This episode re-frames post-quantum cryptography (PQC) from a technical future risk into a present-day governance failure. Brian Couzens argues that quantum computing did not create the cryptographic problem organizations face it exposed it.

For decades, cryptography has operated as an invisible layer of digital infrastructure: unmanaged, unowned, and largely unmapped. Boards assumed it “just worked.” Now, with the reality of Harvest Now, Decrypt Later and long-lived data exposure, that complacency has turned into structural risk.

The core message is clear: this is not an algorithm upgrade problem. It is a fiduciary accountability problem.

Cybersecurity is operational. Cryptography is structural. If the structural foundations are weak, no amount of detection, patching, or response will compensate. And when encrypted data is intercepted today and decrypted in the future, the accountability does not sit with IT it sits with the board.

Waiting for a definitive quantum timeline is not strategy. It is delay. And delay in this context may already constitute negligence.

Takeaways:

• Quantum Didn’t Create the Risk, It Exposed It. The real issue is the unmanaged cryptographic estate: no visibility, no ownership, no lifecycle governance.
• This Is a Governance Failure, Not a Technology Upgrade. PQC is often framed as an IT transformation. Brian argues it is a risk transformation that belongs at board and CRO level.
• Harvest Now, Decrypt Later Is a Present Exposure. If long-lived data is stolen today, future decryption eliminates any chance of remediation. You cannot “patch” broken cryptography after the fact.
• Compliance Is Not Protection. Regulation governs algorithm choice, not lifecycle management, exposure windows, or migration timing. Organizations can be compliant on paper and exposed in reality.

SoundBytes:

• “Quantum didn’t create the problem. It exposed it.”
• “Crypto isn’t operational noise — it’s structural risk.”
• “You can’t patch broken cryptography.”
• “This isn’t a risk. It’s an issue. It’s going to happen.”
• “Compliance is static. Cryptographic risk moves.”

If you want to reach out to Brian you can find his detail over at https://sitg-consulting.com/

In this episode, Francis Gorman speaks with Maxwell Denega, the founder and CEO of Quantum Chain, about the urgent need for quantum-resistant financial systems. Maxwell shares his personal journey that led to the creation of Quantum Chain, emphasizing the importance of addressing quantum threats in the financial sector. The conversation delves into misconceptions surrounding quantum-resistant blockchain technology, the challenges of building secure systems, and the potential risks posed by the convergence of quantum computing and AI. Maxwell stresses the need for vigilance in choosing financial products and understanding the underlying technologies to ensure safety in an evolving digital landscape.

Takeaways

• Maxwell's journey from losing $4.5 million to creating Quantum Chain.
• Quantum computing is no longer a distant threat; it's imminent.
• The importance of building quantum-safe systems from day one.
• Misconceptions about quantum resistance in blockchain are prevalent.
• Regulators are just beginning to understand quantum threats.
• AI and quantum computing together pose significant risks.
• Choosing financial products wisely is crucial in today's landscape.
• The need for proprietary technology in quantum resistance.
• Harvest Now Decrypt Later (HNDL) is already a concern.
• The convergence of AI and quantum computing is a game changer.

Sound Bites

• "I could have taken another six years."
• "Quantum attacks are going to be happening."
• "It's a scary time."

In this episode, Francis Gorman speaks with Manuel Tomas, a cloud and AI solutions architect, about the challenges and realities of developing AI systems. They discuss the importance of making AI production-ready, the limitations and hype surrounding AI technologies, and the critical need for human oversight in AI applications. Manuel shares insights from his recent projects, emphasizing the necessity of evaluating AI outcomes and the implications of indemnification and insurance in the AI landscape. The conversation also touches on the risks of over-reliance on AI and the future security challenges that may arise as AI technologies evolve.

Takeaways

• Manuel emphasizes the importance of making AI systems production-ready and accountable.
• He highlights the need for evaluation-driven development in AI projects.
• The unpredictability of AI outcomes necessitates a rigorous evaluation process.
• Many AI frameworks have similar capabilities, contrary to initial expectations.
• The hype surrounding AI often oversells its capabilities and leads to misconceptions.
• Over-reliance on AI can result in a loss of critical thinking and questioning.
• Insurance companies are beginning to exclude AI from coverage due to liability concerns.
• Human oversight is essential in high-stakes AI applications to mitigate risks.
• Organizations should prioritize understanding technology before developing strategies.
• The future of AI security will involve managing complex multi-agent systems.

Sound Bites

• "The hype around AI is oversold."
• "You can't automate human judgment."
• "There's no growth in comfort."

Contact Manuel:

LinkedIn: https://www.linkedin.com/in/manuel-tomas-estarlich

Website: https://levelup360.pro/

In this episode of the Entropy podcast, host Francis Gorman engages with Jonathan Aberman, CEO and co-founder of Hupside, to explore the concept of 'original intelligence' in the context of artificial intelligence (AI). Jonathan shares his extensive background in venture capitalism and education, emphasizing the need for a new framework that values human originality amidst the rise of generative AI. He discusses how AI, while efficient, often leads to homogenization in business practices, making differentiation crucial for companies to thrive. Jonathan argues that businesses must leverage human creativity and insight to stand out in an increasingly AI-driven landscape, warning against the dangers of relying solely on technology for innovation.

Takeaways

• AI is a tool, not a deterministic force.
• Businesses must compete on differentiation, not just efficiency.
• Originality is key to standing out in a homogenized market.
• Education needs to adapt to include AI as a tool for creativity.
• Servant leadership will become more important in tech-driven companies.

Sound Bites

• "AI is a self-referential echo chamber."
• "We have to reframe education."
• "Technology isn't deterministic; it's a tool."

Information discussed:

If you want to access some of the resources discussed on this episode you can find them on the Hubside website: https://www.hupside.com/ 

For international listeners outside the US you can use the following postcode: 99999

In this episode of the Entropy Podcast, host Francis Gorman engages with Anne Leslie, the head of cloud risk EMEA at IBM, to explore the intricate relationship between cybersecurity, digital transformation, and regulatory frameworks. They delve into the implications of the Digital Operational Resilience Act (DORA), discussing common misconceptions organizations have about its requirements. Anne emphasizes that DORA is not merely a documentation exercise but demands a genuine commitment to operational resilience, continuous improvement, and a deep understanding of technology landscapes and business processes.

The conversation shifts to the topic of sovereignty in cloud computing, particularly in the context of European regulations and geopolitical tensions. Anne shares insights on how organizations are grappling with the balance between data sovereignty and operational resilience, highlighting the challenges posed by conflicting regulatory demands. The discussion also touches on the risks associated with cloud services, post quantum readiness and the importance of testing assumptions, along with the need for organizations to remain vigilant and proactive in their risk management strategies. As they conclude, Anne offers valuable advice for women in tech, encouraging them to share their voices and experiences generously, fostering connection and community in the industry.

Takeaways

• DORA demands more than documentation; it requires actual capability.
• Organizations often silo responsibilities, leading to gaps in resilience.
• Continuous improvement is essential; resilience is an ongoing process, not a project with an end date.
• Understanding the purpose of sovereignty is crucial for effective data management.
• Testing assumptions and exercising response plans are vital for risk management.

Sound Bites

• "DORA demands far more than robust documentation."
• "Sovereignty is an incredibly emotive topic."
• "It's the ostrich effect, the head in the sand."

If your loving the show check out our swag over on Etsy: https://www.etsy.com/shop/theentropypodcast/?etsrc=sdt

In this conversation, Francis Gorman and Glen McCracken explore the complexities of AI in modern organizations, discussing themes such as intellectual atrophy, the speed of AI versus organizational slowness, pilot purgatory in AI implementations, the necessity of a coherent AI strategy, the value of narrow use cases, job displacement due to AI, and the current state of investment and hype in the AI sector. Glen emphasizes the importance of understanding business rules and data quality before implementing AI, and he shares insights on how organizations can effectively leverage AI while maintaining accountability and trust.

Takeaways

• AI is often seen as a silver bullet, but it reveals underlying issues.
• Organizations struggle with the speed of AI versus their own operational slowness.
• Pilot purgatory occurs when organizations rush AI implementations without groundwork.
• An AI strategy should be integrated into broader technology and product strategies.
• Narrow use cases for AI often yield the most value and trust.
• Job displacement is a concern, but new roles may emerge as well.
• AI can augment human roles but should not fully replace them.
• The current investment landscape in AI is characterized by both hype and potential.
• Trust in AI systems is built through transparency and understanding.
• We're still in the early stages of AI adoption, with much potential ahead.

Sound Bites

• "AI is a revealer, not just an amplifier."
• "AI can augment but not replace human roles."
• "Hype attracts attention and funding."

Join the community beyond the podcast. Shop our Entropy inspired products here: https://www.etsy.com/shop/theentropypodcast/?etsrc=sdt

In this episode of the Entropy Podcast, host Francis Gorman speaks with Elizabeth Bullock, a frontline leader who spent three years in Ukraine during the ongoing conflict. Elizabeth shares her journey from a technology startup career to driving into Ukraine just days after the Russian invasion, motivated by a sense of urgency and responsibility. She discusses the realities of life in a war zone, the resilience of the Ukrainian people, and the importance of understanding the broader implications of the conflict beyond just military actions. Elizabeth emphasizes the need for awareness of hybrid warfare tactics, including disinformation and cyber threats, which extend beyond Ukraine and pose risks to Western societies.

Throughout the conversation, Elizabeth highlights the fragility of the systems we take for granted in the West, urging listeners to recognize the potential vulnerabilities in critical infrastructure and the psychological impacts of disinformation. She calls for unity and resilience in the face of these challenges, drawing parallels between the experiences of Ukrainians and the need for Western societies to remain vigilant against external threats. The episode concludes with a powerful message about the importance of maintaining focus on fundamental freedoms and values, encouraging listeners to reflect on their own responses to outrage and division.

Takeaways

• "I had an overriding feeling of this cannot and must not be happening again."
• "The easiest way to win a war is by never firing a bullet."
• "If we let ourselves get distracted by them, we will lose the things that are the most important."
• "Russia sees Western ideology and values as a fundamental threat."
• "We have to recognize that there may be a seed of disinformation that has been planted that is slowly growing into something a lot worse for us."

Sound Bites

• "A divided nation can be conquered easily."
• "Does my outrage keep cohesion for this country, or does it benefit Russia?"

You can find Elizabeth over at: www.prammavox.com 

In this conversation, Dr. Alex Tyrrell discusses the integration of AI in healthcare, emphasizing the importance of trust, expert involvement, and responsible practices. He outlines the challenges faced in clinical workflows, the future potential of AI technologies like virtual twins, and the regulatory landscape. The discussion also highlights the need for organizations to manage shadow AI and innovate within regulated environments, providing valuable insights for leaders looking to implement AI solutions effectively.

Takeaways

• We don't compromise on trust.
• Expert AI by experts for experts.
• AI solutions that don't fatigue the user.
• You can't just release AI into the wild.
• The path to AI value is not linear.
• AI is tying together stakeholders more closely.
• You have to engage your workflow.
• You really have to define the problem statement.
• Stay curious.
• Two in a box is an effective strategy.

Sound Bites

"We don't compromise on trust."
"Expert AI by experts for experts."
"Stay curious."

In this episode of the Entropy podcast, host Francis Gorman speaks with Tim D. Williams, co-founder and CTO of ProteQC, about the evolving landscape of cybersecurity, particularly in the context of post-quantum cryptography. They discuss the importance of learning from past mistakes, the economics of security architecture, and the critical role of cryptography in protecting data. Tim emphasizes the need for organizations to develop a comprehensive cryptography strategy and the importance of human expertise in navigating complex security challenges. The conversation also touches on the impact of AI on security architecture and the future of cybersecurity education.

Takeaways

• Tim shares a significant learning experience from his early career in cybersecurity.
• Understanding the economics of security is essential for effective architecture.
• Organizations must prioritize cryptography in their security strategies.
• Pre-discovery activities are crucial for effective cryptographic readiness.
• Resource allocation in cybersecurity must be precise and well-planned.
• Estimating costs for quantum readiness is challenging but necessary.
• Human expertise is irreplaceable in cybersecurity, especially with legacy systems.
• AI's role in security must be carefully managed to ensure accountability.
• Education plays a vital role in preparing the next generation of cybersecurity professionals.
• The future of cybersecurity will require a multidisciplinary approach.

Sound Bites

• "Attacks always get better, they never get worse."
• "AI can't replace the need for human expertise."
• "We need to know who is in control of the agents."

You can find ProteQC website here: https://ProteQC.com 

Cryptography course recommended by Tim:

https://www.coursera.org/learn/crypto?utm_medium=sem&utm_source=gg&utm_campaign=b2c_emea_x_multi_ftcof_career-academy_cx_dr_bau_gg_pmax_gc_s1_en_m_hyb_25-12_mobileonly&campaignid=23325041170&adgroupid=&device=m&keyword=&matchtype=&network=x&devicemodel=&creativeid=&assetgroupid=6639819582&targetid=&extensionid=&placement=&gad_source=1&gad_campaignid=23315894040&gbraid=0AAAAADdKX6aeXSiSl2UDGiv575em-o8qm

In this episode of the Entropy Podcast, host Francis Gorman speaks with Alethe Denis, a senior security consultant at Bishop Fox, about her experiences in social engineering and the DEFCON community. Alethe shares her journey into the world of cybersecurity, her participation in the Social Engineering Capture the Flag contest, and the strategies she employed to succeed. The conversation delves into the ethics of social engineering, the impact of AI on security practices, and the importance of understanding human behavior in cybersecurity. Alethe also offers advice for those looking to enter the field of social engineering, emphasizing the value of mentorship and foundational knowledge.

Takeaways

• Alethe Denis emphasizes the welcoming nature of the DEFCON community.
• The Social Engineering Capture the Flag contest is a significant event for learning and showcasing skills.
• Understanding human psychology is crucial for effective social engineering.
• Ethics play a vital role in social engineering practices.
• AI is changing the landscape of social engineering and cybersecurity.
• Organizations need to align their testing with realistic attack scenarios.
• Mentorship is essential for those starting in social engineering.
• Building rapport is a key strategy in social engineering.
• Human behavior is often the weakest link in cybersecurity.
• Continuous learning and adaptation are necessary in the field of cybersecurity.