In this episode of Trust & Turbulence, Joshua Brickman sits down with two of the most influential voices in cybersecurity leadership: Mary Ann Davidson, former Chief Security Officer of Oracle, and Edna Conway, former Chief Security & Risk Officer at Cisco and Microsoft.

Drawing on decades of experience in product security, risk management, supply chain assurance, and cybersecurity policy, they discuss how organizations can build trust and resilience in an increasingly complex digital world.

Topics include:

• The origins of supply chain security
• Lessons from the SolarWinds attack
• CISO accountability and cyber resilience
• The EU Cyber Resilience Act and global regulation
• Software Bills of Materials (SBOMs)
• AI and product security
• Building a culture of trust and security

Rather than focusing on headlines, this conversation examines the deeper challenges facing technology providers, governments, and security leaders as they navigate an evolving threat landscape.

Guests:
Mary Ann Davidson – Former Chief Security Officer, Oracle

Edna Conway – Former Chief Security & Risk Officer, Cisco and Microsoft

Hosted by Joshua Brickman

Chapters

00:00 Introduction

03:26 Supply Chain Security Origins

18:33 Lessons from SolarWinds

35:47 How the EU Is Reshaping Cybersecurity

45:20 Can AI Make Software More Secure?

In this walkthrough of the EU Cyber Acts Conference focused on the EU Cyber Resilience Act, Joshua Brickman explains what the EUCRA is all about to the Common Criteria Users Forum virtual spring workshop. This was recorded on April 1, 2026.
00:00 Conference Recap
00:23 Cybersecurity Act Basics
02:20 CRA Marketplace Rules
03:43 Scope Digital Products
04:18 Penalties And Deadlines
06:03 Vulnerability Reporting Duties
09:05 CRA Is Law Now
09:38 Product Classes Overview
11:27 Standards And Gray Areas
13:41 Nokia Program Timeline
14:57 Support Period Liability
16:50 Q&A Product Families
19:30 Reporting Portal Uncertainty
21:24 Vertical Standards Trouble
22:37 Crypto Requirements
24:14 Worst Case Scenario
26:30 Conformity Modules And Labs
28:50 Liability And Resourcing Gaps
31:11 Call To Organize
31:55 Skills Needed and Conclusion