x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CISSP Audio Course

Dr. Jason Edwards

Welcome to The Bare Metal Cyber CISSP Audio Course—your comprehensive companion for mastering the Certified Information Systems Security Professional (CISSP) certification. Built for serious cybersecurity professionals and aspiring leaders alike, this Audio Course transforms the eight domains of the CISSP Common Body of Knowledge into clear, structured, and engaging lessons you can learn anytime, anywhere. Each episode blends real-world context, expert insight, and exam-focused explanations to help

education courses

All Episodes

10:52

Episode 38: Security Models: Bell-LaPadula, Biba,...

Certified: The CISSP Audio Course ·

2025/06/23

Security models are theoretical frameworks that help define how systems enforce access control, integrity, and confidentiality. In this episode, we review the three classic models: Bell-LaPadula (focused on confidentiality), Biba (focused on integrity), and Clark-Wilson (focused on well-formed transactions and separation of duties). We explain the core rules behind each model—like “no read up” and “no write down”—and discuss where each is applied in government, commercial, and financial

en

10:38

Episode 37: Secure Design Principles: Defense in...

Certified: The CISSP Audio Course ·

2025/06/23

Designing secure systems isn’t just about applying tools—it’s about embedding principles. This episode introduces two foundational security design concepts: defense in depth and least privilege. Defense in depth layers multiple controls to prevent, detect, and contain threats, while least privilege ensures users and systems operate with the minimum access necessary. We explain how these principles apply to networks, applications, and user environments, and how they reduce risk from both

en

11:01

Episode 36: Logging, Monitoring, and Metadata...

Certified: The CISSP Audio Course ·

2025/06/22

Without visibility, security is just guesswork. In this episode, we explore how logging and monitoring give security teams the information they need to detect, investigate, and respond to incidents. We discuss log types (system, application, network), retention policies, log integrity, and secure storage. Metadata, such as timestamps, source IPs, and user actions, adds context to every alert and event. You'll also learn about regulatory and legal considerations for log retention, especially

en

11:25

Episode 35: Handling of Sensitive Systems and...

Certified: The CISSP Audio Course ·

2025/06/22

Some systems and data are too critical to treat like everything else. This episode focuses on how organizations identify, secure, and manage sensitive systems and high-value assets (HVAs), such as financial databases, intellectual property repositories, and industrial control systems. We discuss segmentation, access control, system hardening, monitoring, and tailored incident response plans for these resources. You’ll also learn how to align asset protection with business impact, risk

en

11:11

Episode 34: Backup Controls and Data Recovery

Certified: The CISSP Audio Course ·

2025/06/22

Backup and recovery plans are your insurance against data loss. In this episode, we explore the critical controls necessary to ensure backups are available, secure, and usable when needed. We discuss types of backups (full, incremental, differential), retention policies, storage locations (on-site vs. off-site), and encryption strategies. You’ll also learn about recovery objectives like RTO (Recovery Time Objective) and RPO (Recovery Point Objective), and how to test your backup system

en

11:17

Episode 33: Secure Use of Cloud Storage and Shared...

Certified: The CISSP Audio Course ·

2025/06/22

Cloud services offer scalability and convenience, but they also introduce unique security risks—especially when sharing infrastructure with other tenants. In this episode, we cover best practices for securely using cloud storage, virtualized environments, and shared computing platforms. Topics include encryption, access control, tenant isolation, identity federation, and logging. We also discuss the shared responsibility model, where both provider and customer have distinct obligations. If

en

11:06

Episode 32: Data Sovereignty and Jurisdictional Control

Certified: The CISSP Audio Course ·

2025/06/22

In a global digital economy, where your data resides can determine which laws apply to it. This episode explains data sovereignty—the principle that data is subject to the laws of the country in which it’s stored—and how jurisdictional control affects compliance, privacy, and access. We examine common challenges organizations face when storing or processing data across borders, such as conflicting legal obligations or data transfer restrictions. We also explore strategies to manage these

en

11:00

Episode 31: Asset Inventory Management

Certified: The CISSP Audio Course ·

2025/06/22

You can’t protect what you don’t know you have. In this episode, we focus on the importance of maintaining a comprehensive and accurate inventory of all information assets—hardware, software, data, and even personnel. Asset inventory management supports effective risk assessments, helps identify gaps in coverage, and is a foundational requirement for many compliance standards. We explore asset classification, ownership, tracking methods, and how asset data feeds into broader security

en

10:49

Episode 30: Media Storage and Sanitization Methods

Certified: The CISSP Audio Course ·

2025/06/22

Digital media—whether it’s a hard drive, USB stick, or backup tape—requires special handling to ensure data remains protected throughout its lifecycle. This episode explores how to securely store, track, and sanitize various types of storage media. We discuss media classification, physical protections, encryption, and environmental controls for storage, as well as different sanitization techniques including clearing, purging, and destruction. You’ll also learn how to enforce policy

en

10:52

Episode 29: Secure Data Handling in Transit and at Rest

Certified: The CISSP Audio Course ·

2025/06/22

Data is constantly on the move—or waiting to be accessed—and must be protected in both states. In this episode, we examine the best practices for securing data at rest (stored on disk or cloud) and data in transit (moving across networks). You'll learn about encryption methods, key management practices, access controls, and monitoring techniques. We also address compliance requirements that demand specific protections for data in these states. Protecting data wherever it resides or flows is

en

10:46

Episode 28: Data Remanence and Secure Disposal...

Certified: The CISSP Audio Course ·

2025/06/22

Even when you delete a file, remnants can linger—posing serious security risks. This episode delves into the concept of data remanence and the techniques used to ensure secure data disposal. You'll learn about data wiping, degaussing, shredding, cryptographic erasure, and the standards that guide their use, such as NIST SP 800-88. We also cover the importance of disposal audits, chain of custody for media, and the role of policy in enforcing proper end-of-life procedures. Secure disposal is

en

11:03

Episode 27: Privacy Protection and PII Handling

Certified: The CISSP Audio Course ·

2025/06/22

Personally Identifiable Information (PII) is one of the most regulated and targeted types of data in cybersecurity. This episode focuses on how organizations identify, handle, and protect PII throughout its lifecycle. We explain what qualifies as PII, the risks associated with its misuse, and the controls needed to ensure confidentiality, integrity, and lawful processing. From consent management and access restrictions to anonymization techniques and breach response plans, you’ll gain a

en

11:21

Episode 26: Data Retention and Archival Strategies

Certified: The CISSP Audio Course ·

2025/06/22

Keeping data longer than necessary can increase your risk exposure, but disposing of it too early can create legal and operational gaps. This episode addresses how to build effective data retention and archival strategies that meet legal, regulatory, and business needs. You’ll learn how to define retention periods, implement secure storage solutions for inactive data, and manage transitions into archives. We also discuss how to ensure accessibility for audit and legal discovery without

en

9:51

Episode 25: Ownership and Stewardship Responsibilities

Certified: The CISSP Audio Course ·

2025/06/22

Every piece of information in an organization should have an assigned owner and one or more stewards. In this episode, we define what it means to be a data owner—someone accountable for the data’s use, classification, and protection. We also explore the role of stewards—those responsible for managing data quality and integrity on a day-to-day basis. Clarifying these roles strengthens governance, supports compliance, and streamlines incident response. Understanding how to define, document,

en

11:09

Episode 24: Data Sensitivity and Labeling Requirements

Certified: The CISSP Audio Course ·

2025/06/22

Labeling data according to its sensitivity is one of the most overlooked but powerful techniques in cybersecurity. In this episode, we explore what it means for data to be considered sensitive, how that sensitivity is determined, and how labels communicate handling requirements to users and systems. We also cover how to implement labeling technologies and ensure compliance with both organizational policies and regulatory requirements. Properly labeling data not only supports access control

en

11:14

Episode 23: Information Lifecycle and Data...

Certified: The CISSP Audio Course ·

2025/06/22

Understanding how data flows through its lifecycle is essential for protecting it appropriately. This episode walks through the phases of the information lifecycle: creation, storage, usage, transmission, archival, and disposal. We then examine data classification schemes—such as public, internal, confidential, and restricted—and how classification drives the application of controls. You'll learn how to create classification policies, apply labels, and ensure data is treated consistently

en

11:01

Episode 22: Security Documentation and Governance...

Certified: The CISSP Audio Course ·

2025/06/22

Effective security governance depends on clear documentation and measurable performance. This episode explains the structure and function of security documentation—including policies, standards, guidelines, and procedures—as well as how to manage these documents over time. We also explore key performance indicators (KPIs) and metrics used to assess the effectiveness of security controls and governance practices. You'll learn how to track compliance, measure risk reduction, and communicate

en

11:23

Episode 21: Legal Systems and Cybercrime Laws Globally

Certified: The CISSP Audio Course ·

2025/06/22

Cybersecurity professionals operate in a legal landscape that spans continents, jurisdictions, and regulatory systems. In this episode, we examine the major types of legal systems—common law, civil law, religious law, and customary law—and how each influences how cybersecurity is enforced. We also explore global cybercrime laws and treaties, including the Budapest Convention, and review how international cooperation is achieved in cyber investigations. Understanding the legal frameworks

en

10:37

Episode 20: Intellectual Property and Licensing Laws

Certified: The CISSP Audio Course ·

2025/06/22

Cybersecurity professionals must understand how to protect not only data but also intellectual property. This episode unpacks the key types of intellectual property—copyrights, trademarks, patents, and trade secrets—and how they apply in the digital world. We also examine licensing models for software and content, including open-source and proprietary agreements. Understanding the legal landscape helps prevent accidental infringement and supports secure software procurement, asset

en

9:57

Episode 19: Privacy Principles and Data Protection...

Certified: The CISSP Audio Course ·

2025/06/22

Protecting personal data is not just a compliance requirement—it’s a trust imperative. In this episode, we dive into key privacy principles such as data minimization, purpose limitation, and transparency. You’ll learn how regulations like the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) define privacy obligations and empower individuals with rights over their data. We also cover how organizations can embed privacy by design into their systems and

en

138 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College