Can security certifications keep pace with the products they’re meant to assure? Recorded live at the International Common Criteria Conference (ICCC) in Rome, this special edition of Trust & Turbulence brings Ashit Vora and Shawn Geddis back for a candid conversation about the future of security certification.

We explore what happens when products evolve faster than their certificates, where AI and automation can help, and which decisions still need human judgment. We also tackle a potentially disruptive question: could vendors eventually conduct their own Common Criteria testing using scheme-approved tools—and what would that mean for evaluation labs?

This episode continues a conversation that began on the ICT Compliance Podcast. Start with Part 1, then join us here for the rest of the discussion, including a question from our live audience.