Ann Johnson, Corporate Vice President, Business Development, Security, Compliance & Identity at Microsoft, talks with cybersecurity thought leaders and influential industry experts about the trends shaping the cyber landscape and what should be top-of-mind for the C-suite and other key decision makers. Ann and her guests explore the risk and promise of tools and systems powered by AI, IoT, machine learning, and other emerging technology, as well as the impact on how humans work, communicate, consume information, and live in this era of digital transformation. Please note, the opinions expressed by guests on this podcast are their own and are not endorsed by, nor do they necessarily reflect opinions of, Microsoft or Ann Johnson.
President and CEO of the Cyber Threat Alliance, Michael Daniel, joins Ann on this week's episode of Afternoon Cyber Tea. Cyber Threat Alliance is an organization focused on cyber intelligence sharing across the digital ecosystem. Michael has been the President and CEO of the Alliance since early 2017 and also served as the U. S. Cybersecurity Coordinator under the Obama administration. He is a leading expert on ransomware and the disruption of cybercrime and is a leader in the World Economic Forum Partnership Against Cybercrime. Michael and Ann discuss the sophistication of hackers today, persistent threats that have remained over the last several years, and what impact ransomware is having on organizations across the globe. Resources: View Michael Daniel on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Microsoft Security EVP Charlie Bell joins Ann on this week's episode of Afternoon Cyber Tea. Charlie has over four decades in the tech industry, from developing space shuttle software to leading the creation of Amazon Web Services' decentralized engineering system and now leading Microsoft’s effort to make the digital world safe and secure for everyone on the planet. Ann and Charlie discuss AI, the Security ecosystem, and why he thinks speed and acceleration of problem-solving are so relevant today. Resources: View Charlie Bell on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
This week on Afternoon Cyber Tea, Ann takes a moment to go back and listen to a selection of top insights and advice from season six guests. Join us as we recap some of our favorite discussions–from trends to capital and investment to innovation and more. Make sure you continue to follow the show, as it will make its return on August 8th, 2023. We look forward to you joining us for Season Seven.
Resources: View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Charles Blauner, operating partner and CISO-in-residence at company-building venture group Team8, joins Ann on this week's episode of Afternoon Cyber Tea. Charles is an internationally recognized expert on cyber resiliency, information security risk management, and data privacy. He's had an incredible and prominent career in Security, including being a CISO and Information Security leader at companies like J.P. Morgan, Deutsche Bank, and Citi. Ann and Charles discuss the evolution of the CISO role, the qualities they believe all CISOs need to excel, and what the role of CISO will look like 5-10 years from now.
In This Episode You Will Learn:
A brief history and evolution of the CISO role
Qualities and skillsets all CISOs need to excel today
Advice for someone who is newly stepping into the role of CISO
Some Questions We Ask:
What were some of the critical paradigm shifts during the evolution of the CISO role?
What do you think makes a great CISO in today's digital world?
What advice do you have for CISOs making that transition to a key business partner?
Resources: View Charles Blauner on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Kirsten Davies, chief information security officer at Unilever, joins Ann on this week's episode of Afternoon Cyber Tea. Kirsten is a recognized thought leader, serves on the Board of Governors for the New York Academy of Sciences, and is a Mentor for several non-profits and women's initiatives. The two discuss burnout and stress-related mental-health concerns in cyber, which are, unfortunately, on the rise. Now, security and business leaders alike are concerned that the pressure and responsibility of cyber roles–combined with the rise in cyber-attacks, reduction in resourcing, and other factors–is making cyber a less attractive career path. Ann and Kirsten discuss the importance of personal resilience, factors contributing to the cyber talent shortage, and strategies that leaders can adopt to improve their people's working conditions and well-being. In This Episode You Will Learn:
Some of the unknown challenges that CISOs and cyber defenders are facing today
What can and should change to make cyber roles and work environments better
What organizations are addressing mental health and well-being best
Some Questions We Ask:
What are some of the factors that may impact our personal resilience?
How can future and current CEOs look to retain quality CISO and cyber defender talent?
What are some of the contributing factors to the cyber talent shortage?
Resources: Visit Kirsten Davies on Twitter View Kirsten Davies on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Dr. Ryan Louie, a board-certified psychiatrist focusing on the mental health impact of cybersecurity, joins Ann on this week's episode of Afternoon Cyber Tea. The two discuss the growing issue of mental illness among cybersecurity professionals, the link between psychiatry and security, some of the problems commonly seen, and which aspects of cybersecurity contribute to them.
Disclaimer: The content and views expressed do not constitute medical advice and are not a substitute for professional medical advice, diagnosis, or treatment. If you need help, please contact your medical provider.
In This Episode You Will Learn:
What may be contributing to the degrading mental health of cyber defenders
How attackers might clinically exploit the mental health of those in cyber
General wellbeing practices and coping methods
Some Questions We Ask:
When did Dr. Louie’s interest in the mental health of cyber security begin, and why?
Are cyber mental challenges magnified or amplified more than in the past?
What can leaders do to support the mental health and well-being of their teams?
Resources: Article: “The Psychiatry of Entrepreneurship” by Dr. Ryan Louie Dr. Ryan Louie - Psybersecurity Clinic website Visit Dr. Ryan Louie on Twitter View Ryan Louie on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
AJ Yawn, Co-Founder and CEO at ByteChek, and a Founding Board Member of the National Association of Black Compliance and Risk Management Professionals, joins Ann this week on Afternoon Cyber Tea to unpack this issue. With more than 700,000 open cybersecurity jobs in the US alone, the cyber industry faces a critical talent shortage. Yet, with this opportunity, many still find it challenging to break into the industry. Ann and AJ discuss the importance of sourcing from broader pools of talent, what skills business leaders should really be looking for, programs and communities that people looking to get into cyber security should be aware of, and how AJ thinks we can drive awareness of the wide variety of roles available in the industry.
In This Episode You Will Learn:
Specific qualities and mindsets that lead to a successful career in cyber
Why it's essential to attract more diverse talent
How someone early in their career can market themselves to potential employers
Some Questions We Ask:
What specific courses or certifications are essential for people to be thinking about?
How can the education system prepare people for careers in cyber?
Why have employers had such a high bar of entry into their cyber programs?
Resources: View AJ Yawn on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Sounil Yu, Chief Information Security Officer and Head of Research at JupiterOne, joins Ann on this week's episode of Afternoon Cyber Tea. Ann and Sounil discuss the importance and evolution of cyber resilience and what organizations can do today to build resilience for the future. Sounil is a security innovator with over 30 years of experience creating, breaking, and fixing computer and network systems. He is the creator of the Cyber Defense Matrix and the DIE Resiliency Framework, teaches security as an Adjunct Professor, co-chairs Art into Science: A Conference on Defense, and advises many startups. In This Episode You Will Learn:
Why we need a new approach to cyber resilience
Who is responsible for cyber resiliency and who should be involved
How organizations can build the agility and ability to stay ahead of cybercriminal
Some Questions We Ask:
What is the responsibility and relationship between CISOs, and board members?
Why is advocating for a new approach to resiliency so important?
What investments should leaders be making to improve their cyber resiliency?
Resources: View Sounil Yu on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Discover and follow other Microsoft podcasts at microsoft.com/podcasts
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Michal Braverman-Blumenstyk, Chief Technology Officer for Microsoft Security, top Israeli tech leader, and one of the world's highest-ranking women in the cybersecurity industry joins Ann on this week's episode of Afternoon Cyber Tea. Michal and Ann discuss what is keeping cyber leaders up at night, why Israel is a worldwide leader in cybersecurity technology, and what investments Microsoft is making to create a more safe and secure future for all.
In This Episode You Will Learn:
A brief history of Israeli cyber innovation
The Microsoft Security CTO perspective on top trends and technologies
The importance of diversity & inclusion in the cybersecurity industry
Some Questions We Ask:
What are some of your favorite examples of Israeli cyber innovation?
Why do you think IoT security is such an essential area of focus?
How should we deal with the current labor shortage in security?
Resources: View Michal Braverman-Blumenstyk on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Michal Braverman-Blumenstyk, Chief Technology Officer for Microsoft Security, top Israeli tech leader, and one of the world's highest-ranking women in the cybersecurity industry joins Ann on this week's episode of Afternoon Cyber Tea. Michal and Ann discuss what is keeping cyber leaders up at night, why Israel is a worldwide leader in cybersecurity technology, and what investments Microsoft is making to create a more safe and secure future for all.
In This Episode You Will Learn:
A brief history of Israeli cyber innovation
The Microsoft Security CTO perspective on top trends and technologies
The importance of diversity & inclusion in the cybersecurity industry
Some Questions We Ask:
What are some of your favorite examples of Israeli cyber innovation?
Why do you think IoT security is such an essential area of focus?
How should we deal with the current labor shortage in security?
Resources: View Michal Braverman-Blumenstyk on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Dr. Josephine Wolff, associate professor of cybersecurity policy within The Fletcher School at Tufts University, joins Afternoon Cyber Tea this week to discuss the history, challenges, and opportunities in cyber insurance. What was first developed in the late 1990s as protection against computer viruses, cyber insurance has evolved into an incredibly complex and, in some cases, tension-filled industry. Ann and Dr. Wolff discuss the cyber insurance industry’s initial goals, the differences in cyber insurance policies, and the points of view on ransomware insurance directly funding cybercrime.
In This Episode You Will Learn:
What types of risks do insurers cover, and how they are designing and charging for policies
How can we help policymakers get ahead of the curve and drive change in security
Why we need greater cooperation and data sharing when it comes to threat intelligence
Some Questions We Ask:
What were the initial motivations behind cyber insurance providers?
What is some practical advice you would give to insurers looking to better support their customers?
Are cyber insurers positively motivating businesses and leaders for the better?
Resources: Dr. Wolff's new book, Cyberinsurance Policy is available now. View Dr. Wolff on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Dr. Josephine Wolff, associate professor of cybersecurity policy within The Fletcher School at Tufts University, joins Afternoon Cyber Tea this week to discuss the history, challenges, and opportunities in cyber insurance. What was first developed in the late 1990s as protection against computer viruses, cyber insurance has evolved into an incredibly complex and, in some cases, tension-filled industry. Ann and Dr. Wolff discuss the cyber insurance industry’s initial goals, the differences in cyber insurance policies, and the points of view on ransomware insurance directly funding cybercrime.
In This Episode You Will Learn:
What types of risks do insurers cover, and how they are designing and charging for policies
How can we help policymakers get ahead of the curve and drive change in security
Why we need greater cooperation and data sharing when it comes to threat intelligence
Some Questions We Ask:
What were the initial motivations behind cyber insurance providers?
What is some practical advice you would give to insurers looking to better support their customers?
Are cyber insurers positively motivating businesses and leaders for the better?
Resources: Dr. Wolff's new book, Cyberinsurance Policy is available now. View Dr. Wolff on LinkedIn View Ann Johnson on LinkedIn Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Dave DeWalt, Founder and Managing Director of NightDragon, and Jay Leek, Managing Director and Co-founder of both Syn Ventures and Clear Sky Security, join Ann on this week's episode of Afternoon Cyber Tea. Investing in companies producing the latest technology that cybersecurity firms depend on, like the latest artificial intelligence, sounds like an exciting opportunity, but who has the best product? Getting in on the ground floor is appealing, but where do you start? Dave and Jay chat with Ann about why cyber is so attractive to investors, their advice for founders currently starting their investment journey, and what new technology has their attention. In This Episode You Will Learn:
Why we are witnessing ballooning venture capital investments in cyber
What technology is currently capturing investors' attention
How current events are shaking up the world of cyber venture capital
Some Questions We Ask:
Why is cyber so attractive to investors?
What advice do you have for cyber founders starting their investment journey?
When you work with security founders, what qualities are you looking for?
Resources: View Dave DeWalt on LinkedIn View Jay Leek on LinkedIn View Ann Johnson on LinkedIn Learn about NightDragon Learn about SynVentures
Related Microsoft Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
M. K. Palmore, Director, Office of the CISO, for Google Cloud, and diversity & inclusion advocate, joins Ann on this week's episode of Afternoon Cyber Tea to discuss the cyber talent shortage, including why leaders need to drive greater inclusivity in the industry, resources for individuals to build their skills and networks, and why talent sourcing is just one issue in building greater representation. In This Episode You Will Learn:
What a talent shortage means for businesses and organizations
Why is there a problem getting started in an industry with such high demand
How leaders can support women and underrepresented minorities in the industry
Some Questions We Ask:
Why has the cyber talent shortage become so acute in the last few years?
What new methods would you recommend to leaders to bring new talent?
How should leaders think about retainment and sponsorship for advancement?
Resources: View M. K. Palmore on LinkedIn View Ann Johnson on LinkedIn Read more on how Microsoft is helping address the cybersecurity skills gap Explore cybersecurity learning pathways on Microsoft Learn and LinkedIn Learning Learn about Cyversity Related Podcasts: Listen to: Uncovering Hidden Risks Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Jeff Rivera, American author, producer, and co-founder of Collective 5 Entertainment, joins Ann on this week's episode of Afternoon Cyber Tea to discuss the importance of diversity and inclusion, the impact of underrepresentation, and his journey from poverty to renowned world speaker. Jeff is an internationally sought-after speaker and author with an impressive body of work, including over 200 books, television, radio, and digital publications. In This Episode You Will Learn:
Jeff's journey from American poverty to mentor, writer, and production company owner
The impact of under-representation
The importance of seeing and celebrating differences in people
Some Questions We Ask:
How does the lack of representation impact people from marginalized communities?
Why is it important to recognize the differences between people?
How are you accelerating progress in representation through current and future projects?
Resources: View Jeff Rivera on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Dave Bittner, Hacking Humans podcast host and a co-founder of CyberWire, interviews Ann Johnson about social engineering attacks, the future of passwordless account adoption, authentication tools, and Ann‘s perspective on the future development of technology to mitigate risks on this week's episode of Afternoon Cyber Tea. Dave’s career spans more than two decades in digital media, video, television production, and interactive technology. He’s also one of the pioneers of non-linear editing and digital storytelling. In This Episode You Will Learn About:
How to identify potential social engineering and cyber attacks
The future of passwordless account adoption and the necessary steps to get there
The future of authentication
Some Questions We Ask:
What are ways to identify potential social engineering attacks?
What tools are on the horizon for the fight against cyberattacks?
What is the role of organizations in improving technology and applications to protect end-users?
Resources: Listen to Hacking Humans View Dave Bittner on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Katie Nickels, Director of Intelligence for Red Canary, joins Ann on this week's episode of Afternoon Cyber Tea. Katie has worked in security operations centers and cyber threat intelligence for nearly a decade, with degrees from Smith College and Georgetown University. Ann and Katie discuss the impact cyberattacks have on operating systems, the ransomware ecosystem, and recommendations for mitigating future risks.
In This Episode You Will Learn:
Insights about the ransomware ecosystem and the future of cybersecurity.
How to ensure your Patch Management Program is optimized to mitigate threats and risks.
How, when, what, and to whom to communicate with after an intrusion.
Some Questions We Ask:
How can organizations share information about attacks without greater risk?
What are the best practices when trying to protect your information?
What would you consider beneficial when investing against inside threats?
Resources: View Katie Nickels on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Lou Manousos, an acknowledged expert in internet security and VP of Product in Microsoft Security, joins Ann Johnson on this week's episode of Afternoon Cyber Tea. Lou has been developing enterprise protection technology for more than 15 years and is currently the CEO of Risk IQ. He also spearheaded a new approach to using intelligence to help companies protect their organizations and reduce online fraud. Ann and Lou discuss handling internal fraud, best practices for the average consumer when protecting themselves at home, and the danger major brands face from deep fakes and social media scams. In This Episode You Will Learn:
How companies need to focus on their internal fraud and security stance
What needs to be done to protect major brands from social media scams
Why we still aren’t fully prepared to handle synthetic identity scams
Some Questions We Ask:
What role can information security play in enhancing fraud prevention tools?
What should the average consumer do when looking to protect themselves at home?
When will security be able to identify fake accounts and fraud attempts more accurately?
Resources: View Lou Manousos on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Tarun Sondhi, a Principal and the cyber leader for the KPMG Managed Services group, joins Ann on this week's episode of Afternoon Cyber Tea. He has deep expertise in security architecture, infrastructure security, and access management. Tarun led the complete transformation and rebuilding of the Security Operations Center for one of the largest financial services organizations in the world. Ann and Tarun discuss how his guidance in security has changed over the years, investing in artificial intelligence and automation and what he believes is currently the most significant innovation in security. In This Episode You Will Learn:
How clients and organizations should handle today's threat landscape
When companies should start to invest in artificial intelligence and automation
Why organizations often overlook the evolving sophistication of current cyberattacks
Some Questions We Ask:
How has your security guidance changed in the past five years?
Why should organizations start to use cybersecurity to build operational resiliency?
What is the most significant security innovation you’ve seen recently to help organizations?
Resources: View Tarun Sondhi on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Tracy Maleeff, a security researcher at the Krebs Stamos Group, a cybersecurity consulting firm, joins Ann on this week's episode of Afternoon Cyber Tea. Tracy is an information security professional with a Master of Library and Information Science degree and a frequent author and speaker on InfoSec and research topics. Ann and Tracy discuss keeping companies safe from disinformation, current issues, infosec professionals are dealing with, and what has influenced her cybersecurity philosophy. In This Episode You Will Learn:
How companies are fighting against misinformation and disinformation
The most critical issues consumers face regarding information security
Technology companies should invest in to protect from data breaches
Some Questions We Ask:
What is the biggest surprise in the evolution of technology and the threat landscape?
How does your law librarian background influence your cybersecurity philosophy?
What current issues are infosec professionals not paying enough attention to?
Resources: infosecsherpa.medium.com
View Tracy Maleeff on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Sean Joyce, Principal for Price Waterhouse Coopers Advisory Practice, joins Ann this week on Afternoon Cyber Tea to discuss the unprecedented rise of cyberattacks this past year and what new trends we should be paying attention to. Sean has also consulted on some of the most prolific cyber breaches, providing us with his expertise on what he believes organizations should enforce as best practices when building operational resilience.
In This Episode You Will Learn:
How to stop the spread of misinformation by building trust in cybersecurity
When to worry about the spread of misinformation as it relates to cybersecurity
Why companies should invest in Artificial intelligence and automation
Some Questions We Ask:
How concerned should we be given the rise and sophistication of new cyber-attacks?
What are some current trends we should all be paying attention to?
When we talk about defense, what should companies be investing in?
Resources: View Sean Joyce on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Rob Duhart, VP, Deputy CISO, at Walmart, shares his points of view on what can help today’s CISOs avoid unexpected cyber issues and the trends he is seeing shape the current cyber landscape on this week's episode of Afternoon Cyber Tea with Ann Johnson. As an ally for underrepresented populations in the cyber industry, Rob also discusses how he leverages his voice to support diversity and inclusion across the technology industry and the rise of disinformation in the cybersecurity community. In This Episode You Will Learn:
How to help avoid the unexpected and cyber predictions for 2022
Remaining conscious of risk without disrupting their business flow
The connection between cybersecurity and disinformation
Some Questions We Ask:
What issues should security and risk leaders be planning for this year?
How can companies help develop a culture of diversity and inclusion?
How will disinformation become a larger problem in cybersecurity?
Resources: View Rob Duhart on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Cristin Goodwin, Associate General Counsel of Microsoft's Digital Security Unit, joins Ann on this week's episode of Afternoon Cyber Tea. Cristin joined Microsoft in 2006, and since that time, she has been Microsoft's lead counsel for all aspects of Microsoft's security incident response processes and security updates for over a billion customers worldwide. Cristin has shared her insights and expertise with global business and government leaders to help lead effective cyber-defense strategies. Ann and Cristin discuss how international organizations understand and respond to cyber-attacks, the connections between criminal groups that sell services to governments, and the possibility of a successful international cyber agreement. In This Episode You Will Learn:
How to defend against sophisticated attack tools
Thoughts on current geopolitical events
How to strengthen our security in the future from nation-state attacks
Some Questions We Ask:
What do you think has brought this influx of nation-state hackers?
Why should we be concerned about new trends in malware & phishing campaigns?
Do you believe creating a successful international cyber agreement is possible?
Resources: View Cristin Goodwin on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Named one of the Top 25 women leaders in cybersecurity Wendy Thomas, President, and CEO of SecureWorks joins Afternoon Cyber Tea with Ann Johnson to examine building customer trust during a time of unprecedented cyberattacks. With more than 25 years of experience in strategic and functional leadership roles Wendy shares her unique perspective and guidance when helping organizations improve their security posture, and ways to develop and maintain a successful operational resilience plan. She and Ann also dive into the relationship between machine learning and human intelligence and how it will help build the SOC of the future. In This Episode You Will Learn:
How to deal with new attacks on cloud services
How global organizations can protect their core operations and services
Why we need to be concerned about prefabricated ransomware kits
Some Questions We Ask:
How should a traditional SOC adjust to remote work policies?
Why has it been challenging to recruit and retain the next generation of cyber talent?
When should we be concerned about the lack of protection against new cyberattacks?
Resources: View Wendy Thomas on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Nicola Searle, Digital Economy Fellow at the Institute for Creative and Cultural Entrepreneurship at Goldsmiths, University of London, joins Afternoon Cyber Tea with Ann Johnson on this episode focused on privacy and the cybersecurity of trade secrets. Nicola served as a government economist at the UK Intellectual Property Office from 2013 to 2015 and authored two Oxford University Press manuscripts on intellectual property. Before her academic career, she was a financial associate at Goldman Sachs in the US and Italy. Ann and Nicola discuss privacy trends and standards for 2022, why trade secrets seem more vulnerable to cyberattacks, and how companies can create ecosystems that provide their customers with comparable value for their data.
In This Episode You Will Learn:
How to help future proof your data protections
Creating an ecosystem that helps protect intellectual property.
Why trade secrets can be more vulnerable to cyberattacks.
Some Questions We Ask:
What predictions do you have on privacy and standards in 2022?
Why are trade secrets more vulnerable to cyber attacks than intellectual property?
Why is transparency and creating awareness necessary as we collet more customer data?
Resources: View Nicola Searle on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Runa Sandvik, a modern-day hacker and computer security expert joins Ann Johnson on this week's episode of Afternoon Cyber Tea. Having a reputation as a staunch proponent of strong encryption, Runa was hired by The New York Times as their first senior director of information security. Ann and Runa discuss instituting new high-tech security measures at The Times, what types of skills she believes all journalists should possess today, and what she believes the tech industry should be doing more of when protecting against disinformation.
In This Episode You Will Learn:
How journalists conduct research while dealing with online threats
When journalists need to start worrying about disinformation
Why we have an increase in cyberattacks on journalists
Some Questions We Ask:
How did you implement various security advancements at The New York Times?
Why are criminals attacking media companies?
What types of cyber skills should all journalists possess today?
Resources: Glitch-Cat View Runa Sandvik on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Lauren Buitta, co-founder and CEO of Girl Security, shares how advancing girls, women, and gender minorities in national security leads to better cyber defense on today’s episode of Afternoon Cyber Tea with Ann Johnson. Lauren began as a policy analyst with the National Strategy Forum, a nonpartisan think tank, focusing on a wide range of national and global security issues, including domestic terrorism, transnational threats, and cybersecurity. Ann and Lauren discuss what led her to launch Girl Security, what the industry could do differently to help women grow in security, and why it is crucial to engage young girls in discourse about disinformation?
In This Episode You Will Learn:
How to become involved with Girl Security
The barriers women face when searching for a security career
Why we are having issues finding new security talent
Some Questions We Ask:
How can we remove barriers for women in security?
Why is it important to involve young women in uncovering misinformation?
What are the reasons behind women only taking up 20% of our industry?
Resources: Girl Security View Lauren Buitta on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Aanchal Gupta, Vice President for Microsoft Azure, joins Ann on today's episode of Afternoon Cyber Tea. Aanchal is an executive with more than two decades of experience leading geographically distributed teams developing secure and trustworthy software used by billions of people. Aanchal joins us to discuss her work leading Microsoft's Security Response Center, giving our listeners a behind-the-scenes look into how the company’s security team tackles issues. Aanchal also talks with Ann about different lessons learned when tackling recent threats, her philosophy on cybersecurity, and how important she believes diversity and open work culture for diverse people are when trying to maintain trust and clarity in a crisis.
In This Episode You Will Learn:
Challenges as a cyber security leader
Guidance when trying to improve security posture
Behind the scenes look inside the Microsoft Security Response Center
Some Questions We Ask:
What are some lessons you’ve learned when tackling recent threats?
When it comes to cyber issues, what should customers know first?
How important is diversity and open work culture for the future of cybersecurity?
Resources: View Aanchal Gupta on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Jessica Gulick, Founder, and CEO of KATZCY, a woman-owned cyber consulting firm driven to help cybersecurity experts become great leaders, joins Ann Johnson on today's episode of Afternoon Cyber Tea. Ann and Jessica discuss the evolution of cybersecurity gaming competitions, why these events are crucial to inspiring young people, and who she believes is the next generation of cyber defenders. As the founder and commissioner of US Cyber Games, an organization committed to informing and inspiring the broader community on ways to develop tomorrow's cybersecurity workforce, Jessica also shares how the cyber industry can help train and retain the next generation of cyber defenders. In This Episode You Will Learn:
The evolution of cybersecurity gaming competitions
Real time cyber skills training through eSports
Why we need to attract more women to the tech industry
Some Questions We Ask:
How can tech companies help maintain the pipeline of future cyber security talent?
What do you believe is the first step to alleviate the talent shortage?
When will the next generation of defenders catch up to the sophistication of attackers?
Resources: Katzcy Digital Marketing Agency View Jessica Gulick on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Diana Kelly, the co-founder, and CTO of SecurityCurve, a cybersecurity consulting firm, joins Ann Johnson on this episode of Afternoon Cyber Tea. Diana is a globally known security expert who donates much of her time volunteering in the cybersecurity community while also serving on the Association for Computing Machinery Ethics and Plagiarism Committee. Diana talks with Ann about helping inexperienced organizations get up to speed on the cybersecurity landscape, some of the current significant security and privacy hurdles currently plaguing the field, and some of the best practices to assist network defenders and users trying to combat botnet threats. In This Episode You Will Learn:
How companies can protect themselves from new unsecure devices
When security risks correspond with access management and IoT devices
Why we need security programs to grow to a new level
Some Questions We Ask:
How should network defenders and users combat botnet threats?
What types of universal IoT standards need to be created?
What privacy hurdles are currently plaguing the field of IoT-connected devices?
Resources: View Diana Kelly on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Rinki Sethi; Vice President and Chief Information Security Officer for Twitter joins Ann Johnson for this conversation focused on the recent rise in cybercrime. Rinki was an Information Security Executive at IBM from 2018 to 2019 before joining Twitter in September 2020. She is responsible for protecting Twitter's information and technology assets and managing the company's continued product innovations in the security space. Rinki talks with Ann about the significant uptick in ransomware attacks, what she enjoys most about her career in cybersecurity, best practices when raising consumer awareness, and Twitter's approach to cybersecurity. In This Episode You Will Learn:
Rinki’s cybersecurity philosophy
Best practices to apply when trying to keep your company and customers safe
The challenges when readjusting data into a functional and quick risk management strategy
Some Questions We Ask:
What are some best practices when raising consumer awareness?
Do you believe ransomware attacks are rising or just becoming more high-profile?
What guidance would you provide to organizations that lack sufficient protection against cyberattacks?
Resources: View Rinki Sethi on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Amy Hogan-Burney, General Manager of Microsoft's Digital Crimes Unit, and former attorney at the U.S. Department of Justice, Federal Bureau of Investigation joins Ann Johnson to discuss how to address the leap in cyberattack sophistication seen in the new Microsoft Digital Defense Report, and the steps needed to establish new rules for cyberspace. As the leader of a global team of attorneys, investigators, engineers, and analysts Amy shares the strategic vantage point that these insights reveal about the increase of imposter domains attacking a variety of industries, and what guidance she has for organizations trying to protect themselves during a new wave of cyberattacks unlike any we have seen in the past.
In This Episode You Will Learn:
New global cybercrime trends
Why we are seeing an increase in imposter domains
How to keep data safe while employees continue to work remote
Some Questions We Ask:
What can we learn from the latest digital defense report?
Why are we seeing a shift to more phishing attacks?
When should we start establishing new rules for cybersecurity?
Resources: Fighting an emerging cybercrime trend View Amy Hogan-Burney on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Wendy Nather, the highly respected cyber strategist, CISO, research director, and former industry analyst, joins Ann Johnson on Afternoon Cyber Tea to talk about the strategies helping defend against human-operated ransomware. Wendy has served as a CISO in both the private and public sectors leading IT security for the EMEA region of the investment banking division of Swiss Bank Corporation (now UBS) and the Texas Education Agency. Her specialties are security program management, threat intelligence, risk analysis, identity and access management, security operations, and incident response. In this episode, Wendy and Ann also discuss the Digital Extortion Task Force, which specializes in combating these attacks, and how the threat landscape has continued to widen and evolve. In This Episode You Will Learn:
What is so alarming about the recent rise in ransomware attacks
How human-operated ransomware is a threat to organizations in every industry
Why threat actors have become remarkably successful
Some Questions We Ask:
What are your thoughts on the new Digital Extortion Task Force?
Can you elaborate on what has evolved in ransomware and the threat actors behind it?
What should organizations concentrate on to protect themselves against ransomware?
Resources: View Wendy Nather on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The Cyberwire Network.
Dr. Fiona Hill, former intelligence officer and one of the United States' most incomparable Russian experts, joins Ann Johnson in the Season 5 premiere episode of Afternoon Cyber Tea. Dr. Hill addresses disinformation, the connection to cybersecurity, and how adversaries are mastering technology to undermine U.S. interests at home and abroad. She also talks with Ann about the critical need to stay aware of our adversaries' scientific and technical capabilities, digital threats to women online, and the importance of including individuals with diverse perspectives and sensitivities to address cyber threats in the future. In This Episode You Will Learn:
The importance of including individuals with diverse perspectives
What limits the United States' ability to understand and respond to global issues
The value and importance of a role model for young Americans
Some Questions We Ask:
How do we stay aware of the scientific capabilities our adversaries are pursuing?
What has to happen to ensure that digital threats to women do not control their social and educational engagement?
Why can we only benefit from the younger generation believing in themselves?
Resources: There Is Nothing for You Here: Finding Opportunity in the Twenty-First Century View Dr. Fiona Hill on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft sits down with Rick Howard, Chief Security Officer and Chief Analyst for CyberWire, to talk about the future of cybercrime. Reflecting on recent cyberattacks, they discuss historical approaches that still hold true, the strengths and weaknesses of standard industry practices, and which principles of cybersecurity they feel aren’t getting enough attention today.
Resources: View Rick Howard on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft welcomes Flynn Adams, co-founder of InteliQore, to the show to talk about her personal experience with online harassment causing real-life trauma. Flynn recounts her harrowing story about the digital abuse that endangered her family, the inaction and frustration that followed, and her motivation to create InteliQore and advocate for digital safety as a fundamental human right.
Resources: View Flynn Adams on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft sits down with Microsoft colleague Tom Burt, Corporate VP of Customer Security and Trust, to talk all things cybersecurity. They dig deep into the severity of nation-state attacks, the Biden administration’s recent executive order on transparency in cybersecurity, and the simple steps companies can take to practice good digital hygiene. They also discuss Microsoft’s mission to combat disinformation and why public-private partnerships are key.
Resources: View Tom Burt on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft is joined by Genevieve Liveley, Professor of Classics, RISCS Fellow, and Turing Fellow at the University of Bristol. Genevieve talks about her research in the field of narratology, what ancient Greece teaches us about AI today, and the potential threat of AI-assisted cyberattacks. They wind things down by chatting about the human spirit and the power of resiliency.
Resources: View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft, is joined this week by Dominique West, host and creator of the Security in Color podcast, to talk about the cybersecurity community: Dominique’s experiences within it, how industry professionals are changing norms to make it more accessible for people who have been historically excluded from the space, and advice for those looking to start a career in cybersecurity.
Resources: View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft welcomes The New York Times cybersecurity reporter and best-selling author, Nicole Perlroth, to talk about her new book, This Is How They Tell Me the World Ends: The Cyberweapons Arms Race. They dive into the spate of recent high-profile cyber-attacks, the top security risks facing the United States, and the strategies needed to fight back. They then cap off things off by talking about the process of writing a book.
Resources: View Nicole Perlroth on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft is joined by Titania Group co-founder Nicola Whiting to discuss the importance of diversity and inclusion in the workplace and how differences in thought, background, and ability can be the best defense against cybercrime. The cybersecurity veteran also talks to Ann about the rise of ransomware and how to fight it. Listen in to learn best practices for overcoming bias and building a more resilient cybersecurity strategy.
Resources: View Nicola Whiting on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Security, Compliance, and Identity at Microsoft discusses the recent cyberattacks on the US supply chain with Admiral (RET) Michael Rogers, former Head of United States Cyber Command. Mike gives his perspective on the frailty of today’s supply chain (particularly in the US) and the massive risk of failing to secure it. Don’t miss this fascinating discussion about the growing sophistication of cybercrime and the necessity of public-private partnerships to stop it.
Resources: View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Security Unlocked is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Business Development, Security, Compliance, and Identity at Microsoft, speaks with Executive Vice President and Head of Mandiant Intelligence at FireEye, Sandra Joyce. With the U.S. election upon us, misinformation is at a fever pitch as bad actors aim to disrupt and erode confidence in our democratic system. Ann and Sandra discuss the relationship between attribution and accountability in these scenarios, the rise of ransomware as a national security issue, and how understanding the scale of the threat landscape can help organizations respond—swiftly and thoroughly—to a breach.
Resources: View Sandra Joyce on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Security Unlocked is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Business Development, Security, Compliance, and Identity at Microsoft, discusses diversity in cybersecurity with Camille Stewart, head of security policy and election integrity for Android and Google Play, and Lauren Zabierek, executive director of the Cyber Project at Harvard Kennedy School’s Belfer Center. Camille and Lauren, whose #ShareTheMicInCyber campaign amplifies Black practitioners in tech, share insights on how organizations and individuals can identify blindspots, encourage uncomfortable dialogue, and nurture inclusivity in the industry. Listen to the second episode in this two-part discussion on how excluding diverse voices weakens our approach to security on a national scale, as well as the vulnerabilities we risk when bias is baked into technology.
Resources: View Camille Stewart on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Security Unlocked is produced by Microsoft and distributed as part of The CyberWire Network.
? Ann Johnson, Corporate Vice President, Business Development, Security, Compliance, and Identity at Microsoft, discusses diversity in cybersecurity with Camille Stewart, head of security policy and election integrity for Android and Google Play, and Lauren Zabierek, executive director of the Cyber Project at Harvard Kennedy School’s Belfer Center. Camille and Lauren, whose #ShareTheMicInCyber campaign amplifies Black practitioners in tech, share insights on how organizations and individuals can identify blindspots, encourage uncomfortable dialogue, and nurture inclusivity in the industry. Listen to the first episode in this two-part discussion on how excluding diverse voices weakens our approach to security on a national scale, as well as the vulnerabilities we risk when bias is baked into technology.
Resources: View Camille Stewart on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Security Unlocked is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Business Development, Security, Compliance, and Identity at Microsoft, and Jules Okafor, CEO/founder of RevolutionCyber and diversity and anti-racism influencer, discuss the attitudes that keep the cybersecurity industry from fully realizing its potential. Jules presents her cyber mindset perspective, urging security professionals to prioritize value and positive outcomes for customers, not just technology sales. Join their talk about how by truly listening—not scrambling for an easy button—the industry also can make meaningful progress in changing behaviors, sustaining difficult conversations, and becoming more inclusive.
Resources: View Jules Okafor on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Business Development, Security, Compliance, and Identity at Microsoft, shares a conversation with Bret Arsenault, Microsoft’s Chief Information Security Officer, to talk about his role in the company’s response to the pandemic. Ann and Bret usher in National Cybersecurity Awareness Month with a discussion about the new rules of engagement for a largely remote workforce and the pressures it places on many companies. Hear their perspectives on the importance of data and the modern CISO to security, productivity, and employee wellness.
Resources: View Bret Arsenault on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Business Development, Security, Compliance, and Identity at Microsoft, talks about perceptions of cybersecurity with information security researcher, political scientist, author, and Fulbright Scholar Tarah Wheeler. They dive into how security and risk management have ascended within organizations, as well as the importance of looking beyond cybercrime to the people most affected by the fallout. Their conversation considers the physics of encryption vs. the right to data privacy, imposter syndrome in the cybersecurity community, and what people do when given power and anonymity.
Resources: View Tarah Wheeler on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Cybersecurity expert Theresa Payton joins Ann Johnson, Corporate Vice President for Business Development, Security, Compliance, and Identity at Microsoft, to talk about election security, socially engineered attacks, and Theresa’s book “Manipulated: Inside the Cyberwar to Hijack Elections and Distort the Truth.” Ann and Theresa unpack how the cyberoperatives behind misinformation campaigns choose their targets, their narratives, and the conversations they seek to influence. Listen for perspectives on the pandemic and the power of human-centered design to combat cybercrime.
Resources: View Theresa Payton on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President, Business Development, Security, Compliance & Identity at Microsoft, talks with James Turner, an industry analyst who works to support CISOs and strengthen the resilience of the economies of Australia and New Zealand. Ann and James talk about the importance of communication and collaboration among governments and private organizations, as well as the emphasis the COVID-19 pandemic has put on cooperation in the cybersecurity industry. Hear their perspectives for CISOs grappling with an escalating threat landscape and their guidance for weathering the challenges presented by this moment.
Resources: View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, hosts a conversation with Gabe Ramsey, a technology litigation partner and Microsoft’s outside counsel, taking part in the company’s recent efforts to dismantle botnets. Ann and Gabe talk about the importance of private-public partnerships in deterring and disrupting cybercrime, as well as the ability to scale a defense strategy. Listen for their perspectives on persistence in botnet takedowns, privacy laws and their implications for tech companies’ responsible use of data, and the ethics of facial recognition and AI bias.
Resources: View Gabe Ramsey on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
This week, we revisit our episode where Ann Johnson, Corporate Vice President for Cybersecurity Solutions at Microsoft, talks with infosec expert, white-hat hacker, and CEO of SocialProof Security Rachel Tobac about social engineering, the non-technical strategies cyberattackers use to manipulate targets through human interaction. Ann and Rachel delve into the neuroscience behind social engineering, the entry points social media offers, how fear and urgency factor in, and the similarities between improv and vishing. Listen to learn how savvy attackers exploit everyday human actions and reactions to gain access to funds, data or information – and how “real-world two-factor” and being “politely paranoid” can protect your organization, employees, and customers.
Resources: Ann Johnson’s RSA 2020 keynote (“Why people are still your best cyber defense”) SocialProof Security Rachel Tobac hacks a voting machine View Rachel Tobac on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, talks election security with Chris Krebs, first and current Director of the Cybersecurity and Infrastructure Security Agency in the Department of Homeland Security. With the events of the presidential election in 2016 and the new obstacles posed by the spread of COVID-19, the 2020 election stands to be both high-profile and extremely challenging from a security standpoint. Listen for their perspectives on the factors that will shore up election security before November and into the future, the War on Pineapple, and disrupting the economics of cybercrime.
Resources: View Chris Krebs on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, is joined by Penn State Associate Dean for Innovation and Technology and Law and Engineering policy Professor Dr. Andrea Matwyshyn to talk about her work with the Internet of Bodies. The research examines devices that interact with the human body—externally or internally—and the legal challenges they pose to our relationship with technology. Listen to the second of two episodes with Dr. Matwyshyn as she and Ann discuss security risks, consumer consent, overtrust in internet-connected devices, and what we must consider as the human body becomes a technology platform.
Resources: View Dr. Andrea Matwyshyn on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, talks with Dr. Andrea Matwyshyn, professor and associate dean for Innovation and Technology at Penn State, about her work with the Internet of Bodies. Her research examines devices that interact—externally or internally—with the human body and the legal challenges they pose to our relationship with technology. Listen to the first of two episodes with Dr. Matwyshyn as she and Ann discuss the future of these devices, benefits and possibilities, security risks, consumer consent, and other issues we must consider as the human body becomes a technology platform.
Resources: View Dr. Andrea Matwyshyn on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
This week, we revisit Ann's conversation with Marc Goodman, global security strategist, futurist, and author of the book, Future Crimes: Everything Is Connected, Everyone Is Vulnerable and What We Can Do About It. In this episode, Ann and Marc discuss the scale of cyberthreats - past, present, and future - and how authorities and experts at local, national, and global levels defend against them. They also explore the security risk posed by billions of connected devices and the implications of a multi-dimensional attack for governments, cities, businesses, and human beings. Listen in on their conversation about the evolution of cybercrime and cybersecurity to learn about the possibilities and vulnerabilities of our increasingly connected world.
Resources: Cities are easy prey for cybercriminals - Fight back! Future Crimes, Marc Goodman View Marc Goodman on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, is joined by Allison Nixon, a security researcher and investigator at Unit 221B. Allison details her work in the cybercrime underworld, talking with Ann about the vulnerabilities—at the consumer and carrier level—of using our phones as identification and how they enable SIM swappers to carry out their attacks. Hear their insights on the importance of relationships and looking for opportunities to help people can lead to more purpose-driven cybersecurity.
Resources: View Allison Nixon on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, and General Keith Alexander, former and longest-serving head of the National Security Agency and current co-CEO of IronNet Cybersecurity, discuss the perilous implications of the disconnect between public and private cybersecurity efforts. Amid the backdrop of the ongoing global response to COVID-19, they explore the balance of personal security and the common defense, private-public approaches to information sharing and detecting cyberthreats, and the protecting intellectual property in the U.S. Listen for perspective on securing civil liberties while safeguarding the greater good.
Resources: View General (Ret) Keith Alexander on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for the Cybersecurity Solutions Group at Microsoft, hosts a conversation with Chase Cunningham, VP and principal analyst at Forrester, about Zero Trust strategy. Tactics like multi-factor authentication are critical to securing user identities at your organization and implementing a Zero Trust model, but how do you go beyond protocol and make best practices part of your employees’ normal work experience? Join the discussion about how cyber experts are currently adjusting to and assisting a workforce largely operating outside the bounds of a secure infrastructure as the response to the COVID-19 pandemic keeps employees at home while on the job. Cyber Warfare—Truth, Tactics, and Strategies, Chase Cunningham (February 2020) Forrester names Microsoft a leader in 2020 Enterprise Detection and Response Wave
Resources: View Chase Cunningham on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for Cybersecurity Solutions Group at Microsoft, talks with former Principal Deputy Director of National Intelligence Sue Gordon about the tools the United States has in its cybersecurity arsenal and the threat landscape it faces. In their discussion of how governments and organizations are working together, they cover the dynamics of detecting, deterring, and defending against attacks by nation states. Listen in on their conversation about the intersection of private businesses and the public interests and what it means for citizens’ safety.
Resources: Cyberspace Solarium Commission Report Microsoft Software & Systems Academy (MSSA) Program View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, CVP of the Cybersecurity Solutions Group at Microsoft, talks with Mari Galloway, a certified ethical hacker and infosec expert, about her experience working to secure Las Vegas’ gaming industry and advance diversity and inclusion in tech as the CEO of the Women’s Society of Cyberjutsu. Mari and Ann discuss the value of diverse perspectives in approaching business and security challenges, as well as the importance of creating resources and space for women and minorities to succeed.
Resources: Women’s Society of Cyberjutsu (WSC) Wicked6 Cyber Games Tips and Tricks to Negotiating a Better Salary View Mari Galloway on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for Cybersecurity Solutions at Microsoft, talks with Art Coviello, a partner at Rally Ventures and former executive chairman of RSA Security. They examine the changing nature of cybercrime over the years, from pranks and theft to misinformation campaigns and weaponization, and how the cybersecurity industry has evolved alongside the threat landscape. Hear how companies and their customers can keep up with—and stay ahead of—the quickly morphing risks to their businesses.
Resources: Ann Johnson’s RSA 2020 Keynote (“Why people are still your best cyber defense”) Microsoft’s Tech Intensity Resolution View Art Coviello on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann Johnson, Corporate Vice President for Cybersecurity Solutions at Microsoft, talks with infosec expert, white-hat hacker, and CEO of SocialProof Security Rachel Tobac about social engineering, the non-technical strategies cyberattackers use to manipulate targets through human interaction. Ann and Rachel delve into the neuroscience behind social engineering, the entry points social media offers, how fear and urgency factor in, and the similarities between improv and vishing. Listen to learn how savvy attackers exploit everyday human actions and reactions to gain access to funds, data or information – and how “real-world two-factor” and being “politely paranoid” can protect your organization, employees, and customers.
Resources: Ann Johnson’s RSA 2020 Keynote (“Why people are still your best cyber defense”) SocialProof Security Rachel Tobac Hacks a Voting Machine View Rachel Tobac on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann talks with security expert and co-founder of Veracode, Chris Wysopal about the changing scale and stakes of hacks. Their conversation delves into how cybercriminals monetize attacks, the rise of attacks by nation states, and what hacktivists are up to these days. They also look at vulnerabilities in election infrastructure in the U.S. through the lens of vendor expectations and supply chain security. Hear Ann and Chris' perspectives on the main types, motivations, and targets of threat actors and how governments and organizations can tailor their security strategy to the threats they face.
Resources: L0phtCrack L0pht Heavy Industries testimony before the U.S. Senate Committee on Governmental Affairs, 1998 View Chris Wysopal on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Kevin Beaumont, a thought leader in the cybersecurity industry on incident detection and response, joins Ann to talk about the security trends that are peaking, plateauing, and plummeting. They trade insights on how organizations can examine the dynamics of an attack and effectively monitor their logs and landscape to prevent or recover from one. Listen for guidance and an insider's perspective on the threats facing businesses, the destructive impact of the monetization of cybercrime, and how security professionals can optimize their strategies to keep their businesses safe.
Resources: View Kevin Beaumont on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
This week, Ann chats with Dr. Andrea Little Limbago, a cybersecurity researcher, writer, keynote speaker, quant analyst, national security wonk, and computational social scientist at Virtru. Ann and Andrea pull the threads on how IoT can empower businesses to enrich and leverage AI, machine learning, and automation to achieve their goals, develop more predictive and analytics-based capabilities, satisfy customer demand, and fine tune operations in an era when both security risks are significant as cybercriminals can apply the same technology to their attacks. Listen in on their conversation about how CISOs and other business leaders can detect bad actors and defend their organizations - and themselves - against them.
Resources: IoT Signals Report View Dr. Andrea Little Limbago on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann hosts a conversation with Ian Coldwater, a Kubernetes container and cloud infrastructure specialist, penetration tester, DevOps engineer, and cybersecurity consultant bridging the gaps between teams. Ann and Ian talk about how CISOs can prepare for an cyberattack to minimize its impact, master the magic and complexity of containers, and encourage collaboration between engineering and security to find and fix vulnerabilities. Listen to hear how the highest security priorities may not be tools or process, but communication within the organization and remembering the basics.
Resources: KubeCon + CloudNativeCon North America 2019 KubeCon + CloudNativeCon keynote: "Hello from the Other Side: Dispatches from a Kubernetes Attacker" View Ian Coldwater on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann chats with CISO advisor, author, speaker and champion for women in cybersecurity Jane Frankland. In this episode, Ann and Jane explore how companies incorporate AI into their security tools and processes, the promise and risk of chatbots, their own paths to successful careers in cybersecurity, and how to encourage more women to get into the industry. Listen to hear what organizations need to know to make the best use of AI now, while preparing for a vastly more intelligent future.
Resources: View Jane Frankland on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.
Ann talks with Marc Goodman, global security strategist, futurist, and author of the book, Future Crimes: Everything Is Connected, Everyone Is Vulnerable and What We Can Do About It. In this episode, Ann and Marc discuss the scale of cyberthreats - past, present, and future - and how authorities and experts at local, national, and global levels defend against them. They also explore the security risk posed by billions of connected devices and the implications of a multi-dimensional attack for governments, cities, businesses, and human beings. Listen in on their conversation about the evolution of cybercrime and cybersecurity to learn about the possibilities and vulnerabilities of our increasingly connected world.
Resources: Cities are easy prey for cybercriminals - Fight back! Future Crimes, Marc Goodman View Marc Goodman on LinkedIn View Ann Johnson on LinkedIn
Related: Listen to: Security Unlocked Listen to: Security Unlocked: CISO Series with Bret Arsenault
Afternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.