be part of that requirement in order for people to have a level of confidence, that you just can't do just a simple checkbox of a tool. So if you are a, then they'll probably tier it, where you have, you know, your small, [you know], LLCs, corps, and so on, and you move on up. But they'll make sure that people are using quality products that have a level rating that says that they are able to defend against certain things. So you could be a 10-person organization, and you may just go and buy the Norton product. Norton may say, we have a personal option, but the cybersecurity insurance will say, no, we will only secure you if you happen to have the business or enterprise version of. And we'll continue to do that with other tools and say, here's the set of tools that we will support and insure. And then we'll make sure that you're doing all the requirements around behavior modification, around best practices, around cybersecurity awareness training, what you're doing as far as backup, and how are you doing your redundancies, as well as your disaster recovery plans. There'll be more requirements, and that just helps our industry, because we bring that expertise to the equation, instead of them trying to figure it out. It's like people doing their own taxes. Yes, you can do your own taxes, but when the IRS calls, you know, you have to answer those questions. Right. Why not take them to a professional and let that professional answer those questions for you and do your taxes, because they may find a couple other things that you didn't think about. And so I feel like we're similar to that. Let us do your taxes. Let us do your cybersecurity, and you'll be better protected and better prepared when an incident happens to respond and be back up and functioning.

Jon McLachlan

Yep. That's a great analogy. It's a great analogy. And I was just glancing at your LinkedIn here, too. And it looks like you are connected with Prakash Darji. Does that name ring a bell to you? He's the general manager of cloud services over at Pure Storage. At the moment, he is anyway. Before that, he was at SAP. Did a couple of other things from SAP. Yeah.

Biff Clark

Yes. So there was a neighbor of my wife and I in San Francisco. And we, we shared, like, we were in this building where the windows were almost a pass-through, where when they were in their dining area, they could see through our bay window, which allowed them to see the bay. And so if we ever closed the doors, they were like, no, and they couldn't see the [bay]. And so he worked with that family, because that individual was an EVP at SAP, and he had come over for, let's say, a makeshift happy hour, and we all met. That's initially how we met. And then I was working with another company, while representing another solution, where they had a product that identified bugs in SAP HANA solution. And so I had a one-on-one with him to talk about the way I could present this product as a service offering to support the work that they were doing to roll out the HANA product, which was a very difficult rollout. The conflict is they're trying to sell the product, not let people know that there's problems with it.

Jon McLachlan

Right, exactly. No, it's funny, what a small world. The reason I brought up Prakash is he was actually on the Security Podcast in Silicon Valley a couple episodes ago, and he was speaking, he resonated exactly with your message, that the future is going to be services, and that we need to focus on the security of those services and solve those hard problems with abstraction layers. And so it was great.

Biff Clark

It was great. Wonderful gentleman. Met him a couple times, but it was, very kind, very knowledgeable. I was glad I had a chance to meet him, but I haven't talked to him in years, you know. But now that I know we have something in common, I will ping him and say, hey, you never guess who we have in common, what we have in common. That Jon McLachlan guy, the Security Podcast of Silicon Valley.

Jon McLachlan

Yeah, you both have been on it now. I reported up through his chain at Pure Storage when I was at Pure Storage. I was in cloud security. So.

Biff Clark

Awesome. Oh, that's awesome.

Jon McLachlan

I love it. It's a small world, isn't it? Okay, so one last question to you. What's your favorite interview question?

Biff Clark

My favorite interview question. My favorite interview question is when I'm asked, [you know], what do you think shaped your life? What do you think has made you the person you are? Because it's, you know, you rarely stop and reflect on what you think those pivotal moments are. And it's a kind of homage for me to tell people, you know, there's a lot of things that happen, good and bad, that help shape who you are, but how you approach life allows you to determine how you treat people moving forward. And we see that every [day]. So that's usually one of the questions, because I think back and I show respect to those folks that really helped shape me. Fresh out of college, had landed a job working at a company, and I wanted to work in sales. And I was, it was a small family-owned business, and most of the family was the salespeople. And they were like, ah, no, you know, my brothers and sisters, they're the ones that do the sales. But I was so desperate to get into sales, I decided I'm going to leave. And I left the company, and I took a part-time job during the holidays, working in retail, and figured I could do this for three months, get through November, December, early January, and then keep my resume out there, back in the early 80s. And a gentleman came in, and he handed me, you know, this beautiful, you know, high-end leather briefcase that he loved. And he says, hey, this [clasp] broke. Can you get this taken care of? I said, absolutely. And, you know, I took care of it. I called him, gave him an update, provided him with some details, told him when he would be back, confirmed his arrival, and I was just providing customer service. He came in to pick up the bag, and he said, you know, I want to tell you, you've done an excellent job really managing this case, is important to me, but thank you. Cause I like your skill set so much. I'm the national sales director over at a pharmaceutical company. I'd like you to come in, file an application, and interview. So I got this crazy concept about a traveling remote salesperson that fills territories for me around the country, because our contracts require us to always be at 85 to 90%. So whenever someone resigns or we terminate someone, I have to have a body in there in three days. Wow. And you're young, single, I can put you in this spot. Just do what you do in these spots, and I'll train you with everything else. And that gentleman, you know, took about three months, but he landed that opportunity. And that's what I did. I traveled around the country. That was my first sales job. And he became my mentor, and he shared with me, I thought it was a very key phrase that has helped me navigate throughout life. And his response was, it's not what someone does to you or for you, it's why. Yes. He says, understand the why. He says, because then that helps you navigate that situation. So if someone gives you an opportunity, well, you're like, I got a job, but why did they trust you? Or what are they trying to accomplish? Because then you can align with their mission. And so I've carried that lesson through life. And this gentleman, Ed Haynes, you know, is now retired, and lived, you know, 40-plus years working as an executive for a pharmaceutical company, still was probably the most impressionable person in my life, because he taught me life lessons. He took over for my father, you know, like when you're an adult, my dad wasn't in the same industry. He filled in all those words, those kind of sage things you need to say to make sure I could build a career. So that's why I like that question. You know, what are the things that shaped you? And that was definitely an individual, and the types of phrases and words that shaped how I look at the world today.

Jon McLachlan

Wow. No, that's really special. A very special story, actually. And I love how I see all your philanthropic work, and you're passing it forward too.

Biff Clark

So I enjoy that. You got to give back. And I really enjoy creating opportunities for folks that have a different life than I had as a child. And there's something I can relate to, but if I can in some way expose them to the new horizon, then, you know, their perspectives will never return to its original dimension.

Jon McLachlan

Exactly. Continuously learning and growing, and sharing it, and making the world a better place, being the change that we want to see in the world.

Biff Clark

That's huge. I agree. We thrive to be difference makers, right?

Jon McLachlan

We do. We have that drive. I don't know, deep down somewhere inside. It's, it's almost like a hunger. We see what could be, and we strive for it.

Biff Clark

I agree. I agree. It's not easy, though.

Jon McLachlan

No, it's not easy, but that's okay. You know what? Small victories are still victories. You just add them together, and the change is, it's moving in the right direction.

Biff Clark

I agree. This has been awesome.

Jon McLachlan

Thank you so much, [Biff], to hear your entrepreneurial story with Coefficient Technologies. And I would love to have you on again at some point in the future.

Biff Clark

Oh, absolutely. You and I have so many things we can talk about.

Jon McLachlan

Yeah, maybe we could do an entire show on motorcycles or something.

Biff Clark

Yeah, I'm sure we can. I'm sure we can.

Jon McLachlan

Or even giving back to the community, too. I would love to talk about minority entrepreneur. No, it was an absolute pleasure. And thank you so much, Biff, again. And thank you for everyone that has tuned in and did this episode of the Security Podcast in Silicon Valley.

Biff Clark

Yeah, thank you. All right, Jon. Take care.

FAQ

Questions this episode answers

Who is Biff Clark?
On this March 2022 episode, Jon introduced Biff Clark as co-founder of Coefficient Technologies, around since 2004, and chair of the board at the Hidden Genius Project. Biff came to security from a career in pharmaceutical sales.
What does Coefficient Technologies do?
Biff described a cybersecurity firm that resells security tools, runs managed security services by subscription and consults, with the goal of helping customers understand their own security.
What is revenue retention in security?
Biff's phrase for security that protects the revenue a business has already earned. Without experts nearby, a ransomware attack can take it away in less than three days.
What is a CISO on demand?
A managed provider fills the security leadership gap for a company that can't yet justify a salaried CISO on staff, until it's ready to hire.
Why scope an environment before signing a contract?
Biff's worst day began as a scoping request that became a contract. The network had no service contracts, staff walked off, and consultants ate the budget.
Why are managed service providers a security risk?
Biff called a provider one choke point: a criminal who gets in can take down companies all around the country. Wikipedia describes the Kaseya VSA attack of July 2, 2021, which hit about 60 providers and their customers.
How will cyber insurance change, according to Biff?
Biff expected a level set: tiers by company size, business or enterprise editions of tools, and requirements for training, backups, redundancy and disaster recovery plans.
What happened after the episode?
LinkedIn lists Biff as co-owner of Coefficient Technologies, which does business as Surveillent Cyber, and as past board chair and emeritus board member of the Hidden Genius Project.
New episodes every other Tuesday

Got a story like this one?

We're always looking for practitioners who've been in the room when it mattered.