

D2DO268: Solving Big Problems By Solving Small Problems
12 snips Apr 2, 2025
Merritt Baer, CISO at Reco and seasoned expert in security across government and private sectors, shares her insights on tackling today’s cybersecurity challenges. She emphasizes the importance of addressing small problems to find effective solutions to larger issues. The conversation touches on AI’s security implications, the complexities of IoT and SaaS, and the need for innovative strategies amidst socioeconomic disparities. Baer also advocates for integrating security within development teams to foster a culture of compliance and awareness.
AI Snips
Chapters
Transcript
Episode notes
Varied Security Experience
- Merritt Baer worked across diverse sectors, from military courts to the FCC, shaping security practices.
- At the FCC, she created a reporting requirement for undersea cable outages, enhancing national security.
CISA's Voluntary Model
- CISA's voluntary nature presents both advantages and disadvantages for civilian cybersecurity.
- While fostering collaboration through frameworks like NIST, its lack of enforcement power limits its impact.
SaaS Visibility Gap
- Many CISOs lack a comprehensive, real-time understanding of the apps used within their organizations.
- The increasing adoption of modular building patterns and cloud services exacerbates this challenge.