
Afternoon Cyber Tea with Ann Johnson
Ann Johnson, Corporate Vice President and Deputy Chief Information Security Officer at Microsoft, talks with cybersecurity thought leaders and influential industry experts about the trends shaping the cyber landscape and what should be top-of-mind for the C-suite and other key decision makers. Ann and her guests explore the risk and promise of emerging technologies, as well as the impact on how humans work, communicate, consume information, and live in this era of digital transformation. Please note, the opinions expressed by guests on this podcast are their own and are not endorsed by, nor do they necessarily reflect opinions of, Microsoft or Ann Johnson.
Latest episodes

May 17, 2022 • 26min
Preventing Digital Fraud & Scams
Lou Manousos, an acknowledged expert in internet security and VP of Product in Microsoft Security, joins Ann Johnson on this week's episode of Afternoon Cyber Tea. Lou has been developing enterprise protection technology for more than 15 years and is currently the CEO of Risk IQ. He also spearheaded a new approach to using intelligence to help companies protect their organizations and reduce online fraud. Ann and Lou discuss handling internal fraud, best practices for the average consumer when protecting themselves at home, and the danger major brands face from deep fakes and social media scams. In This Episode You Will Learn:
How companies need to focus on their internal fraud and security stance
What needs to be done to protect major brands from social media scams
Why we still aren’t fully prepared to handle synthetic identity scams
Some Questions We Ask:
What role can information security play in enhancing fraud prevention tools?
What should the average consumer do when looking to protect themselves at home?
When will security be able to identify fake accounts and fraud attempts more accurately?
Resources: View Lou Manousos on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

May 3, 2022 • 30min
The Criticality of Cyber Resilience
Tarun Sondhi, a Principal and the cyber leader for the KPMG Managed Services group, joins Ann on this week's episode of Afternoon Cyber Tea. He has deep expertise in security architecture, infrastructure security, and access management. Tarun led the complete transformation and rebuilding of the Security Operations Center for one of the largest financial services organizations in the world. Ann and Tarun discuss how his guidance in security has changed over the years, investing in artificial intelligence and automation and what he believes is currently the most significant innovation in security. In This Episode You Will Learn:
How clients and organizations should handle today's threat landscape
When companies should start to invest in artificial intelligence and automation
Why organizations often overlook the evolving sophistication of current cyberattacks
Some Questions We Ask:
How has your security guidance changed in the past five years?
Why should organizations start to use cybersecurity to build operational resiliency?
What is the most significant security innovation you’ve seen recently to help organizations?
Resources: View Tarun Sondhi on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

7 snips
Apr 19, 2022 • 37min
A Librarian’s Guide to Cybersecurity
Tracy Maleeff, a security researcher at the Krebs Stamos Group, a cybersecurity consulting firm, joins Ann on this week's episode of Afternoon Cyber Tea. Tracy is an information security professional with a Master of Library and Information Science degree and a frequent author and speaker on InfoSec and research topics. Ann and Tracy discuss keeping companies safe from disinformation, current issues, infosec professionals are dealing with, and what has influenced her cybersecurity philosophy. In This Episode You Will Learn:
How companies are fighting against misinformation and disinformation
The most critical issues consumers face regarding information security
Technology companies should invest in to protect from data breaches
Some Questions We Ask:
What is the biggest surprise in the evolution of technology and the threat landscape?
How does your law librarian background influence your cybersecurity philosophy?
What current issues are infosec professionals not paying enough attention to?
Resources: infosecsherpa.medium.com View Tracy Maleeff on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Apr 5, 2022 • 37min
Building Trust Through Cybersecurity
Sean Joyce, Principal for Price Waterhouse Coopers Advisory Practice, joins Ann this week on Afternoon Cyber Tea to discuss the unprecedented rise of cyberattacks this past year and what new trends we should be paying attention to. Sean has also consulted on some of the most prolific cyber breaches, providing us with his expertise on what he believes organizations should enforce as best practices when building operational resilience. In This Episode You Will Learn:
How to stop the spread of misinformation by building trust in cybersecurity
When to worry about the spread of misinformation as it relates to cybersecurity
Why companies should invest in Artificial intelligence and automation
Some Questions We Ask:
How concerned should we be given the rise and sophistication of new cyber-attacks?
What are some current trends we should all be paying attention to?
When we talk about defense, what should companies be investing in?
Resources: View Sean Joyce on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Mar 22, 2022 • 28min
Helping Future Proof the Cyber Landscape
Rob Duhart, VP, Deputy CISO, at Walmart, shares his points of view on what can help today’s CISOs avoid unexpected cyber issues and the trends he is seeing shape the current cyber landscape on this week's episode of Afternoon Cyber Tea with Ann Johnson. As an ally for underrepresented populations in the cyber industry, Rob also discusses how he leverages his voice to support diversity and inclusion across the technology industry and the rise of disinformation in the cybersecurity community. In This Episode You Will Learn:
How to help avoid the unexpected and cyber predictions for 2022
Remaining conscious of risk without disrupting their business flow
The connection between cybersecurity and disinformation
Some Questions We Ask:
What issues should security and risk leaders be planning for this year?
How can companies help develop a culture of diversity and inclusion?
How will disinformation become a larger problem in cybersecurity?
Resources: View Rob Duhart on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Mar 8, 2022 • 29min
Defending Against Advanced Actors
Cristin Goodwin, Associate General Counsel of Microsoft's Digital Security Unit, joins Ann on this week's episode of Afternoon Cyber Tea. Cristin joined Microsoft in 2006, and since that time, she has been Microsoft's lead counsel for all aspects of Microsoft's security incident response processes and security updates for over a billion customers worldwide. Cristin has shared her insights and expertise with global business and government leaders to help lead effective cyber-defense strategies. Ann and Cristin discuss how international organizations understand and respond to cyber-attacks, the connections between criminal groups that sell services to governments, and the possibility of a successful international cyber agreement. In This Episode You Will Learn:
How to defend against sophisticated attack tools
Thoughts on current geopolitical events
How to strengthen our security in the future from nation-state attacks
Some Questions We Ask:
What do you think has brought this influx of nation-state hackers?
Why should we be concerned about new trends in malware & phishing campaigns?
Do you believe creating a successful international cyber agreement is possible?
Resources: View Cristin Goodwin on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Feb 22, 2022 • 34min
Building Customer Trust in the Face of Cyber Attacks
Named one of the Top 25 women leaders in cybersecurity Wendy Thomas, President, and CEO of SecureWorks joins Afternoon Cyber Tea with Ann Johnson to examine building customer trust during a time of unprecedented cyberattacks. With more than 25 years of experience in strategic and functional leadership roles Wendy shares her unique perspective and guidance when helping organizations improve their security posture, and ways to develop and maintain a successful operational resilience plan. She and Ann also dive into the relationship between machine learning and human intelligence and how it will help build the SOC of the future. In This Episode You Will Learn:
How to deal with new attacks on cloud services
How global organizations can protect their core operations and services
Why we need to be concerned about prefabricated ransomware kits
Some Questions We Ask:
How should a traditional SOC adjust to remote work policies?
Why has it been challenging to recruit and retain the next generation of cyber talent?
When should we be concerned about the lack of protection against new cyberattacks?
Resources: View Wendy Thomas on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Feb 8, 2022 • 29min
Cybersecurity & Privacy Protections
Nicola Searle, Digital Economy Fellow at the Institute for Creative and Cultural Entrepreneurship at Goldsmiths, University of London, joins Afternoon Cyber Tea with Ann Johnson on this episode focused on privacy and the cybersecurity of trade secrets. Nicola served as a government economist at the UK Intellectual Property Office from 2013 to 2015 and authored two Oxford University Press manuscripts on intellectual property. Before her academic career, she was a financial associate at Goldman Sachs in the US and Italy. Ann and Nicola discuss privacy trends and standards for 2022, why trade secrets seem more vulnerable to cyberattacks, and how companies can create ecosystems that provide their customers with comparable value for their data. In This Episode You Will Learn:
How to help future proof your data protections
Creating an ecosystem that helps protect intellectual property.
Why trade secrets can be more vulnerable to cyberattacks.
Some Questions We Ask:
What predictions do you have on privacy and standards in 2022?
Why are trade secrets more vulnerable to cyber attacks than intellectual property?
Why is transparency and creating awareness necessary as we collet more customer data?
Resources: View Nicola Searle on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Jan 25, 2022 • 24min
Protecting Journalism and Free Speech
Runa Sandvik, a modern-day hacker and computer security expert joins Ann Johnson on this week's episode of Afternoon Cyber Tea. Having a reputation as a staunch proponent of strong encryption, Runa was hired by The New York Times as their first senior director of information security. Ann and Runa discuss instituting new high-tech security measures at The Times, what types of skills she believes all journalists should possess today, and what she believes the tech industry should be doing more of when protecting against disinformation. In This Episode You Will Learn:
How journalists conduct research while dealing with online threats
When journalists need to start worrying about disinformation
Why we have an increase in cyberattacks on journalists
Some Questions We Ask:
How did you implement various security advancements at The New York Times?
Why are criminals attacking media companies?
What types of cyber skills should all journalists possess today?
Resources: Glitch-Cat View Runa Sandvik on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.

Jan 11, 2022 • 28min
Girl Security
Lauren Buitta, co-founder and CEO of Girl Security, shares how advancing girls, women, and gender minorities in national security leads to better cyber defense on today’s episode of Afternoon Cyber Tea with Ann Johnson. Lauren began as a policy analyst with the National Strategy Forum, a nonpartisan think tank, focusing on a wide range of national and global security issues, including domestic terrorism, transnational threats, and cybersecurity. Ann and Lauren discuss what led her to launch Girl Security, what the industry could do differently to help women grow in security, and why it is crucial to engage young girls in discourse about disinformation? In This Episode You Will Learn:
How to become involved with Girl Security
The barriers women face when searching for a security career
Why we are having issues finding new security talent
Some Questions We Ask:
How can we remove barriers for women in security?
Why is it important to involve young women in uncovering misinformation?
What are the reasons behind women only taking up 20% of our industry?
Resources: Girl Security View Lauren Buitta on LinkedIn View Ann Johnson on LinkedIn Related: Listen to: Security Unlocked: CISO Series with Bret Arsenault Listen to: Security Unlocked Discover and follow other Microsoft podcasts at microsoft.com/podcastsAfternoon Cyber Tea with Ann Johnson is produced by Microsoft and distributed as part of The CyberWire Network.