Episode 20 : 2026 Kickoff: Security Resolutions, Key Deadlines, and Don’t Mislead the Feds


In the first episode of 2026, the Distilled Security team kicks off the year with a practical discussion on security priorities, key compliance dates to watch in 2026, and why misleading the government on cybersecurity compliance can have serious consequences.
The conversation focuses on simplifying security programs, returning to core fundamentals, and learning from real-world enforcement and regulatory cases. The episode closes with a holiday pour and a preview of format changes coming next.

⏱️ Timestamps
  • 0:00 Intro & episode overview
  • 0:33 2026 security resolutions: simplify & back to basics
  • 5:45 “Science projects”: removing emotion from decisions
  • 8:36 Justin’s goals: family, travel, business & AI workflows
  • 17:52 EOS + Atomic Habits workbook (goal planning)
  • 23:54 Key compliance dates to watch in 2026
  • 31:45 California privacy updates & risk assessments (CCPA)
  • 35:39 EU AI Act + NIS2 enforcement ramp-up
  • 42:48 Drink break: High West “A Midwinter Night’s Dram.”
  • 45:04 Don’t mislead the feds: FedRAMP, SolarWinds, CMMC—wrap-up to 1:20:12
 🎙️ Hosts
  • Justin Leapline – @justinleapline
  • Joe Wynn – @wynnjoe
  • Rick Yocum – @rickyocum

🌐 Connect with Us
  • Website: distilledsecuritypodcast.com
  • X:  @DisSecPod
  • Email: hello@distilledsecuritypodcast.com

🥃 Drink of the episode: High West A Midwinter Night’s Dram

Creators and Guests

Joe Wynn
Host
Joe Wynn
Founder & CEO @ Seiso | IANS Faculty Member | Co-founder of BSidesPGH
Justin Leapline
Host
Justin Leapline
Founder of episki | IANS Faculty Member
Rick Yocum
Host
Rick Yocum
Optimize IT Founder | Managing Director, TrustedSec
Episode 20 : 2026 Kickoff: Security Resolutions, Key Deadlines, and Don’t Mislead the Feds
Broadcast by