Episode 18: TRISS Highlights, Cloud Chaos & SaaS Lessons Learned

About this episode

The episode discusses highlights from TRISS, lessons on storytelling and women in tech, and analyzes recent cloud outages and incidents.

In Episode 18 of the Distilled Security Podcast, Justin Leapline, Joe Wynn, and Rick Yokum recap their time at TRISS, share lessons on storytelling and women in tech, and break down the recent AWS us-east-1 DNS/DynamoDB outage, the Microsoft Front Door global disruption, and the F5 BIG-IP incident. 🔍 We discuss: - TRISS highlights: panels, community & storytelling - “Breaking the glass ceiling” and unintentional bias in meetings - AWS & Microsoft outages: risk, resilience & when multicloud matters - F5 BIG-IP incident and supply chain risk - Launching a GRC SaaS: episki’s journey, lessons & tradeoffs 🥃 Spirit of the episode Penelope Bourbon – Project X (sherry cask finish) ⏱️ Timestamps 00:00 – 🥃 Intro & TRISS Recap — Highlights from TRISS: panels, community, and a keynote with Edward Norton 02:40 – 📖 The Power of Storytelling — Why empathy and narrative matter in cybersecurity leadership 04:40 – 👩‍💻 Women in Tech & Bias in Meetings — Real talk about unintentional bias and everyday experiences 20:34 – ☁️ AWS & Microsoft Outages — What happened and what it says about cloud resilience 49:38 - 🥃 Bourbon Break — Enjoying a glass of Penelope Project…

People in this episode

Hosts: Justin Leapline, Joe Wynn, Rick Yocum

Topics covered

• cloud outages
• women in tech
• storytelling in cybersecurity
• supply chain risk
• GRC SaaS
• multicloud resilience

Keywords

• TRISS
• AWS outage
• Microsoft Front Door
• F5 BIG-IP
• supply chain risk
• GRC SaaS
• storytelling
• women in tech
• cloud resilience

Mentioned in this episode

Organizations: AWS, Microsoft, F5, episki

Products: Penelope Bourbon – Project X

More episodes of Distilled Security Podcast

• Episode 24: 2 Years, 24 Episodes & The State of Security in the Age of AI · May 14, 2026 · 1h 43m
• Episode 23: Nobody read the report · April 14, 2026 · 2h 10m
• Episode 22: Is AI Good for Security, CIRCIA Starts the Clock, and the M&A Problem Nobody's Talking About · March 9, 2026 · 1h 56m
• Episode 21: AI Notetakers Are Illegal, GRC Tools Are Lying, and ISO 42001 Changes Everything · February 18, 2026 · 1h 51m
• Episode 20 : 2026 Kickoff: Security Resolutions, Key Deadlines, and Don’t Mislead the Feds · January 26, 2026 · 1h 20m
• Episode 19: Cloudflare Outage, AI-Powered Attacks & The Rise of GRC Engineering | Distilled Security Podcast · December 8, 2025 · 2h 12m