Episode

AI Guardrails, Foot Guns, and the Ostrich Problem

Podcast
GRC Uncensored
Published
Sep 25, 2025
Duration seconds
2599
Processing state
not_requested
Canonical source
https://grcpod.substack.com/
Audio
https://sphinx.acast.com/p/open/s/6702dcb9c88f09c3e0b9a10a/e/68d44770d4ea86dd593c5baa/media.mp3
JSON
/v1/public/podcasts/grc-uncensored-7039393/episodes/ai-guardrails-foot-guns-and-the-ostrich-problem
Markdown
/podcast/grc-uncensored-7039393/ai-guardrails-foot-guns-and-the-ostrich-problem.md

Actions

  • POST https://stenobird.com/v1/public/podcasts/grc-uncensored-7039393/episodes/ai-guardrails-foot-guns-and-the-ostrich-problem/transcription-requests
    Idempotently request low-priority transcript generation for this episode.
  • GET https://stenobird.com/podcast/grc-uncensored-7039393/ai-guardrails-foot-guns-and-the-ostrich-problem.md
    Read the agent-friendly Markdown representation of this episode resource.

Summary

This week on GRC Uncensored , hosts Troy Fine and Elliot Volkman sat down with Merritt Baer , Chief Security Officer at Enkrypt AI , for a candid conversation about the collision between AI, governance, and security. Merritt brought decades of CISO experience — from AWS to the intelligence community — and didn’t hold back, fully embracing our podcast name, on what’s hype, what’s real, and what CISOs should be doing today.  Key Moments [00:03:00] – How Merritt uses ChatGPT to re-voice her own drafts — and why she immediately strips out the “saccharine” endings. [00:05:30] – Why security and innovation don’t need to “hold hands” — they just need shared expectations. [00:08:45] – The “foot guns” moment : how an accounting firm’s chatbot started teaching customers to hide assets from the IRS. [00:13:30] – Why most enterprises don’t even know where AI is being used internally. [00:15:00] – How to build guardrails that are realistic, enforceable, and tuned over time. [00:24:30] – Why “ostrich” policies will fail — and how enforcement actions, not regulations, will shape AI accountability. [00:40:00] – Merritt’s closing advice for CISOs: you don’t need to be an expert, but you do need a plan. Hosted on Acast. See acast.com/privacy for more information.