The Latest on Microsoft Security with Ann Johnson

Microsoft has its fingers in a lot of pots, but just how secure are said pots? On this episode, Corey is joined by Ann Johnson, Corporate Vice President and Deputy CISO of Microsoft's Customer Security Management Office. Ann talks about her 40-year professional journey and how it's culminated in her current role. Corey is known to “punch up” at the big guys in the tech industry, but he and Ann talk about the challenges of corporate leadership and being a public face in such a prominent company. Since it’s 2025, of course, they’re going to talk about AI’s pros and cons (and why it shouldn’t be used to make art). Show Highlights (0:00) Intro (0:51) The Duckbill Group sponsor read (1:25) What Ann's been up to since she and Corey last spoke (2:29) The makeup of Microsoft Security (4:28) The unique company culture at Microsoft (8:42) What's going on with Microsoft Azure (10:31) How Ann handles the immense pressure of working in Microsoft Security (14:13) The toxic nature of online criticism (19:57) The Duckbill Group sponsor read (20:24) The value of telling your leaders the truth (23:31) Ann's thoughts on the current state of AI (28:44) Properly defining what AI can and can't do (30:54) Why Ann helps fund multiple STEM scholarships (32:16) The need for the humanities alongside tech (33:38) Where you can find more from Ann Johnson About Ann Johnson Ann Johnson is Corporate Vice President and Deputy CISO at Microsoft. In this role, Ann drives all external engagement for the Microsoft Office of the CISO. She is a long-tenured, recognized thought leader on cybersecurity, published author, and a sought-after global speaker and digital author specializing in cyber resilience, online fraud, cyberattacks, compliance, and security. Ann challenges traditional schools of thought and cyber-norms–from the way the tech industry tackles cyber threats to the language it uses to communicate–and encourages the industry to get outside its comfort zones and expand how it addresses the evolving threat landscape with the power of technology and people. As a global cybersecurity leader and strategist, she is looking ahead at how today’s cybersecurity investments will impact tomorrow’s cybersecurity reality. Ann currently serves on the Board of Directors of N-Able, Human Security, Datavant, and is Member of the Board of Advisors for Cybersecurity Center of Excellence, WA and the Signal Cyber Museum Society. Ann is also an Executive Sponsor of the Microsoft Women in Cybersecurity Group. Links Ann Johnson’s LinkedIn: https://www.linkedin.com/in/ann-johnsons/ Microsoft Security: https://www.microsoft.com/en-us/security Afternoon Cyber Tea: afternooncybertea.com Sponsor The Duckbill Group: duckbillgroup.com