
Andy Ellis
Principal at Duha (Doha/Doha-related consultancy) and experienced cybersecurity leader, offering practical CISO-focused advice and commentary on vulnerabilities, ransomware, and crypto-agility.
Best podcasts with Andy Ellis
Ranked by the Snipd community

34 snips
Aug 25, 2025 • 1h 6min
“Stop Trying To Quantify Risk”: Risk Management Wisdom (& Star Wars Analogies) From CISO Andy Ellis
Andy Ellis, former CISO of Akamai and author of 1% Leadership, shares his vast expertise in cybersecurity and risk management. He critiques traditional risk measurement and introduces his 'Pyramid of Pain' framework. Andy discusses the critical dynamics between CFOs and CISOs, the impact of AI on security, and why the roles are converging. Using captivating Star Wars analogies, he illustrates complex risk management concepts and offers insights on strategic security procurement and the importance of evolving leadership skills in this fast-changing landscape.

Dec 15, 2025 • 34min
Department of Know: MITRE's weaknesses list, DoD goes postquantum, Coupang fallout
In this engaging discussion, cybersecurity experts Andy Ellis and Johna Till Johnson dive into critical topics affecting the industry. They tackle the urgency of adopting post-quantum cryptography amid evolving threats, and critique MITRE's software weaknesses list for its limited actionability. The conversation also touches on the implications of a recent Coupang breach, emphasizing the need for robust offboarding practices. Ransomware defenses are highlighted, with both guests advocating for actionable strategies like backups and zero trust.


