How do you manage for failure? While at KCDC, Richard chatted with Amy Norris about building a culture that supports dealing with failure in a healthy way. Amy focuses on clear communication - about expectations, positive feedback, negative feedback, and more! The challenge is creating a safe place for people to ask questions and talk clearly about what they see happening in the environment. We can only get better when we can see the problems folks are having - it takes time, patience, and lots of communication to make that happen!

Links

• Atlas 9

Recorded August 14, 2025

How do you know if one of your accounts has been part of a security breach? Richard chats with Troy Hunt about HaveIBeenPwned, a free service that allows individuals to receive notifications when their accounts appear in a security breach. Troy discusses other services available alongside HaveIBeenPwned for sysadmins, including password checking, identifying accounts associated with a specific domain, and more. When considering the cost of managing a customer with an exploited account, being able to prevent or mitigate potential risk is highly valuable.

Links

• HaveIBeenPwned
• Park Mobile Settlement
• Snowflake Data Breach

Recorded September 25, 2025

You're down - is it your servers, or someone else's? While at the Kansas City Developers Conference, Richard sits down with Mandi Walls from Pager Duty about her experiences dealing with incidents involving vendor services. It might be your cloud provider, or some other SaaS element of a pipeline, or even an open-source library dependency in an important internal application that can cause a problem. What are the next steps? Mandi talks about having a software and services bill of materials so that you know what dependencies you have, where to check their status, and how to get help when you need it. Our systems are more complicated than ever - you need a plan to deal with the incidents!

Links

• Azure Status
• SBOM Tool
• Vendor Incidents with Jeff Martins

Recorded August 14, 2025