The Entropy Podcast

Emotional Intelligence: Sympathy Is Blocking Your Empathy with Dr. Andreas E. Wagner

What if the biggest barrier to innovation isn’t your technology, but how your people feel? In this episode of the Entropy Podcast, Francis Gorman is joined by Dr. Andreas E. Wagner to explore the human side of innovation and why emotional intelligence deserves a central place in how we lead, collaborate and navigate change. Andreas explains how teams can move from “playing not to lose” towards “playing to win”, why emotional intelligence is a learnable skill, and how leaders can build trust through their everyday behaviour. They explore empathy, digital distraction and the importance of creating an environment where people feel safe to speak up, experiment and learn from mistakes. From gratitude and mindful breathing to leaving space between meetings, this conversation offers practical ways to become more present, manage emotional reactions and make room for better connections. If you’re leading people through change or rethinking how your team innovates, this episode starts with a simple challenge: start with yourself. Key takeaways Innovation depends on people. Technology and processes need people who feel able to act, experiment and contribute. Think big, start small, then scale. Set a direction, test manageable ideas and use what you learn to decide what grows. Emotional intelligence can be developed. Self-awareness, emotional regulation and understanding others take deliberate practice. Model the behaviour you want to see. Building a more emotionally intelligent team begins with your own attention, habits and responses. Notice your emotional state. Recognising how you feel can help you respond more constructively and understand others. Make space to reset. Gratitude, human connection, mindful breathing and gaps between meetings are practices Andreas uses to manage stress. Create safety for learning. Invite different perspectives, encourage people to speak openly and distinguish useful experimentation from avoidable mistakes. Soundbites: “You are the company. So that means it is a people thing.” “Start with yourself, walk the talk.” “Emotional intelligence is a learnable skill.” “Sympathy is a blocker for empathy for me, to be straightforward.” “If you're distracted you can't be one hundred percent with someone.” “We as human beings are hardwired to connect.” “Failure and innovation for me these are twins.”

• Transcript

AI Scams and the Death of Trust with Frank Riccardi

A familiar voice. A convincing email. A request that catches you at exactly the wrong moment. What happens when the signals we rely on to trust someone can be manufactured? Cybersecurity expert and author Frank Riccardi joins Francis Gorman on The Entropy Podcast to unpack how AI is changing the hacker’s playbook. From personalized phishing attacks and voice cloning to deepfakes and crypto romance scams, Frank explains why the most effective weapon is often our willingness to trust. Drawing on his experience managing cybersecurity incidents in healthcare, Frank shares practical ways to protect yourself, your family and your organisation. The conversation also explores the human trafficking behind scam operations, the reality of responding to ransomware, and why companies need to stop blaming people for failures their systems should anticipate. Key Takeaways AI makes phishing personal. Scammers can use information about your life and work to create messages that feel credible and familiar. Nobody is immune to a scam. Expertise doesn’t eliminate vulnerability to exhaustion, urgency or emotional pressure. A familiar voice isn’t proof of identity. Verify unexpected requests through a separate, trusted channel. A family challenge phrase can add another check. Strong security starts with the basics. Unique passwords, multifactor authentication, patching and backups remain central to cyber resilience. Romance scams have multiple victims. Frank discusses how people forced into scam operations can themselves be victims of trafficking and abuse. Companies share responsibility. Resilient systems should account for predictable human mistakes instead of making employees and customers the default scapegoats. Your own skills still matter. Critical thinking and subject knowledge help you question AI outputs and recognise when the technology gets things wrong. Soundbites: “It’s not the technology that pwns you, it’s the trickery.” “Nobody’s unscammable.” “We’ve got to stop designing systems that allow a catastrophic cyber attack for perfectly predictable human behavior.” “Cybersecurity is a shared accountability.” “If the tool leads you, it’s going to lead you down the wrong path.”

You Can’t Automate Trust: The Power of Storytelling with Christopher Nelson

What happens when we automate more of our work but lose the ability to connect with each other? Francis Gorman welcomes storyteller, producer and leadership coach Christopher Nelson to The Entropy Podcast to explore why storytelling matters in an increasingly distracted, AI-driven world. Drawing on his experience behind the scenes of Dragons’ Den and his work with business leaders, Christopher explains how stories capture attention, build trust and help people work together. He introduces PRISM, his practical storytelling framework, and shares how one banking leader used stories of success and failure to change the way his teams connected and learned. From the hidden cost of a frictionless digital life to the ingredients of a compelling pitch, this conversation explores what it takes to make people care and why human relationships deserve as much attention as the technology transforming our work. Key Takeaways: • Individual productivity doesn’t guarantee effective teamwork. Christopher argues that collaboration depends on the relationships we deliberately build. • Everyday interactions give us opportunities to practise listening, navigating disagreement and understanding other people. Removing social friction can also remove opportunities to develop those skills. • Use PRISM to structure a compelling story: a Provocative opener, a Relatable individual, an Inflection or challenge, the Struggle, and a Moral or lesson. • Make storytelling part of your team’s routine. Sharing specific wins and failures can help colleagues learn from experience and recognise each other’s contributions. • Give people a reason to care. Relatable characters, meaningful stakes and uncertainty about the outcome help sustain attention. • Turn complex ideas into concrete stories. A clear example can make an abstract business or technical challenge easier to understand. • A compelling pitch brings the person behind the product into focus. Christopher’s Dragons’ Den experience shows how aspiration and struggle can make a business story memorable. SOUNDBITES: “You can't automate human relationships.” “Productivity happens not just when you're working, but in the spaces between as well.” “Before you can tell a story, you must first have their attention.” “Stories are like a value delivery system, and the value in that particular system is the lesson at the end.” “Being out in the real world was like going to a social competence gym.” “I think entrepreneur is just another word for storyteller.” Explore Christopher’s work at storycharged.com. Follow The Entropy Podcast for more conversations that challenge assumptions, spark ideas and keep you curious.

Cyber Warfare, Killer Drones and Nuclear Risk with Chris Kubecka

What happens when cyber warfare moves beyond screens and takes down the systems people need to survive? Cyber warfare specialist Chris Kubecka joins Francis Gorman to recount her escape from Kyiv as Russia’s invasion began, while cyber attacks disrupted banks, communications and border systems. From the vulnerability of nuclear infrastructure to the rise of drone warfare and autonomous weapons, Chris explores how digital attacks collide with physical threats. They discuss AI-generated disinformation, fibre-optic drones, Russia’s hybrid warfare tactics and the risks of trusting military AI without reliable data and human oversight. The conversation closes with practical lessons in emergency preparedness: cash, paper maps, alternative communications and preparing for the loss of services we take for granted. A firsthand perspective on cyber security, modern warfare and the human consequences of technological disruption. SOUNDBYTES “You want to hear a friendly voice and you're going through hell when you can't.” “They want to soften up the civilian population by psychologically harassing them with drone incidents.” “So we're relying on killing people and hoping that the military's Chat GPT has been updated to its newest model.” “Don't always expect an internet connection. Don't always expect that your GPS is going to work.” KEY TAKEAWAYS • Cyber warfare has immediate human consequences. Disrupted banking, communications and identity systems can make escaping a conflict more difficult. • Nuclear infrastructure threats extend beyond physical damage. Disruption, uncertainty and fear can themselves become instruments of warfare. • Drone warfare is changing rapidly, from fibre-optic control to autonomous systems and the growing overlap between cyber and physical operations. • AI-generated disinformation can obscure real military capabilities, making authentic evidence harder to identify and assess. • Military AI demands reliable data and human oversight. Automated decisions require scrutiny, particularly when lives are at stake. • Emergency preparedness starts with simple backups. Paper maps, available cash, water supplies, warmth and alternative communications can help when digital services fail. Link to the article Chris published on substack below: Preparing for Drone Warfare in Europe Basic Preparation Before Flying Death Machines Hunt You Down https://secevangelism.substack.com/p/preparing-for-drone-warfare-in-europe

Leading Through Uncertainty: How to Decide with Half the Map With Melanie Marshall

Former BBC foreign journalist Melanie Marshall spent more than 20 years reporting from conflict zones and moments of upheaval across six continents. In this episode, she reveals what those experiences taught her about leadership, resilience and making decisions when you don’t have the full picture. Melanie and Francis explore why uncertainty does not mean powerlessness, how great leaders create space for uncomfortable truths, and why plans must change the moment they meet reality. They also examine AI’s growing influence on human judgment, the dangers of easy answers and why businesses must resist handing over their agency. From a Ukrainian community that fought back against an invasion to a life-saving decision on a road in Syria, Melanie shares remarkable stories that demonstrate courage, trust and leadership under pressure. Key Takeaways: Uncertainty is not powerlessness it creates both risk and opportunity. Effective leaders make decisions with incomplete information. A plan must evolve when it comes into contact with reality. Leadership means confronting uncomfortable truths before the window for action closes. Trust must be built before a team reaches a crisis. The quietest person in the room may recognize your greatest risk or opportunity. AI should support human judgment, not replace curiosity, accountability or agency. Resilience often begins with identifying the resources already available to you. Human connection remains one of our strongest defenses against fear and division. Courage is often as simple as taking the next step together. Soundbites: “Uncertainty is not powerlessness.” “The plan survives usually until you leave the door.” “You’re deciding with the map actively on fire.” “Bravery is simply one foot in front of the other.” “Leadership is doing the uncomfortable thing.” “We need a little grit to make the pearl.” “Go out into the world and talk to a real person.” “If the world feels scary, ask yourself: What is the opportunity here, and what resources do I have available?” Listen now for a compelling conversation about leading through uncertainty, decision-making under pressure, resilience, AI, human connection and the courage to move forward without all the answers.

• Transcript

Part 2: The Price of Convenience: AI, Surveillance and the Fight for Privacy with Paul Walsh

If you haven’t done so already check out part 1. Apple podcast: https://podcasts.apple.com/ie/podcast/the-entropy-podcast/id1795927497?i=1000788046671 Spotify: https://open.spotify.com/episode/2EiCIRM6HhicJco4c8ZQSm?si=_MfmoPrzTXe6TiRIgUU-XQ&utm_source=copy-link In Part 2 of Francis Gorman’s conversation with technologist and entrepreneur Paul Walsh, the discussion moves from online identity into a much broader question: what happens to privacy when AI becomes embedded in the tools we use every day? Paul argues that the risks are no longer confined to social media platforms. As AI assistants gain access to messaging, email, devices and personal data, he raises concerns about what that means for end-to-end encryption, confidential conversations and the expectation that private communication remains private. From there, the conversation widens into anonymity, censorship, AI-driven decision-making and the increasingly blurred relationship between governments, regulators and major technology companies. For Paul, the danger isn’t necessarily one dramatic moment where privacy disappears. It is the gradual accumulation of systems built for convenience, safety or security that ultimately create much greater capabilities for surveillance and control. Key Takeaways End-to-end encryption is only as strong as its endpoints. Paul argues that giving an AI assistant access to messages before encryption or after decryption can undermine the practical privacy users expect from encrypted communication. Convenience comes with a privacy trade-off. AI tools can make it easier to search conversations, schedule actions and retrieve information but those capabilities may require extensive access to sensitive personal data. Privacy doesn’t require justification. One of Paul’s central arguments is that people should not have to prove why they deserve privacy or anonymity. Identity verification changes the consequences of being banned online. Paul warns that if every account becomes permanently linked to a government identity, losing access to a platform could become far more consequential. The chilling effect may matter as much as censorship itself. If people believe their identity is permanently attached to everything they say, Paul argues they may begin censoring themselves before anyone else has to. Soundbites “If somebody can read the message before you send it and before it’s encrypted, or after somebody sends you a message and after it’s decrypted, then you defeat the purpose.” “People make a decision and think it was their own idea.” “We have people lobbying for child safety, not realizing that they’re actually begging the government to surveil them.” “Convenience and security have always been at odds.” Part 2 leaves listeners with a difficult question: how much privacy are we willing to exchange for convenience, safety and access to increasingly powerful technology? Paul’s message isn’t to abandon AI or digital platforms. It is to understand the systems being built around us, question who benefits from them, and protect the ability to communicate, participate and speak without unnecessary surveillance. Because, as Paul puts it: “I don’t have to explain to you why I want privacy.”

• Transcript

Part 1: The Price of Convenience: AI, Surveillance and the Fight for Privacy with Paul Walsh

In Part 1 of this two-part conversation, Francis Gorman sits down with technologist and entrepreneur Paul Walsh to explore a question that has followed the internet for nearly three decades: how do we know what and who to trust online? Paul traces the problem back to the early web and his work on content classification and verification standards, explaining why today’s challenges aren’t necessarily new they’ve simply been amplified by AI, deepfakes, phishing and increasingly sophisticated social engineering. The conversation then turns to the growing push for online age verification and social media restrictions. Paul draws a sharp distinction between content moderation and access control, arguing that modern devices already give parents powerful tools to manage what children can access. But his bigger concern is what comes next: when “robust age verification” evolves into mandatory identity verification for entire populations. Key Takeaways The trust problem hasn’t changed it has scaled. Social engineering and impersonation remain at the heart of much cybercrime; AI simply makes them faster, cheaper and harder to detect. Verification is as much about psychology as technology. A badge or trust signal only works if people understand what it actually represents. Deepfakes raise the stakes. In a world where people can no longer automatically trust what they see or hear, reliable provenance and account verification become increasingly important. Content moderation and access control are different problems. Paul argues that platforms should improve moderation, while parents already have increasingly sophisticated device-level controls available to manage children’s access. Age verification can become identity verification. Paul warns that demands for “robust” age checking could ultimately require users to prove their real-world identity simply to participate online. Privacy can be lost incrementally. Measures introduced for legitimate goals such as child safety can expand in scope and create infrastructure capable of much broader surveillance. Soundbites “Society doesn’t know where to look to find trust.” “Technology is just an enabler.” “I don’t think any tech company is doing enough to reduce the risk of their technology being used for harm.” “Content moderation is different to access control.” “The governments are saying they’re giving back control, but actually they’re taking away their ability to just be a parent.” Part 1 ends with a fundamental tension: how do we make the internet safer without building systems that require everyone to surrender their identity and privacy in order to participate?

• Transcript

From Automation to Autonomy with Ismail Amla

AI is moving beyond automation and into autonomy and that shift could fundamentally change how businesses operate, how decisions are made and how people work. In this episode of The Entropy Podcast, Francis Gorman sits down with Ismail Amla to explore the rise of agentic AI, digital workers and AI-native organisations. They discuss why the biggest opportunity is not simply using AI to make existing processes faster, but redesigning businesses around what intelligent systems can now do. They also examine the harder questions: what happens when AI agents begin making decisions independently, who is accountable when those decisions go wrong, how organisations can avoid agentic drift, and whether relying too heavily on AI risks weakening human judgement and curiosity. Key takeaways: Why AI is shifting from automation to autonomy How AI agents could become part of the workforce Why most AI transformation efforts fall short What leaders need to rethink, and why governance and human judgement matter more as systems become increasingly autonomous. Soundbites: “I think it is a revolution. I don’t think it’s just another tool.” “Whoever this technology is working on behalf of is responsible for every decision that’s made.”

• Transcript

Train Like You Fight with Snehal Antani

In this episode of The Entropy Podcast, Francis Gorman sits down with Snehal Antani, CEO and co-founder of Horizon3.ai for a wide-ranging conversation on cybersecurity, AI, warfare, leadership and the future of work. Snehal shares lessons from building and scaling Horizon3.ai, why startups must eventually move from “pirates” to a “navy,” and how his time inside Special Operations fundamentally changed his approach to leadership. They also explore the rapidly changing cyber threat landscape: AI-powered attackers, autonomous penetration testing, deception as a defence against AI agents, the lessons emerging from Ukraine, and why organisations need to stop asking whether they are secure and start proving they are resilient and defensible. Key Takeaways Why great founders need grit, conviction and a “learn-it-all” mentality How companies transition from entrepreneurial pirates to a scalable navy Why AI could give cyber attackers effectively unlimited ammunition How defenders can use honeypots and deception to hack the hackers Why cybersecurity teams should train like they fight The growing importance of human-machine teaming in warfare Why over-reliance on AI could undermine human judgement and scepticism How AI may reshape the workforce and put increasing pressure on the “middle” Why there is no AI easy button coming for cybersecurity Why organisations must move from being “secure” to being resilient and defensible Key Soundbites “You earn the right to be on this team every single day.” “AI gives the adversary unlimited bullets.” “You don’t want to learn how to deal with a crisis in the middle of a crisis.” “We always train like we fight.” “There is no AI savior that’s going to suddenly make your lives better.” “Those obsessed with mastering their craft are going to come out on top.” “Stop saying that we’re secure… start talking about how we’re defensible.”

• Transcript

From Quantum Risk to Competitive Advantage with Shayne De La Force

Quantum technology promises enormous economic value, but are businesses preparing quickly enough to capture it or protect themselves from its risks? In this episode, Francis Gorman speaks with strategy leader and LFI founder Shayne De la Force about the commercial realities of quantum technology in advanced manufacturing. Drawing on decades of experience across the semiconductor, aerospace, defence and automotive sectors, Shayne explains why quantum must become a board-level economic and governance priority. They explore the cost of waiting, the challenge of securing global supply chains, the role of an embedded Chief Quantum Officer, and why businesses need to look beyond vague terms such as “quantum advantage” and “quantum readiness.” Shayne also reflects on beginning his career on a factory floor in Japan, the dangers of “synthetic seniority,” and the lessons behind his book, Strategic Entanglement, which helps deep-tech founders cross the valley of death between innovation and commercial success. Key Takeaways Quantum is an economic issue, not merely a technology issue. Business leaders should evaluate it through two lenses: increasing enterprise value and reducing risk. Waiting carries a measurable cost. Organisations that begin planning and piloting now can build stronger competitive moats, while delayed action may expose intellectual property, long-lived data and future market position. Quantum preparation needs board-level sponsorship. CISOs and technical teams require executive support, funding and governance authority to deliver meaningful readiness programmes. Advanced manufacturers face a supply-chain problem. Prime contractors may have thousands of suppliers operating at very different levels of cryptographic maturity. The weakest supplier can become the greatest source of exposure. Prioritisation is more valuable than trying to fix everything at once. Companies should identify high-exposure systems, sensitive intellectual property and long-lived data, then concentrate resources where risk reduction will have the greatest impact. Most mid-sized organisations do not need a full internal quantum department. An embedded Chief Quantum Officer model can provide access to strategy, security, physics, governance and programme-management expertise without years of internal hiring. Quantum use cases must be tied to commercial outcomes. Not every pilot will deliver immediate value. Organisations need clearly defined business problems, economic metrics and realistic pathways from experimentation to deployment. Deep-tech commercialisation must begin early. Start-ups should develop their market narrative, customer belief and commercial strategy alongside the technology—not after the product has been completed. Foundational experience still matters. Working directly with machines, infrastructure, customers and operational teams creates judgement that cannot be replaced by AI-generated ideas or “synthetic seniority.” Soundbites “Unless you are working for a not-for-profit, we are all here to drive business, growth and economic value.” “A CEO or CFO has two fundamental objectives: maximise economic value and reduce economic risk.” “The companies moving today are the ones that will have the strongest competitive moat.” “Unless you have buy-in at the top, it is very difficult to move the rest of the organisation.” “When boards see the economic risk of losing their intellectual property and long-term data, that is when the needle starts moving.” “Building an internal quantum department can take years and millions of dollars. Our embedded model gives companies access to the whole capability.” “The companies running pilots today are the ones building a competitive moat over the companies that are waiting.” “In advanced manufacturing, equipment may have a depreciation cycle of 25 or 30 years. That makes cryptographic transition a massive challenge.” “The prime contractors are preparing, but their supplier base is often their weakest link.” “Our job is to create clarity in chaos—because, right now, it is chaos.” “Can we close 80 percent of the exposure in the first 12 months and then work through the remaining 20 percent?” “The valley of death is where great technology goes to die because the commercialisation strategy was never developed.”

• Transcript

Nobody Reads the Plan During the Fire with Patrick Lechner

In this episode of The Entropy Podcast, Francis Gorman speaks with Patrick Lechner, co-founder of Resimate.io and an experienced business and cyber resilience leader, about why many organisations mistake documentation for genuine readiness. Patrick challenges the obsession with business continuity plans, impact assessments and compliance evidence, arguing that resilience should be measured by outcomes: can the organisation continue operating when something critical is lost? The conversation explores the difference between security and resilience, why businesses should prepare for loss rather than attempt to predict every possible threat, and how leaders can identify their most important dependencies. Patrick also examines the role of AI, the importance of business ownership and why tabletop exercises must become honest operational conversations rather than annual corporate theatre. This is a practical discussion about building the confidence, capability and human relationships required to respond when the plan no longer matches reality. Key takeaways Resilience is not a collection of documents. Plans and frameworks are useful, but they do not prove that an organisation can sustain operations during a crisis. Prepare for loss, not every imaginable threat. Most disruptions can be reduced to losing a site, people, systems, suppliers or data. The business owns resilience. Operational leaders should decide what must continue, what level of disruption is tolerable and where investment is justified. Cybersecurity and cyber resilience are different. Security attempts to prevent incidents; resilience determines what happens when prevention fails. Dependencies must be understood across the organisation. A single failure—such as electricity, identity infrastructure or a major supplier—can create very different consequences across multiple teams. AI can amplify weak processes. Automating a poor resilience process may produce more plans and evidence without improving operational capability. Tabletop exercises should be frequent and honest. Short, regular discussions are often more valuable than one heavily scripted annual exercise. People ultimately carry the response. Trust, authority, shared principles and operational knowledge matter more during a crisis than a spreadsheet stored somewhere on the network. Soundbytes: “We were tired of resilience being measured by plans, not outcomes.” “Plans may be useless, but planning is indispensable.” “Almost every threat can be reduced to a handful of loss scenarios: losing a site, people, systems, suppliers or data.” “The board-level question is simple: how confident are we that we can sustain operations if we lose a key dependency?” “It does not matter why the electricity is gone. If it is gone, the business still has to respond.” “Investing heavily in prevention does not mean you are resilient.” “If you have bad processes today, AI is a great tool for accelerating those bad processes.” “You do not become fit by going to the gym once a year for seven hours. Tabletop exercises work the same way.” “An exercise should be an honest conversation, not a performance conversation.” “When something hits, it is the people, the trust and the shared principles that allow the organisation to respond.”

• Transcript

Welcome to the Age of Synthetic Reality with Jake Moore

In this episode of The Entropy Podcast, Francis sits down with Jake Moore, Global Cybersecurity Advisor at ESET, to unpack one of the biggest technology shifts of our time: the collapse of trust in the digital world. From deepfakes and AI-powered scams to digital footprints, remote hiring fraud, and the rise of agentic cybercrime, Jake explains how rapidly evolving AI tools are changing the nature of deception and why individuals, businesses, and governments are struggling to keep up. The conversation explores what happens when seeing is no longer believing, how cybercriminals are already exploiting synthetic media, and why the future of cybersecurity may depend less on tools alone and more on human awareness, verification, and digital resilience. If you’ve ever wondered how close we are to a world where anyone can fake anyone, this episode is for you. Key Takeaways Deepfakes are no longer theoretical — they are already being used in scams, impersonation, and fraud. Trust online is eroding fast, as AI-generated content becomes more realistic and accessible. Remote hiring introduces new risks, including AI-assisted impersonation and fake candidates. Your digital footprint reveals more than you think, often exposing personal details that can be used against you. Cyber awareness is still the strongest defense, especially when technology alone can’t keep pace. Children need better cyber education, particularly around passwords, privacy, and digital identity. AI is scaling cybercrime, making attacks faster, cheaper, and more convincing. Agentic AI and quantum computing could create the next major wave of cybersecurity disruption. Soundbites Here are strong promotional soundbites you can use in Spotify captions, social posts, clips, or episode promos: “We’ve entered a world where seeing is no longer believing.” “Your face, your voice, and your identity are becoming easier to fake.” “The biggest cyber threat may not be malware — it may be trust itself.” “Deepfakes are no longer a future problem. They’re here now.” “Cybercriminals don’t need perfect technology — they just need believable enough.” “Your digital footprint can tell strangers more about you than you realize.” “In the age of AI, awareness is still your greatest defense.” “The next scam won’t look suspicious — it will look completely real.” “Remote work has opened the door to a new kind of identity fraud.” “We are moving into an era of synthetic reality, and most people are not ready for it.”

• Transcript

Will The Nodding Bird Be Running Your SOC? Maybe? with Rik Ferguson

Cybersecurity is entering a new era one shaped by autonomous AI attacks, machine speed defense and the looming impact of quantum computing. In this episode, Francis Gorman speaks with Rik Ferguson, Vice President of Security Intelligence at Forescout, about why organisations must move from “assume breach” to “assume autonomy.” Rik explains the four conditions required for trusted autonomous defense: context, constraint, reversibility and transparency. They also explore the risks of over-relying on AI in security operations, the importance of meaningful human oversight and why “harvest now, decrypt later” attacks make post-quantum readiness an urgent business priority. Key Takeaways AI is changing the operating model of cyberattacks. The greatest shift is not simply that AI makes existing attacks faster. Autonomous systems may combine vulnerabilities and techniques in ways that do not reflect human logic or established attacker behaviour. Defence cannot remain at human speed. As attacks become increasingly automated, organisations will need defensive systems capable of detecting, containing and responding at machine speed. Trust in autonomous security must be earned. Rik identifies four essential conditions for trusted autonomy: Context: Decisions must reflect the asset, its dependencies, its business importance and the wider environment. Constraint: Autonomous actions must remain within clearly defined boundaries and guardrails. Reversibility: Defensive interventions must be capable of being rapidly undone when they cause unintended consequences. Transparency: Operators must understand why a decision was made, which data informed it and what the potential impact will be. Human oversight must be meaningful. Simply placing a person at the end of an automated process does not guarantee safety. Over-reliance on automation can reduce vigilance and leave people less capable of intervening when intervention matters most. Paper we discussed during the episode: https://www.forescout.com/resources/wp-assume-autonomy/

• Transcript

Leadership Without a Script with Stefan Pagels Christensen

Stefan Pagels Christensen became a child star at 11, working on major film productions while most children his age were still figuring out who they were. Early fame brought attention, pressure and opportunity but it also distorted his sense of identity, value and belonging. In this candid conversation, Stefan opens up about addiction, sobriety, ADHD and the experience that forced him to rebuild his life without status or recognition. He explains how discovering improvisation gave him a new way to understand failure, trust, communication and human connection. Today, Stefan uses applied improv, emotional intelligence and psychological safety to help leaders create teams where people feel confident enough to contribute, challenge ideas, make mistakes and speak openly. This is a conversation about what happens when the script disappears—and why the strongest leaders are not those with all the answers, but those who make the people around them better. Key Takeaways • Early success can shape self-worth in ways that take years to recognise and unlearn. • ADHD can drive creativity, intensity and hyperfocus, but without the right support it can also contribute to burnout and destructive behaviour. • Psychological safety begins with how leaders respond when someone speaks up, challenges an idea or makes a mistake. • “Yes, and” does not mean agreeing with everything. It means listening fully before rejecting or building on an idea. • Teams perform better when people stop judging themselves, stop judging others and become willing to experiment. • Failure becomes valuable when it is treated as information rather than something to conceal. • Great leadership is not about being the star of the scene. It is about making other people look good. • Meaningful change begins when you stop blaming the environment and accept responsibility for your own behaviour. Soundbites “Leadership is improvisation. None of us knows exactly what comes next.” “Success lies somewhere between doing nothing and failing.” “Every time someone speaks up, they have already overcome their own fear.” “Your job is not to be the star. Your job is to make other people look good.” “Psychological safety is created by how you respond when someone gets it wrong.” “You cannot change until you are willing to admit that something needs to change.” “People do not learn courage by reading about it. They learn it by stepping forward.” “Failure is not something to hide. It is something to recover from.” “Say yes to the person before you judge the idea.” “The strongest teams are not afraid of mistakes—they know how to use them.” You can find Stefan at: https://improv.eu/ Find Stefan on LinkedIn: https://www.linkedin.com/in/stefanpagelsimprov/

Harvest Now, Litigate Later Quantum Exposure with Darren Bender

In this episode of the Entropy Podcast, Francis Gorman sits down with Darren Bender, a Texas-based attorney, chief legal officer, and co-founder working at the intersection of law, IT, and post-quantum cryptography. The conversation explores a question many boards, legal teams, and security leaders are only beginning to face: when quantum computers threaten today’s encryption, who becomes liable for doing nothing? Darren breaks down post-quantum negligence in practical terms, explaining why “we didn’t know” may not be a credible defence for much longer. From Harvest Now, Decrypt Later attacks to board minutes, data shelf life, migration timelines, DORA compliance, procurement decisions, and third-party liability, this episode reframes quantum readiness as more than a technical challenge. It is a governance issue. A legal exposure issue. A fiduciary duty issue. And potentially, a future courtroom issue. Key Takeaways Post-quantum cryptography is no longer just a cybersecurity concern; it is becoming a boardroom and legal risk conversation. Organisations may need to show how they assessed quantum risk, prioritised critical data, and documented informed decisions. Board minutes, governance records, risk assessments, cryptographic inventories, and migration plans could become central evidence in future litigation. “Cryptographic procrastination” may become difficult to defend if organisations knew about the risk but chose not to act. The Mosca theorem helps boards think about whether their data shelf life plus migration time exceeds the timeline for a cryptographically relevant quantum computer. The Learned Hand formula offers a legal lens for comparing the burden of prevention against the probability and magnitude of future harm. Financial services, healthcare, energy, and critical infrastructure may be among the first sectors exposed to post-quantum liability. DORA and similar regulatory frameworks may create either a defensive treasure trove or a litigation minefield, depending on the quality of the paper trail. Supply-chain liability will be complex, with SaaS providers, cloud providers, HSM vendors, certificate authorities, and customers all potentially pulled into the same dispute. Procurement teams should start asking not just whether vendors are secure today, but whether they can support post-quantum migration tomorrow. Soundbytes “Quantum risk is moving from the server room to the boardroom.” “Harvest Now, Decrypt Later may become Harvest Now, Litigate Later.” “The question is not just whether encryption breaks. It is who knew, who acted, and who documented the decision.” “In a future lawsuit, the paper trail may matter as much as the technology.” “Cryptographic procrastination is not a strategy.” “Doing nothing may be the most expensive decision a board ever makes.” “Post-quantum readiness is not a light switch. It is a long fuse with a big boom at the end.” “If your data still has value when quantum arrives, your risk clock has already started.” “DORA can be a treasure trove or a minefield. It depends what your records show.” “Your vendors may hold the keys, but your organisation may still hold the liability.” “Quantum readiness is no longer just about algorithms. It is about governance, accountability, and foreseeable harm.” “The courtroom may become the place where quantum risk finally gets priced.”

• Transcript

Is Your Cyber Recovery Plan Just Fiction? with Francesco Chiarini

In this episode of the Entropy Podcast, Francis Gorman speaks with Francesco Chiarini about why cyber resilience must go far beyond traditional cybersecurity, backups, and compliance checklists. Francesco breaks down the uncomfortable reality that many organisations are not as recoverable as they think. From ransomware spreading at scale to compromised identity systems, encrypted tooling, failed assumptions, and board-level misunderstandings, this conversation explores what really happens when the worst-case cyber scenario becomes real. The discussion covers cyber resilience versus cybersecurity, APT-grade attacks, out-of-band communications, crisis operating models, data vaulting, DORA, recovery planning, minimum viable organisations, and why resilience has to be designed before disaster strikes. This is a direct, practical conversation about building organisations that can continue operating when the normal playbook no longer works. Key Takeaways Cyber resilience is not the same as cybersecurity. Cybersecurity focuses heavily on prevention and protection; cyber resilience asks whether the organisation can still operate, recover, and adapt when prevention fails. Backups alone do not equal resilience. Francesco warns that recovery depends on architecture, governance, people, tooling, identity, sequencing, and validated operating models not just stored copies of data. Organisations need to stress-test their assumptions of recoverability. If Active Directory, communications, patching tools, or recovery platforms are compromised, the real question is: what still works? Boards often misunderstand resilience as a technology problem. Francesco argues that technology matters, but cyber resilience also requires clear accountability, capability maturity, skilled teams, and rehearsed decision-making. Cyber recovery investment is often too low. Many organisations spend heavily on prevention, detection, and protection, while underinvesting in recovery capabilities and last-resort operating models. Data vaulting and isolated recovery are essential, but incomplete on their own. They must sit inside a wider cyber resilience strategy that includes threat modelling, minimum viable operations, interoperability, deception, and recovery sequencing. Soundbytes “Your cyber recovery plan is only real if it still works when everything around it has failed.” “Backups are not resilience. They are only one piece of the survival plan.” “The worst time to design recovery is during the incident.” “Cyber resilience starts where cybersecurity assumptions break.” “If your identity stack, tooling, and communications are gone, what still works?” “Being compliant does not mean being resilient.” “Recovery is not just a technology problem. It is an organisational capability.” “Most companies know how to prevent. Far fewer know how to restart.”

When AI, Crypto, and Quantum Collide with Dinesh Nagarajan

In this episode, Francis Gorman speaks with Dinesh Nagarajan, Global Partner with IBM Consulting Cybersecurity Services and IBM’s global lead for data and AI security and quantum-safe security, about the collision of three major enterprise shifts: AI adoption, cryptographic modernisation, and post-quantum readiness. Dinesh argues that AI will likely be the most consequential transformation because securing AI at enterprise scale depends on trust, and that trust ultimately depends on cryptography. The conversation explores why many organisations still treat AI security, cryptography, and quantum readiness as separate programmes, even though they are becoming deeply interconnected. Dinesh explains that AI has captured attention from the boardroom to engineering teams in a way few previous technology waves have, which gives it momentum, budget, and organisational visibility. But that same momentum creates risk if security, cryptographic resilience, and post-quantum planning are not built into transformation programmes early. The discussion then moves into sovereign AI, geopolitical dependency, and the enterprise risk of building core workflows on platforms that may become unavailable due to political, regulatory, or commercial decisions. Dinesh frames this as a strategic consideration for businesses, especially when AI tools become central to software development, automation, and competitive advantage. The second half of the episode focuses on post-quantum cryptography. Dinesh outlines how organisations should approach quantum readiness: start with awareness, assess exposure from the board level down, establish a centralised programme or centre of excellence, and embed post-quantum requirements into procurement, legal, supply chain, architecture, and existing digital transformation initiatives. His core message is that PQC is not a one-off technical remediation exercise; it is a multi-year business transformation that must be governed as a strategic risk. Key takeaways AI security is becoming a cryptography problem AI at enterprise scale requires mechanisms to validate, verify, and trust agents, applications, and workflows. That trust layer depends on cryptography. AI, crypto modernisation, and quantum readiness cannot stay separate Many organisations currently treat them as three different programmes, but Dinesh expects them to converge quickly as AI infrastructure becomes dependent on cryptographic trust. AI has unusual organisational momentum Unlike previous technology waves, AI has captured attention from the C-suite down to engineers. That visibility can help fund and accelerate security work, including parts of the post-quantum journey. Sovereign AI is becoming a serious boardroom issue Enterprises need to consider what happens when a critical AI platform is restricted, withdrawn, or affected by geopolitical decisions. Quantum readiness is not just an IT issue PQC affects contracts, procurement, suppliers, cloud strategy, infrastructure, applications, data, and long-term transformation plans. Boards need business-risk language, not cryptography language Dinesh’s recommendation is to frame quantum exposure as strategic risk: revenue disruption, transformation risk, cost escalation, technical debt, and operational fragility. The first move is not scanning; it is understanding exposure Crypto inventory matters, but Dinesh argues the starting point should be a top-down view of how exposed the business model is to quantum-related disruption. A centralised PQC capability is essential Organisations need a programme team or centre of excellence that can create awareness, set direction, advise functions, and coordinate action across the enterprise. Existing transformation programmes should pay the “quantum tax” Rather than spinning up everything from scratch, organisations should embed PQC requirements into cloud migrations, digital modernisation, procurement cycles, and supplier renewals. PQC is a five-to-six-year journey for many enterprises Dinesh describes quantum readiness as a long-running transformation, not a vulnerability patching exercise. Soundbites These are polished for promotion and clips rather than strict verbatim transcript pulls. “AI security is ultimately a trust problem and trust still comes back to cryptography.” “The organisations that treat AI, crypto, and quantum as separate programmes are going to feel the collision later.” “AI has done something unusual: it has captured the imagination of the boardroom and the engineer at the same time.” “If every employee is going to use AI, then cryptography has to scale to that same level of adoption.” “Post-quantum readiness is not a technology change. It is a business transformation.” “The board does not need a lecture on algorithms. It needs to understand exposure, disruption, and strategic risk.”

Why Artificial Intelligence Needs a Mother with Lucy Batley

In this episode of The Entropy Podcast, Francis Gorman sits down with Lucy Batley AI strategist, speaker, and founder of Traction Industries, named number eight in the UK's Top 100 Digital Leaders in AI in 2025 (recognised at the House of Lords). With a 30-year career spanning the birth of the internet designing for David Bowie, Audi, Barclays and the Manic Street Preachers Lucy now helps organisations adopt AI strategically, with strong governance and real business value. This is a conversation about why most AI investment fails to deliver, why the real barrier sits in the boardroom rather than the technology, and why the rush to deploy AI agents without securing the underlying data is heading for a reckoning. Lucy also introduces Mother, her new venture building AI on quantum-resilient infrastructure and makes the case that the most underestimated risk isn't superintelligence, but our growing dependency on the tools themselves. Key Takeaways AI is a leadership problem, not a technology problem. The organisations that win aren't the ones with the biggest budgets they're the ones whose leaders have the foresight to grasp how fundamental this shift is. Start with the human problem, not the tool. Most organisations don't even understand their own workflow processes. Design thinking and relentless questioning surface the real issue which is often smaller and easier to fix than anyone expected. ROI comes from strategy, not spend. One case study: six "AI colleagues" deployed for ~£500k returned ~£6.5M in ten months driven by an opportunity spotted in a workshop, not the technology itself. Security can't be an afterthought. Homegrown AI agents going into organisations without secured data are a backlash waiting to happen. Secure by design from day one. Quantum changes the game. With "harvest now, decrypt later" already underway and ~300 quantum computers in existence, quantum isn't theory. Mother's approach moves from algorithms and code to mathematics and physics protecting data without touching it. The real risk is dependency. Societies don't collapse because technology gets clever they collapse because they forget how dependent they've become. Stay human. AI has no experience, no conscience, and no emotion. The advantage lies in the things that make us human and using the tools to amplify them. Soundbites "Artificial intelligence is not a technology problem, it's a leadership problem." "It's a technology so profound that everything else is going to have to be redesigned around it." "Forget about the technology — what human problems are you trying to solve?" "Societies rarely collapse because a technology becomes clever. They collapse because they become vulnerable." "Artificial intelligence needs a mother. It needs protecting." "We're moving away from algorithms and code to mathematics and physics. It's a completely different beast." "Good leader, good organisation. Bad leadership, absolute chaos." "We're literally in the toddler stage."

SuperSkills for the AI Age with Rahim Hirji

In this episode, Rahim Hirji discusses the evolving nature of intelligence, the importance of human skills in the age of AI, and how to adapt our education and mindset for the future. Discover insights on judgment, taste, curiosity, and the impact of AI on decision-making. This is one of those episodes that will have you questioning decisions you have made as your week unfolds. Key Topics: The commodification of intelligence and its impact on value The importance of taste, judgment, and accountability in a world of abundant AI The concept of synthetic seniority and the blending of old and new wisdom Future skills needed for humans to thrive alongside AI The role of curiosity, boredom, and creativity in human development The risks of over-dependence on AI and algorithms Reimagining education to focus on soft skills and super skills The importance of questioning and understanding decision-making algorithms Practical self-assessment tools for future readiness Sound Bytes: "Taste, judgment, accountability are valuable now" "Talking to machines feels disingenuous" "Many decisions are made for us by algorithms" Check out the book: https://superskillsbook.com/ Check out the diagnostic tool: https://superskillsbook.com/diagnostic/ Check out Rahim’s site: https://www.thesuperskills.com/

Strategic Compression with David Murrin

Geopolitical forecaster and strategist David Murrin joins Francis Gorman to argue that the world isn't experiencing ordinary volatility it's in the middle of a deep, structural transition between great powers. Drawing on his "Five Stages of Empire" framework, David lays out why he believes America's decline began after 9/11, why China is rising into the vacuum, and why he sees the next decade as a period of unavoidable escalation. The conversation ranges across the war in Ukraine, the Iran nuclear question, the battle for the Pacific, the hollowing-out of Western military capability, and the subtler war being fought through economics, infiltration, and influence. It closes on Ireland's exposure as a neutral state and David's blunt verdict that there is "nowhere to hide." Key Takeaways David's "Five Stages of Empire" model frames how nations regionalise, fight a civil war, expand, peak, and decline and where he places the West today. His view that American power entered structural decline after 9/11, with China rising to fill the vacuum. The concept of "strategic compression" why rising powers are forced to act not when they choose, but when the window around them starts to close. Why he sees Ukraine and Iran as conflicts enabled and shaped by China, used as testing grounds for systems and tactics. His argument that Western societies are being degraded from within through long-running influence operations targeting domestic politics. A stark assessment of UK military readiness, and why he believes adaptability not hardware alone decides who survives modern conflict. What all of this means for a small, neutral, strategically significant state like Ireland. Soundbites "Nature absolutely abhors a vacuum. It hates it." "It's as if we're playing draughts and the Chinese are playing three-dimensional chess." "The timing of hegemonic conflicts is never at the choosing of the hegemon." "There are no neutral countries in its story, so there are no places to hide." "Stand up and be counted." Note: This episode contains forecasting and personal analysis that is, by nature, speculative and at times contested. These are David Murrin's own views, shared to open debate rather than to state fact.

• Transcript