Trust and Turbulence

Josh Brickman

Joshua Brickman spent more than 20 years working in cybersecurity certifications, government assurance, and global security regulation. This podcast explores the intersection of security, AI, regulation, and trust — from Common Criteria and FIPS 140 to post-quantum cryptography, supply chain security, cloud assurance, and the EU Cyber Resilience Act. The show turns complex technical and policy issues into practical conversations for businesses, policymakers, technologists, and consumers.

Episodes

  1. Jul 3

    Episode 3: The Perpetual Student with Jim West

    In this episode of Trust and Turbulence, I sit down with cybersecurity leader, author, podcaster, and lifelong learner Jim West. From his early days repairing computers at CompUSA to advising senior government leaders on cybersecurity, quantum computing, and national security, Jim's career has been anything but ordinary.We discuss cybersecurity, AI, quantum computing, the future of digital trust, life in the Middle East, career development, and why Jim proudly calls himself a "perpetual student."Whether you're a cybersecurity professional, technology enthusiast, or simply curious about how today's leaders navigate a rapidly changing world, this conversation offers valuable insights and plenty of memorable stories.Topics Discussed• Lifelong learning and professional growth• Cybersecurity leadership and national security• Commercial Solutions for Classified (CSfC)• Quantum computing and post-quantum cryptography• Artificial intelligence and deepfakes• International travel and cultural perspectives• Movies, creativity, and thinking differentlyGuest: Jim West, Author, Podcaster, Cybersecurity ExpertHosted by: Joshua Brickman 00:17 Meet Jim West02:14 The Perpetual Student Mindset13:25 Jim's Origin Story in IT & Cyber14:26 Iraq & Working Near the President17:18 25+ Years Living Overseas19:49 CSfC & Common Criteria Deep Dive38:32 Cybersecurity for Everyday Life46:00 The Quantum Threat & Post-Quantum Crypto56:27 Movie Review Wrongs01:05:32 Where to Find Jim WestMusic by Mikhail Smusev from PixabaySocials:LinkedIn: https://www.linkedin.com/in/jimwest1/https://jimwestauthor.com/https://topcyberpro.com/

    1h 7m

  2. Jun 10

    Technical Competence Requirements For CRA Notified Bodies Quick Summary

    This is a short pod about the release by ENISA entitled "Technical Competence Requirements for CRA Notified Bodies." You can access the document directly here: https://www.enisa.europa.eu/publications/technical-competence-requirements-for-cra-notified-bodies

    3 min

  3. May 30

    Trust, Resilience & the Future of Cybersecurity | Mary Ann Davidson & Edna Conway

    In this episode of Trust & Turbulence, Joshua Brickman sits down with two of the most influential voices in cybersecurity leadership: Mary Ann Davidson, former Chief Security Officer of Oracle, and Edna Conway, former Chief Security & Risk Officer at Cisco and Microsoft. Drawing on decades of experience in product security, risk management, supply chain assurance, and cybersecurity policy, they discuss how organizations can build trust and resilience in an increasingly complex digital world. Topics include: • The origins of supply chain security• Lessons from the SolarWinds attack• CISO accountability and cyber resilience• The EU Cyber Resilience Act and global regulation• Software Bills of Materials (SBOMs)• AI and product security• Building a culture of trust and security Rather than focusing on headlines, this conversation examines the deeper challenges facing technology providers, governments, and security leaders as they navigate an evolving threat landscape. Guests:Mary Ann Davidson – Former Chief Security Officer, Oracle Edna Conway – Former Chief Security & Risk Officer, Cisco and Microsoft Hosted by Joshua Brickman Chapters 00:00 Introduction 03:26 Supply Chain Security Origins 18:33 Lessons from SolarWinds 35:47 How the EU Is Reshaping Cybersecurity 45:20 Can AI Make Software More Secure?

    55 min

  4. May 19

    EU Cyber Resilience Act Explained

    In this walkthrough of the EU Cyber Acts Conference focused on the EU Cyber Resilience Act, Joshua Brickman explains what the EUCRA is all about to the Common Criteria Users Forum virtual spring workshop. This was recorded on April 1, 2026. 00:00 Conference Recap00:23 Cybersecurity Act Basics02:20 CRA Marketplace Rules03:43 Scope Digital Products04:18 Penalties And Deadlines06:03 Vulnerability Reporting Duties09:05 CRA Is Law Now09:38 Product Classes Overview11:27 Standards And Gray Areas13:41 Nokia Program Timeline14:57 Support Period Liability16:50 Q&A Product Families19:30 Reporting Portal Uncertainty21:24 Vertical Standards Trouble22:37 Crypto Requirements24:14 Worst Case Scenario26:30 Conformity Modules And Labs28:50 Liability And Resourcing Gaps31:11 Call To Organize31:55 Skills Needed and Conclusion

    34 min
  • 4 Episodes

About

Joshua Brickman spent more than 20 years working in cybersecurity certifications, government assurance, and global security regulation. This podcast explores the intersection of security, AI, regulation, and trust — from Common Criteria and FIPS 140 to post-quantum cryptography, supply chain security, cloud assurance, and the EU Cyber Resilience Act. The show turns complex technical and policy issues into practical conversations for businesses, policymakers, technologists, and consumers.

Information

  • Creator
    Josh Brickman
  • Years Active
    2K
  • Episodes
    4
  • Rating
    Clean
  • Copyright
    © Josh Brickman
  • Show Website
    Trust and Turbulence