From: john.velissarios@uk.pwcglobal.com Sent: Thursday, June 14, 2001 9:27 AM To: xkms-ws-submit@w3.org Cc: joe_pato@hp.com; reagle@w3.org Subject: W3C Seminar - Position Paper Categories: pato-at Memo from John Velissarios of PricewaterhouseCoopers -------------------- Start of message text -------------------- Hello, Here is the position paper for PwC/beTRUSTed Experience in the areas covered by the workshop scope: The experiences that I would bring to the table at this workshop would be practical experience in the development of XML security in applications such as financial exchange messaging and in foreign currency exchange environments. I am personally involved in these initiatives and serve as a security advisor to the groups and am actively involved in workshops, conference calls, etc. With practical experience as to how these are applied in real life situations, I can provide feedback as to which approaches are practically feasible, how it has been done in these environments, etc. What are the needs of your company/organisation in the field of Web/W3C QA: PwC has one of the largest security consulting practices in the world with over 800 Technology Risk practitioners and an e-security venture named beTRUSTed, which a Trusted Third Party offering. We are actively involved in many XML industry specific initiatives and as such remain active in the field by participating as much as we can in such initiatives. W3C initiatives are seen as particularly important as they apply across a number of industry verticals and affect all other initiatives in the XML security space. It is particularly important that we understand developments in this area in order to assist our clients and other organisations that we work with. Many PwC / beTRUSTed staff are involved in security standards bodies either as active members or advisors. We believe that with participation in initiatives such as this we can keep ourselves, our customers and the people we liaise with informed of the various initiatives and developments in order to ensure that resources are dedicated to the right tasks and that standards are leveraged appropriately in the development of overall solutions. We also need to understand where the industry is headed as we are developing solutions and services in the XML security area and need to be kept abreast of developments and influence them when we feel it is necessary. What are your general expectations on the final outputs of the workshop? My general expectations as the final outputs of the workshop is to consolidate direction as to where the working group is headed, understand timescales for deliverables and to discuss current developments. I also expect to openly discuss with peers their experiences in this area, what message we should be taking back and how our organisations can be more actively involved. I also expect to walk out with a much better understanding of the process involved in developing such standards as it pertains to the W3C. What are your potential contributions to the discussion, related ideas, and suggested solutions? My potential contributions would be around the areas of my previous involvement in other working groups which are focused specifically on industry verticals (i.e. financial information exchange, foreign currency exchange) and their application of the various security and XML standards to their particular domain. I also bring numerous years of applied cryptography and security experience to the table with real life requirements, issues and the solutions. A short bio: John Velissarios is a Senior Manager in the London practice of PricewaterhouseCoopers. He is the EMEA Leader of the PwC Cryptographic Centre of Excellence, co-editor of the PwC CCE Journal and is a Senior Technical Architect in the Strategy & Business Development Group at beTRUSTEd, PwC's Trusted Third Party offering. John has an undergraduate degree in Computer Science and a graduate degree in Computer Science with a specialisation in cryptography. He is frequently asked to speak at conferences and security events. --------------------- End of message text -------------------- The principal place of business of PricewaterhouseCoopers and its associate partnerships is 1 Embankment Place, London WC2N 6NN where lists of the partners' names are available for inspection. All partners in the associate partnerships are authorised to conduct business as agents of, and all contracts for services to clients are with, PricewaterhouseCoopers. The UK firm of PricewaterhouseCoopers is authorised by the Institute of Chartered Accountants in England and Wales to carry on investment business. PricewaterhouseCoopers is a member of the world-wide PricewaterhouseCoopers organisation. ---------------------------------------------------------------- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.