Skip to main content
Mandy Andras

Mandy Andras

Chief Information Security Officer at Elastic, a global cybersecurity leader with 25+ years of experience who has led Elastic's security posture since 2018.

Sep 22, 2026

20:07
Like, how has that changed for you in your org and as a security program?
20:11
For us, in the way I've approached Rift and Elastic and roles before Elastic was really trying to separate the risk I'll go on my risk versus findings.
20:25
So a lot of security tools will have findings.
20:27
And those findings may or may not be at risk.
20:29
So many findings.
20:30
So many findings.
20:31
And to me, a finding isn't a risk.

16 MINS LATER

36:40
I mean, it's almost the economics of how they're using AI for detections, which I thought was just amazing after seeing all the token maxing stuff of the last however long, nine months where people are just like, oh, look, look how good we're doing we've burned 18 billion tokens which is the most insane thing i've ever heard but how like how do you think about setting incentives for your teams you know like what what are you measuring when you think about oh great you caught all this stuff but then like the counterbalancing thing is like how many tokens did you burn for that and you know then it ends up being you want to kind of find the right balance for those how did you come up with that and like how like how do you think about putting incentives in the right place for everyone

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.