Tag: authentication

VeriSign – Meet Your Colleague

Portfolio - VeriSign, Keynotes (Meet Gabriel Dusil, '05, title), Building Trust From the Inside Out

Name:  Gabriel Dusil
Title:  Director Partnerships, EMEA
Division: VeriSign Security Services
Location:  Europe, Middle East, Africa
Interview:  30th November, 2004

Talk about your history at VeriSign.

I joined VeriSign back in August 2000 as the Marketing Director for EMEA. I was recruited from Motorola, where I was managing a small team of marketers. When I first joined VeriSign, EMEA affiliate expansion was in the middle of all its glory, but I needed to adjust to the change in corporate culture—from Motorola to what was at the time a “medium-sized U.S. corporation—and to the one-man-band aspect of my new role. VeriSign had recently bought Network Solutions earlier that year, and was busy with that integration. It was an exciting time. I soon learned that I was the first marketing hire outside of the U.S., and overall, the sixth employee in EMEA. So the position had good exposure within the organization, and a great opportunity for me to prove my capabilities. I also learned that I was joining a team of people who were the best in the industry. Working among the best of the best helped me raise my own bar.

With around 800 employees now outside of the U.S., it is now easy to forget that five years ago we were truly a European start-up. It has been amazing to see our growth over the years.

What’s a typical day at work like?

There is one common theme to my work day at VeriSign – each one is different. For my first three years, it was about delivering marketing programs and supporting our affiliate partners across the region. In the past year and a half I have taken on a sales position which has led me to pipeline management, customer expectation management, and overseeing the sales life-cycle to closure. I find that an integral part of this process often involves building and maintaining the customer’s confidence in buying from VeriSign, and ensuring a successful installation. In a recent Unified Authentication Services (UAS) deal, where we were offering two factor authentication services, we had no less than 25 critical issues to solve. And any one of those issues could have collapsed the deal. A team effort is the only way to ensure all these issues are solved, and this is exactly how we were successful in closing the deal – and today the customer is extremely happy with our performance.  In fact the prospect was our first retail bank installation in the world – Alpha Bank, Greece, via our partner Adacom.

I spend about 50% of my time on the road. My days start at 9:00 and often finish as late as 10 p.m. My curse is that I can’t go to bed without clearing my email inbox!. Time zones play an important role in our daily activities.  I speak to the Middle East and Eastern Europe during the morning which is 2-4 hours ahead of the U.K., then start discussions with the U.S. East coast by mid- afternoon, and talk to Mountain View, California in the evenings (8 hours behind the UK). Many of us in the European organization say that we “live VeriSign”. If you love your job then hard work is balanced by satisfaction.

What do you like the most about working at VeriSign?

As a self-proclaimed tech geek, one enjoyable aspect of my role at VeriSign is learning about IT, the Internet, and the security industry. Whether it’s sales or marketing, I have found that both disciplines give me the freedom to learn more about technology, in as much detail as my aging mind allows. I feel that VeriSign is on the leading edge of securing critical infrastructure. So I can experience a multi-faceted approach to learning new areas of our portfolio–whether it’s Anti-Phishing, cloud based authentication services, managed security services (MSS), or any new and exciting service coming down the line from our product managers.
From the sales perspective, I like the discovery phase of learning the customer’s requirements, and how they are positioning their infrastructures to the future needs of their target market. It seems to be more of an art than a science.  For example, listening to what is not said is a much harder challenge than concentrating on what was said. The devil is always in the details, and learning these nuances has also been fun. With my marketing hat on, comparing this street-level data to what the analysts are saying about the market is a great comparison. The markets where VeriSign plays allows for an incredible scope of learning, to as much detail as I choose.

What does “One VeriSign” mean to you?

“One VeriSign” for me is about people, and how we develop relationships within the company, departmentally, geographically, or by product portfolio. Of course, we have a “One VeriSign” corporate vision, but it’s the trust relationships which we develop at the street level where the vision is realized.

What are some of your hobbies, volunteer efforts, & outside interests?

Not to shock anyone, but I suppose one of my hobbies is fitness (trigger for Souheil Badran to laugh out loud). I call it a “war with my body” – which some would agree is something I am losing. I believe that balancing the mind and the body are important to one’s health and happiness, and, for me, daily exercise counter-weights the daily intellectual challenges of work.
Much of my recreation is now spent as a parent. Watching my two boys—eight months old and three and a half years old—grow and develop.  My children have been a life changing experience, as any parent can attest. I suppose the extent of my volunteer efforts is in babysitting my kids so that my wife can go out with her friends.

Tell us one thing about yourself that your colleagues wouldn’t have guessed!

I suppose a shocker to most people is that I am a black belt in Shotokan Karate ((???). Although I have not been  training for the past 10 years, I still release my pent-up energy on a punching bag twice per week at the local gym — another aspect of balancing my mind and body. 

About the Interviewee

Gabriel Dusil is VeriSign’s Marketing Director responsible for the Europe, Middle East and African region. Mr. Dusil’s role includes the management of Channel and Direct Marketing, as well as Marketing Communications. His responsibilities also include the development of product strategies and market positioning throughout the emerging markets.

Prior to VeriSign, Mr. Dusil had been with Motorola for six years, as their EMEA Marketing Director for its Internet and Networking Group.  He has over 10 years of experience in the communications industry, and over nine years of international marketing experience. Mr. Dusil has a degree in Engineering Physics from the University of McMaster, in Canada.

VeriSign – Milestones for Sustaining eBusiness Growth

Portfolio - VeriSign, Milestones for Sustaining eBusiness Growth (title)

Adapting to Change

As a new year unfolds, we continue to observe continued growth in eBusiness opportunities.  Even as the Internet expansion trend overcomes slumps in world economy, and defies political and religious strife, the momentum generated so far is force too big to ignore.  Regardless, continued growth is faced with tangible milestones if this trend is to sustain itself throughout the decade.

  • Achieving End-to-end Connectivity – Although the internet may be considered “end-to-end”, many companies continue to struggle with connectivity within their own enterprise.  Let alone achieving the same goals externally with their suppliers, partners, and customers.  Despite the false start of Supply Chain Management initiatives (SCM), and struggles to achieve Business Process Re-automation (BPR) in the late 90’s,.such solutions still offer promise.  Although this promise has somewhat morphed into up-in-coming business solutions such as Web Services.
  • Implementing Change in Corporate Culture – In moving to new business models, companies need to instill fundamental changes to how employees conduct their daily activities.  New processes and procedures need to integrate into corporate culture, in eBusiness applications, as well as the eSecurity protecting this infrastructure.  This is undoubtedly a significant challenge for large enterprises, than for smaller, more agile businesses.  The migration of an enterprise to online commerce, or the implementation of a modern security infrastructure such as managed security services, or Identity Management.  The effort for management to implement such new solutions is a mere 20% technical verses 80% organizational.
  • Implementing Enterprise-wide Identity Management – A continued expansion of channels relationships now dictates a more aggressive approach to identifying the individuals we conduct our daily business.  Identity management has made it’s mark on a national and global scale as governments are evolving to new border control security, in efforts to flank terrorism.  Likewise, the corporate industry continues to struggle with an ever increasing sophistication of fraud methods and hacker attacks.  Individual enterprises need to establish trust in authentication (who you are) and authorization (what I will allow you to do).  For these reasons, identity is fundamental to an ever increasing importance of establishing trust.  This is the ultimate drivers;  Trust in knowing who is transacting with you, and trusting who you are allowing into your confidential data.  Especially in the modern age of business relations between people which have never met in person, and may never meet face to face in their lifetime, for that matter.  Trust is fundamental to eBusiness growth.

Government Connectivity

If the nineties were about bringing enterprises online, then this decade is surely dedicated to Government achieving the same.

In Germany for instance, the public sector is driving the “BundOnline 2005” initiative which is targeted to offering 24×7 eGovernment services to citizens.  The German government is set to invest € 1,65 billion until 2005 in order to migrate online its 400 public services. This offers potential for online payment, electronic form signing and data security through digital signature.  200,000 German employees of ministries and federal agencies will be supplied with smartcards and readers by 2005.  A quarter of the 400 targeted services — including, for example, bidding for federal procurement contracts – are expected to utilize electronic signatures.

European countries are working towards similar initiatives by the same time frame, of which many countries; France, Greece, Sweden, Denmark & Netherlands have already begun.  The need to offer nation-wide online services in G2B (government to business), G2C (government to citizen), and G2E (government to employee) are driving towards the use of eSecurity for authentication, encryption, trust and non-repudiation.  Initial adoption of online services has begun in services such online Value Added Tax (VAT) reporting for businesses to government.  A classic win-win approach to online G2B, as it creates cost and time efficiency to both the enterprise and the government.  In addition, on a regional scale, local municipality portals are being created for the purposes of allowing citizens 24×7 access to government services, as well as the use of identity cards for access to various community services .  Examples to date have revolved around online form submissions for social services, income tax, land registration, and other legal documentation. It sure beats standing in line for 4 hours, at your local city hall.

Aggressive internet initiatives are forthcoming in the healthcare sectors as well.  Online medical services are being driven by several reasons:

  • Privacy of patient records required to meet legislative requirements, and well as European Union (EU) data protection expectations
  • Ensuring the integrity of online prescriptions, validated by a digital signature, authenticating the identity of the patient’s doctor.
  • Electronic workflow in the communication of patient records via the internet, as well as transfer of prescriptions online.  This also applies to the pharmaceuticals industry, interested in using eWorkflow solutions and identity management solutions to streamline their time to market for new drugs.
  • End-to-End Connectivity – Online connectivity of hospitals, doctors, pharmacies, and patients continues to be the vision moving forward.
  • New services capabilities enabling faster response times and enhancing communication methods through mobile devices is considered longer term milestones.

Such eHealthcare initiatives may be monumental but not insurmountable.  Comparing our three eBusiness milestones, end-to-end connectivity may be the least of our worries, through well-established co-ordination between the public and private sector.  Establishing identity and privacy are clearly fundamental to healthcare projects, and various legislative initiatives in both the USA and Europe have stepped up to mandate such requirements.  Cultural acceptance will be incrementally achievable through a solid communications strategy, and migration plan.  Ultimately, the ongoing sophistication of internet usage will be the catalyst in modernizing an existing healthcare infrastructure.  But time-scales for such migration should be realistic.

Both the public and private sectors are driving towards change and modernization. Although it is fair to say that the private sector is ahead of government initiatives by at least five years.

Consumers and the Enterprise

Business drivers are somewhat different for the corporate market.  Whereby the private sector is focuses on market share, profitability, and channel expansion.  The public sector mandates revolve around service quality, efficiency, and legislation compliance.  Although governments are not motivated by profit, there is a significant amount accountability and measurement to ensuring the success of G2B, G2E, or G2C initiatives.

The Private sector accelerated forward in eBusiness initiatives throughout the nineties, widening the gap of sophisticated compared to government initiatives at that time.  Even today Business to Business (B2B) eMarketplaces continue to fuel success in selected markets, whereby Business to Consumer (B2C) is still in its infancy with respect to revenue and profit expectations.  This is partially attributed to the lack of technical sophistication of online consumers today (i.e. the challenges of educating the greater public to the overly complex usage requirements of computers and the internet).  In many societies these struggles continue, but times are changing, and mass-markets have proven resilient in its ability to adapt.  This is evidenced by the estimated one billion online users expected by the year 2006, from the 600 million users today.  Modern society continues to adjust to the Internet culture, but possibly not in the same time scales we all desire.

Planning Next Steps

The gap between eSecurity threats and corresponding countermeasures continues to grow.  Attacker continue to find new holes in our networks and applications, and we just can’t seem to plug them fast enough.  This is undoubtedly a red flag, and my wishful thinking hopes that such a trend not sustainable.  As eSecurity is at the forefront of the Internet’s concerns, we need to evolve our expectations from taking a defensive role to security threats (reactive approach), to offensive measures (proactive) in order to prevent attacks before they happen.  Security prevention is a distant goal for many corporations which continue the philosophy of investing in security only after an attack.  But when the damage is done, it may possibly be irreversible. This leads to loss of revenue (which in some industries is measured in seconds of downtime), loss of time (to recover from the attack), and loss of reputation (it takes years to build a brand, but only days have it crash down on you).

An enterprise trying to manage all threats themselves, is simply unrealistic.  It’s the classic man-in-the-middle attack – You need to protect themselves from all known vulnerabilities, whereas the attacker only needs to know the one vulnerability which compromises your fortress.

  • Where do we find the expertise to block all threats?
  • Where do you find the time to ensure 24×7 protection?
  • How does the enterprise source the adequate funds to protect ourselves?

Both the public and private sectors should consider security solutions outside of their fortress to find these answers. For instance, Managed Security Services (MSS), offers a central Security Operation Center (SOC) of experts to assess vulnerabilities, threats and potential solutions.  Outsourcing eSecurity ensures a significantly lower total cost of ownership (TCO) – As much as 40%-60% savings compared to creating a department to achieve the same level of 24×7 protection.  But more importantly, CTO’s can sleep at night knowing that their network and applications are protected by the best level of defense.

As security threats meet us both inside and outside the enterprise, identity management and access control become essential elements to eSecurity strategies.  Whether it be access to internets, extranet & intranet environments, or access to critical data via your mobile phone, PDA, laptop, wireless LAN, or smartcard. Or enabling access connectivity for customers, employees, suppliers, and partners.  Customers will be challenged to choose solutions which provide identity management and access control to meet both present and future needs.  Managing privacy verses security, while maintaining a reasonable low cost of ownership (COO) will be an influencer.  Connecting disparate IT platforms,  directories, applications, and back end systems will be deciding factors.  The decision to consolidate systems such as directories and applications becomes strategic to the organization.

History has taught us that IT implementations which tear out the old, to bring in the new, just isn’t cost justified nor realistic.  For these reasons the approach to implementing new eBusiness initiatives involves an incremental migration path, and not a replacement strategy.  With today’s tighter IT budgets, investment protection for existing assets is essential.  For example, access control has evolved from a Single Sign On (SSO) approach into what is now referred to as “reduced sign-on (RSO)”.  SSO was simply impractical and unrealistic.

A focus on phased implementations is important. Especially as it pertains to end-to-end connectivity.  “Start Small, Think Big” is the latest mantra.  Consider this approach to an eBusiness deployment:

  • Understand and document your business pains and your strategy to solving them.  Treating your IT infrastructure as strategic, and taking an end-to-end view will lead to greater eBusiness success
  • Establish the right leadership, and cross departmental teams.  Understand where your organization cultural dynamics are today, and how it will affect your deployment.  Ensure that departmental owners are accountable for driving change.
  • Design your architecture and transition strategy and document in an RFP.  Concentrate on achieving a solid foundation, through internal connectivity between heterogeneous systems.  Then look externally to connecting, suppliers, partners, and customers.
  • Project plan into multiple phases.  Identify incremental milestones.  Select a list of target suppliers & short list though your requirements.  Choose your suppliers and Implement in phases
  • Treat your project as organic – constantly changing and evolving to the evolving changes in IT and demands of the market.

Achieving End-to-end Connectivity, Organizational Culture, and Identity Management, is driven by leadership.  Change is always achievable, but the real the questions is “when” rather than “if” it will occur.  Leadership will be a deciding factor towards such transformation, and help generate cultural harmony to evolving eBusiness approaches.

About the Author

Gabriel Dusil is VeriSign’s Marketing Director responsible for the Europe, Middle East and African region. Mr. Dusil’s role includes the management of Channel and Direct Marketing, as well as Marketing Communications. His responsibilities also include the development of product strategies and market positioning throughout the emerging markets.

Prior to VeriSign, Mr. Dusil had been with Motorola for six years, as their EMEA Marketing Director for its Internet and Networking Group.  He has over 10 years of experience in the communications industry, and over nine years of international marketing experience. Mr. Dusil has a degree in Engineering Physics from the University of McMaster, in Canada.