Megan Stifel, Chief Strategy Officer at the Institute for Security and Technology, joins Ann on this week’s episode of Afternoon Cyber Tea to discuss why cybersecurity must be treated as a shared governance responsibility, not just an IT issue. They explore how boardroom misalignment creates exposure across areas like workforce burnout, insider threats, and third-party risk, and why resilience, trust, and cross-industry collaboration, not prevention alone, are essential to managing today’s evolving cyber threats. Megan also shares insights from leading the Ransomware Task Force, highlighting the critical role of coordination and shared responsibility across sectors. 

Resources: 

View Megan Stifel on LinkedIn     

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

 Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network. 

Tony Sager, Senior VP & Chief Evangelist, Center for Internet Security, joins Ann on this week’s episode of Afternoon Cyber Tea to discuss how the accelerating pace of technology, AI, and global software dependencies are reshaping the cybersecurity landscape. He shares why the industry has struggled to move from reactive to proactive security, the importance of building strong foundational defenses, and why true accountability for cyber risk sits at the leadership and board level. Tony also explores how AI will both amplify threats and unlock new opportunities for defenders and closes with an optimistic view on the power of the cybersecurity community to drive meaningful progress. 

Resources: 

View Tony Sager on LinkedIn    

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.  

Fabio Catassi, Chief Information Officer at Mediterranean Shipping Company (MSC) joins Ann on this week’s episode of Afternoon Cyber Tea to discuss the unique cybersecurity challenges of pr(otecting global shipping infrastructure. He shares how digital systems, vessels, satellites, and logistics networks converge in modern maritime operations and why security failures can disrupt not just data, but global supply chains and economies. Fabio also explores MSC’s large-scale IT transformation, the importance of resilience over pure prevention, and how AI is beginning to improve areas like predictive maintenance, cargo visibility, and operational efficiency while still requiring strong governance and human oversight. 

Resources: 

View Fabio Catassi on LinkedIn   

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

Allie Mellen, cybersecurity analyst and author, joins Ann on this week’s episode of Afternoon Cyber Tea to discuss her new book Code War: How Nations Hack, Spy, and Shape the Digital Battlefield. Allie explores how cyber conflict is deeply connected to geopolitics, history, and national strategy, arguing that cyberattacks are not mysterious acts of chaos, but tools used by governments to pursue economic, military, and political goals. The conversation unpacks common misconceptions about nation-state cyber threats, why organizations of all sizes can become collateral damage in global conflicts, and how leaders should think about cyber risk in an era of increasing geopolitical tension.  

Resources: 

View Allie Mellen on LinkedIn   

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network. 

Cybersecurity leader and author George Finney joins Ann on this week’s episode of Afternoon Cyber Tea to explore how trust, communication, and culture shape effective security leadership. Drawing on his experience in higher education and enterprise environments, George explains why Zero Trust succeeds or fails based on people not technology, and how CISOs can better communicate risk to executives and boards. The conversation also dives into AI governance, relatable storytelling as a leadership tool, and why making cybersecurity approachable is essential for building resilient organizations. 

Resources: 

View George Finney on LinkedIn  

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.    

Dawn Song, Professor of Computer Science at UC Berkeley, joins Ann on this week’s episode of Afternoon Cyber Tea to explore how AI is rapidly reshaping the threat landscape. Dawn shares research from projects like Cyber Gym, demonstrating how frontier AI models are increasingly capable of identifying vulnerabilities, including zero-day exploits and generating proof-of-concept attacks, while also helping defenders automate patching and strengthen resilience.  

The conversation examines adversarial AI, agentic systems, data privacy risks, and the need for science and evidence-based AI policy. Dawn closes with an optimistic vision for the future: using AI-driven formal verification to build provably secure systems and move beyond the traditional cat-and-mouse security model. 

Resources: 

View Dawn Song on LinkedIn   

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.  

Rob Suárez, Vice President and Chief Information Security Officer at CareFirst BlueCross BlueShield joins Ann on this week’s episode of Afternoon Cyber Tea. In the conversation, Rob shares how his career path and personal philosophy have shaped a mission-driven approach to cybersecurity that places patient trust, safety, and privacy at the center of every decision. He discusses the unique challenges of securing a deeply interconnected healthcare ecosystem, the critical role of culture and cyber literacy across organizations, and why transparency and resilience are essential during incidents. The episode also explores secure-by-design principles, the ethical use of AI in healthcare, and how the CISO role is evolving toward a broader focus on trust, collaboration, and human impact.  

Resources: 

View Rob Suárez on LinkedIn   

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

 Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

 Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.  

David Gee, a veteran CISO, CIO, board advisor, and author, joins Ann Johnson, CVP of Cybersecurity, Microsoft, on this week’s episode of Afternoon Cyber Tea. Drawing on decades of experience and insights from his books, Gee explores the gap between theory and reality for security leaders, the role of imposter syndrome in professional growth, and why embracing discomfort is essential to effective leadership. The conversation examines how CISOs can balance risk management with business enablement, reset expectations with boards and executives, and build resilient, team-driven security cultures. Gee also shares perspectives on mentorship, long-term sustainability in the role, and how the CISO must evolve from a control-focused operator to a strategic influencer in an era shaped by AI, regulation, and constant change. 

Resources: 

View David Gee on LinkedIn 

View Ann Johnson on LinkedIn  

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.

On this special best of episode of Afternoon Cyber Tea, Ann revisits six standout conversations from the past year with Amy Edmondson, Christina Morillo, Frank X. Shaw, Hugh Thompson, Troy Hunt, and Jack Rhysider. Together, these moments highlight the evolving human and technical challenges shaping cybersecurity today, from trust and transparency to breach response, leadership under pressure, AI disruption, and the realities facing defenders on the front lines. This curated collection offers a fast-moving look at the insights, lessons, and big ideas that defined the season. 

Resources:  

View Ann Johnson on LinkedIn   

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

 Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network. 

Dr. Lorrie Cranor, Director of the CyLab Security and Privacy Institute at Carnegie Mellon University joins Ann Johnson, Corporate Vice President, Microsoft, on this week's episode of Afternoon Cyber Tea to discuss the critical gap between security design and real-world usability. They explore why security tools often fail users, the ongoing challenges with passwords and password less authentication, and how privacy expectations have evolved in an era of constant data collection. Dr. Cranor emphasizes the importance of user-centered design, practical research, behavioral insights, and simpler, more transparent systems to help CISOs build security programs that truly work for people. 

Resources:  

View Lorrie Cranor on LinkedIn            

View Ann Johnson on LinkedIn   

Related Microsoft Podcasts:  

Microsoft Threat Intelligence Podcast  

The BlueHat Podcast   

Uncovering Hidden Risks  

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Afternoon Cyber Tea with Ann Johnson is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.