Containment or Catastrophe - #199

Cybersecurity has entered a new era—and prevention alone is no longer enough. In this episode, Doug Merritt, CEO of Aviatrix and former CEO of Splunk, joins us to break down why security leaders must fundamentally rethink their approach. With decades of experience across Cisco, SAP, and the evolution of modern security operations, Doug brings a sharp, operator-level perspective on what’s changing—and what CISOs need to do now.As AI accelerates attacker capabilities and cloud environments introduce unprecedented exposure, the traditional playbook is breaking down. Sophisticated threats are no longer rare—they’re scalable, automated, and increasingly successful. Meanwhile, most organizations are still over-investing in vulnerability patching while underestimating the importance of containment.We explore what this shift really means in practice:Why “assume breach” is becoming the only realistic strategyHow AI is democratizing and accelerating cyber attacksThe hidden risks of flat, unsegmented cloud architecturesWhy detection and remediation aren’t enough anymoreHow to think about blast radius as a critical new metricUsing powerful analogies—like submarine breach containment—we break down how modern organizations can limit the damage of inevitable attacks and build true cyber resilience.For CISOs and security leaders, this is a conversation about reframing success: not just keeping attackers out, but ensuring that when they get in, the business survives.As featured on Million Podcasts' Best 100 Cybersecurity Podcasts  Top 50 Chief Information Security Officer CISO Podcasts Top 70 Security Hacking PodcastsThis list is the most comprehensive ranking of Cyber Security Podcasts online and we are honoured to feature amongst the best!Follow or subscribe to the show on your preferred podcast platform.Share the show with others in the cybersecurity world.Get in touch via [email protected]