Show Notes
Microsoft has its fingers in a lot of pots, but just how secure are said pots? On this episode, Corey is joined by Ann Johnson, Corporate Vice President and Deputy CISO of Microsoft's Customer Security Management Office. Ann talks about her 40-year professional journey and how it's culminated in her current role. Corey is known to “punch up” at the big guys in the tech industry, but he and Ann talk about the challenges of corporate leadership and being a public face in such a prominent company. Since it’s 2025, of course, they’re going to talk about AI’s pros and cons (and why it shouldn’t be used to make art).
Show Highlights (0:00) Intro (0:51) The Duckbill Group sponsor read (1:25) What Ann's been up to since she and Corey last spoke (2:29) The makeup of Microsoft Security (4:28) The unique company culture at Microsoft (8:42) What's going on with Microsoft Azure (10:31) How Ann handles the immense pressure of working in Microsoft Security (14:13) The toxic nature of online criticism (19:57) The Duckbill Group sponsor read (20:24) The value of telling your leaders the truth (23:31) Ann's thoughts on the current state of AI (28:44) Properly defining what AI can and can't do (30:54) Why Ann helps fund multiple STEM scholarships (32:16) The need for the humanities alongside tech (33:38) Where you can find more from Ann Johnson
About Ann Johnson Ann Johnson is Corporate Vice President and Deputy CISO at Microsoft. In this role, Ann drives all external engagement for the Microsoft Office of the CISO. She is a long-tenured, recognized thought leader on cybersecurity, published author, and a sought-after global speaker and digital author specializing in cyber resilience, online fraud, cyberattacks, compliance, and security.
Ann challenges traditional schools of thought and cyber-norms–from the way the tech industry tackles cyber threats to the language it uses to communicate–and encourages the industry to get outside its comfort zones and expand how it addresses the evolving threat landscape with the power of technology and people. As a global cybersecurity leader and strategist, she is looking ahead at how today’s cybersecurity investments will impact tomorrow’s cybersecurity reality.
Ann currently serves on the Board of Directors of N-Able, Human Security, Datavant, and is Member of the Board of Advisors for Cybersecurity Center of Excellence, WA and the Signal Cyber Museum Society. Ann is also an Executive Sponsor of the Microsoft Women in Cybersecurity Group.
Links Ann Johnson’s LinkedIn: https://www.linkedin.com/in/ann-johnsons/ Microsoft Security: https://www.microsoft.com/en-us/security Afternoon Cyber Tea: afternooncybertea.com
Sponsor The Duckbill Group: duckbillgroup.com
More from Screaming in the Cloud
Corey Quinn sits down with Pasquale DeMaio, VP of Amazon Connect Customer , to talk about how Agentic AI is reshaping customer service, and why replacing humans isn’t necessarily the goal. They dig into the evolution of Amazon Connect Customer from a cloud-based contact center into an AI-powered customer experience platform, where agentic AI, real-time customer context, voice technology, and deterministic workflows work together to actually solve problems.
What happens when open source, AI, and decades of database technology collide?
AWS VP of Global Networking Matt Rehder joins Corey Quinn to pull back the curtain on the massive network infrastructure behind AWS. They explore resiliency at scale, AWS’s move toward flatter networks, the advantages of building custom hardware, and why AI is making networking exciting again. Show Highlights: (01:08) Meet AWS Networking Lead (02:01) Why AWS Avoids Global Outages (05:23) RNG Flat Network Explained (10:08) Overbuild Capacity And Custom Hardware (17:37) VPC Virtual Network Origins (19:50) Why TCP Still Wins (20:38) SRD Inside AWS (21:54) Opt In SRD Transport (25:31) Networks As Utilities (27:24) Learning And Growing Engineers (29:22) Training Talent In House (31:27) AI Rekindles Networking (34:26) Where To Learn Networking
On this episode of Screaming in the Cloud, Corey Quinn sits down with Adam Larsen, Principal Developer at Aurora Educational Technologies, to explore what technology and AI should actually look like in K-12 education. They discuss using tech to empower teachers rather than replace them, the risks of outsourcing critical thinking to AI, student data privacy, and what happens when schools become dependent on tools that may not be affordable forever. Adam also shares how AWS became his go-to platform for solving complex education data problems, and why sometimes the best technology is simply the one that reliably gets the job done.
AI-generated code is no longer just producing low-quality pull requests. According to AWS Principal Engineer and Valkey core maintainer Madelyn Olson, the quality of AI-assisted contributions has improved dramatically in just the last few months. In this episode of Screaming in the Cloud, Corey Quinn and Madelyn discuss how AI is changing open source development, the growing burden on maintainers, and how projects like Valkey are using AI to find bugs, improve security, and harden production systems. They also explore Valkey's continued growth, the future of software development, and why experience, operational knowledge, and community still matter in an age where code is becoming cheaper to create. *Since this episode was recorded without video, we thought it was the perfect opportunity to get creative with AI!