October is Cybersecurity Awareness Month \u2014 but for Sally Richardson and Mozilla\u2019s Protection, Experimentation, and Identity team, safety and privacy are top-of-mind all year long. Below, Sally shares what brought her to Mozilla after stints at Microsoft and Facebook, her approach to leadership, and what her team is doing to make the internet more secure for some of the most vulnerable voices online.\u00a0<\/i><\/p>\nFirst, tell us about your team and the work they do.<\/b><\/h2>\n
Our team is called PXI, which stands for \u201cprotection, experimentation, and identity.\u201d I have a team of product managers and UX, which includes designers, researchers, and content strategists. Everything we do is focused on safety and security, but most of our work falls in two categories. The first is consumer-facing products, including VPN<\/a>, Relay<\/a>, and Monitor<\/a>. The customer segment we have decided to focus on are people who are vulnerable to exposure; we take what we call an \u201cextreme user design\u201d approach, which means we build for the edge cases. In terms of security, that might be an abortion provider, a therapist, or an activist \u2014 someone in the public eye whose data may be sensitive, and who because of that is more likely to experience online abuse, harassment, and violence. We design for those users because their voices are important, and we don\u2019t want them to withdraw from the internet, and because a product that works for them will also scale to the rest of the population.<\/p>\n The other side of PXI\u2019s portfolio is ecosystem support, which includes infrastructure products like accounts<\/a>, subscriptions, and Nimbus<\/a>, our experimentations platform. Ecosystem support is like the connective tissue of Mozilla\u2014it supports our consumer-facing products and the products we use internally, as well.<\/p>\n <\/p>\n I didn\u2019t start out in tech; I worked in consumer packaged goods at Campbell\u2019s and Sara Lee. I got to take executives through strategy exercises like wargaming and scenario planning, which was really fun and an education for me. Because the products are perishable and the margins are small, consumer packaged goods companies are incredibly data-driven, and I think learning in that environment shaped my career. My first job in tech was at Microsoft, and I remember being shocked at the lack of data. The margins were high \u2014 especially in 2011 \u2014 and the market wasn\u2019t crowded, so they didn\u2019t need to be as methodical. But it\u2019s always valuable to think about who you\u2019re building for, the value a product will offer, and how it will do in the market.<\/p>\n I realized this was a place where I could combine my skills and experience with the values I believe in \u2014 outside of work, I serve on the boards of Pro-Choice Washington and the Northwest African American Museum. Protecting vulnerable populations is important to me. Mozilla is also unique in that we\u2019re not publicly owned, which reduces the risk of making trade-offs for short-term financial reasons. Plus, we have a track record of not only building responsible technology but also working toward legislation that supports it and allows people to operate with more rights, in the U.S. and around the world. Mozilla\u2019s fourth principle<\/a>, which says online security and privacy is fundamental\u2014we really do live that value. It\u2019s the reason we\u2019re all here.<\/p>\n <\/p>\n I believe my role is to ensure my team (and the organization we work with) has clarity on our direction, strategy, and goals and that they are set up for success. But I also try to give them the space to lead. It\u2019s important for [product managers] to make their own decisions and run their roadmaps and their teams on their own. They set the vision. They determine what success looks like and how they\u2019re going to measure it.<\/p>\n When someone does ask for help or guidance, we sometimes do what we call product reviews\u2014which are only required pre-launch, but can happen at any other time, too. A member of the team can use a review to get signal guidance, a gut check, whatever they need. The key is it\u2019s cross-functional; I\u2019m there, but we\u2019ll also bring in someone from data science or marketing or research to share their expertise.<\/p>\n <\/p>\n We participate in events like the summit because that audience is our audience. Whether it\u2019s hacking, doxxing, or deep fakes, identity can be used to hurt people online, and that\u2019s facilitated by both the regulatory environment we\u2019re in and the way we freely share information with technology. So to keep a diverse set of voices online, we need to equip people. We don\u2019t want to scare them into using our products. It\u2019s not about fear. But we do want to be honest about the current climate and the information that\u2019s vulnerable, and explain how they can protect it. We talk about why it\u2019s important to use a password manager, when you need a VPN, when you should turn on private browsing mode. We don\u2019t just want to tell people what to worry about; we want to offer them actual solutions.<\/p>\n And we learn from them, too. During the discussion at the end of our NNEDV presentation, the audience started sharing tips \u2014 like using a VPN to operate out of California when you\u2019re in Texas, so your data\u2019s more protected. It\u2019s unfortunate that vulnerable people have to become tech experts, but it\u2019s incredibly rewarding to see them figuring out how to use our products in ways that give them more rights and freedom.<\/p>\n <\/p>\n What\u2019s challenging is the stakes\u2014we\u2019re building products that deal with serious issues, and this is not a space where you want to mess up. Our team is also immersed in the experiences of victims, and a good product builder is empathetic. Sometimes they experience secondary trauma. Plus as you learn more about these problems, they feel bigger, not smaller. So there\u2019s real risk of feeling helpless, like there\u2019s no way we can solve this. But I genuinely believe that if we don\u2019t, no one will.<\/p>\n Everyone on the team has access to mental health services through Mozilla, as well as protective services, because unfortunately when you work in this space, you can become a target yourself. We also talk about the intensity of this work and we build it into our product development cycle\u2014if it\u2019s going to be a hard week, we give ourselves some grace. Tylea Richard<\/a>, the product manager who leads Security and Privacy work, has very high EQ and really understands the emotional aspects of building products. If her team is feeling overwhelmed, she can pinpoint that and say, \u201cThis problem feels big, but that\u2019s okay. Let\u2019s lean on our practices and make sure we stay healthy.\u201d<\/p>\n I think it\u2019s also important that the team sets their own milestones and pace. We hold each other accountable, but it\u2019s not about shipping something right now. It\u2019s about shipping the right thing.<\/p>\n <\/p>\n Our team has been through lots of change this year in terms of both processes and portfolio, bringing on the ecosystem side. I\u2019m excited for us to continue building a cohesive culture, where we\u2019re one team rather than Protections over here and ecosystem support over there. I\u2019m also excited to see the pride people have in the work that we\u2019re doing. I think we\u2019re on a path where the team feels bought-in rather than just fulfilling someone else\u2019s vision.<\/p>\n In terms of products, I\u2019m excited for us to move more toward actively fixing problems for customers. With Monitor<\/a>, for example, we want to eventually not only tell you your data has been breached, but determine whether it\u2019s been sold by data brokers\u2014and if so, help you remove it. Most people don\u2019t think much about identity or privacy until there\u2019s a problem, and we want to offer a solution for them in that moment.<\/p>\n And at the Mozilla level, I\u2019m excited to see us work more collaboratively across the company. Steve<\/a> has been very intentional about building the leadership team to break down silos, and we\u2019re thinking now in terms of not only Firefox, but all of Mozilla, which is allowing us to bring more diverse products to market. I think this is a moment where we\u2019re recognizing our shared power, and that\u2019s creating more shared success.<\/p>\nWhat did you do before Mozilla, and why did you join?<\/b><\/h2>\n
How do you approach your job as a leader?<\/b><\/h2>\n
You recently presented at the annual tech summit for the <\/b>National Network to End Domestic Violence<\/b><\/a>. Tell us more about that.<\/b><\/h2>\n
What\u2019s challenging about working in this space, and how do you and your team address it?<\/b><\/h2>\n
When you think about the future of your work, what\u2019s most exciting right now?<\/b><\/h2>\n