The Entropy Podcast
Podcast Description
Welcome to The Entropy Podcast—hosted by principal security architect Francis Gorman. The Entropy Podcast centers on cybersecurity, technology, and business, featuring conversations with accomplished professionals who share real-world knowledge and experience. Our goal is simple: to leave you better informed and inspired after every episode.We chose the name “Entropy” because it symbolizes the constant flux and unpredictability in cybersecurity, technology, and business. By understanding the forces that drive change and “disorder,” we can create better strategies to adapt and thrive in an ever-evolving technology and geo political landscape.
Podcast Insights
Content Themes
The podcast centers around cybersecurity, technology, and business, with episodes exploring specific topics such as the intersection of safety and security in engineering, illustrated by Dr. Bob Oates' insights on the world’s first commercial remotely operated ship project, and discussions on post-quantum cryptography, addressing evolving threats in a digital landscape.
Hosted by Francis Gorman, The Entropy Podcast brings together intelligence community veterans, post-quantum cryptography pioneers, CISOs, business leaders, and frontline practitioners for unfiltered conversations on the threats, complexity, and geopolitics shaping our world.
Past guests include former senior CIA officers, leading cryptographers, digital forensics experts, and security and technology leaders from across financial services, critical infrastructure, and government, voices rarely heard together in one place.
Each episode goes beyond headlines to explore how cyber risk, emerging technology, and geopolitical instability are reshaping the way organisations operate, compete, and defend themselves. Expect candid insight on quantum risk, nation-state threats, AI, espionage, financial crime, business resilience, and the human dimensions of leadership.
Designed for CISOs, board members, founders, technologists, policy thinkers, and the professionally curious, Entropy sits at the intersection of business, technology, and cybersecurity a space for genuine conversations with unique minds, the kind that don’t fit neatly into a press release.
The name Entropy reflects the growing complexity and unpredictability of the systems we depend on, and the discipline required to lead through them.
Disclaimer: The views and opinions expressed on The Entropy Podcast are those of the host and guests in their personal capacity and do not represent the views, positions, or policies of their respective employers, affiliated organisations, or any government body. Guest appearances do not constitute endorsement by the host, and the host’s commentary does not constitute endorsement of guests’ views. Content is provided for informational and educational purposes only and does not constitute professional, legal, financial, or security advice.
One of the topics I cover a lot on this show is post quantum readiness, I believe awareness of this emerging technology is key for a safer world into the future. To support this awareness I have built a free resource to help you explore the world of quantum and learn as you go. You can find it here: www.postquantumready.com
Buy Our Swag:
We now have some slick new swag you can purchase through our Esty store.
https://theentropypodcast.etsy.com
Watch and Subscribe
You can also watch full episodes and exclusive content on our YouTube channel:
www.youtube.com/@TheEntropyPodcast
Achievements
The Entropy Podcast delivered strong chart performance throughout 2025, demonstrating consistent international reach and listener engagement.
- Regularly ranked within the Top 20 Technology podcasts in Ireland.
- Achieved a Top 25 placement in the United States Technology charts, holding the position for one week.
- Charted internationally across multiple markets, including Israel, Belgium, and the United Kingdom.
This performance reflects sustained global interest and growing recognition across key podcast markets.
What if the biggest problem in security is how we explain its value?
Francis Gorman sits down with David Lynas, co-author of SABSA and founder of COSAC, for his first podcast interview. Drawing on 45 years in security, David challenges the idea that the security professionals job is simply to reduce risk and explains why helping businesses take the right risks matters just as much.
The episode explores the origins of SABSA, why risk assessments too often become paperwork exercises, and how to connect security decisions to outcomes business leaders actually care about. David also shares a striking banking example where the security architect’s recommendation was to remove controls.
From zero trust to AI moving faster than human oversight, this conversation asks what security must become to keep enabling innovation and why every security professional needs a clear answer to “so what?”
Soundbites
- “The biggest risk is not understanding the nature of risk itself.”
- “We cannot possibly succeed without taking risk.”
- “We are not taking enough risk to reach our ambitions.”
- “The process is more important than the result, and that's wrong.”
- “I didn't go into business to achieve confidentiality.”
- “Trust should never mean I don't know.”
- “What our profession does is extremely important and it's getting more important every day.”
Key takeaways
- Security should enable business success. Start with what the organisation wants to achieve, then show how security helps it get there.
- Risk management needs balance. A useful assessment should identify both insufficient protection and insufficient risk-taking to achieve business ambitions.
- Traceability makes security’s value visible. Connect each control to a defined requirement and a measurable outcome.
- Translate technical threats into business consequences. Leaders need to understand what lost availability means for customers, operations, and trust.
- Completing a process is not the same as making a good decision. Risk reports should inform action, rather than simply satisfy a reporting requirement.
- More security is not always better. Controls that obstruct the intended users can undermine the business purpose they are meant to support.
- Resilience deserves greater attention. Focus on maintaining essential outcomes when threats materialise and controls fail.
- Security must evolve alongside AI. David argues that rapid technological change demands adaptable approaches and clearer thinking about what must continue operating when things go wrong.
Disclaimer
This podcast’s information is provided for general reference and was obtained from publicly accessible sources. The Podcast Collaborative neither produces nor verifies the content, accuracy, or suitability of this podcast. Views and opinions belong solely to the podcast creators and guests.
For a complete disclaimer, please see our Full Disclaimer on the archive page. The Podcast Collaborative bears no responsibility for the podcast’s themes, language, or overall content. Listener discretion is advised. Read our Terms of Use and Privacy Policy for more details.