Episode 20 : 2026 Kickoff: Security Resolutions, Key Deadlines, and Don’t Mislead the Feds

In the first episode of 2026, the Distilled Security team kicks off the year with a practical discussion on security priorities, key compliance dates to watch in 2026, and why misleading the government on cybersecurity compliance can have serious consequences.

The conversation focuses on simplifying security programs, returning to core fundamentals, and learning from real-world enforcement and regulatory cases. The episode closes with a holiday pour and a preview of format changes coming next.

⏱️ Timestamps

• 0:00 Intro & episode overview
• 0:33 2026 security resolutions: simplify & back to basics
• 5:45 “Science projects”: removing emotion from decisions
• 8:36 Justin’s goals: family, travel, business & AI workflows
• 17:52 EOS + Atomic Habits workbook (goal planning)
• 23:54 Key compliance dates to watch in 2026
• 31:45 California privacy updates & risk assessments (CCPA)
• 35:39 EU AI Act + NIS2 enforcement ramp-up
• 42:48 Drink break: High West “A Midwinter Night’s Dram.”
• 45:04 Don’t mislead the feds: FedRAMP, SolarWinds, CMMC—wrap-up to 1:20:12

 🎙️ Hosts

• Justin Leapline – @justinleapline
• Joe Wynn – @wynnjoe
• Rick Yocum – @rickyocum

🌐 Connect with Us

• Website: distilledsecuritypodcast.com
• X:  @DisSecPod
• Email: [email protected]

🥃 Drink of the episode: High West A Midwinter Night’s Dram