x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CISSP Audio Course

Dr. Jason Edwards

Welcome to The Bare Metal Cyber CISSP Audio Course—your comprehensive companion for mastering the Certified Information Systems Security Professional (CISSP) certification. Built for serious cybersecurity professionals and aspiring leaders alike, this Audio Course transforms the eight domains of the CISSP Common Body of Knowledge into clear, structured, and engaging lessons you can learn anytime, anywhere. Each episode blends real-world context, expert insight, and exam-focused explanations to help

education courses

All Episodes

11:10

Episode 18: Supply Chain Risk and Due Diligence

Certified: The CISSP Audio Course ·

2025/06/22

Supply chains extend far beyond traditional logistics—they now include digital components, cloud providers, software dependencies, and more. This episode explores how cyber threats enter through the supply chain and what due diligence processes are needed to prevent compromise. We discuss methods for evaluating supply chain partners, setting clear security expectations, and responding to incidents that originate outside your direct control. By understanding the dynamics of modern supply

en

10:14

Episode 17: Third-Party Risk Management

Certified: The CISSP Audio Course ·

2025/06/22

Today’s organizations rely heavily on vendors, contractors, and service providers—but each relationship introduces potential risks. In this episode, we cover the principles of third-party risk management, including due diligence, contractual controls, and ongoing monitoring. You’ll learn how to assess a vendor’s security posture, enforce security requirements through service-level agreements (SLAs), and respond when third-party weaknesses are discovered. This topic is increasingly important

en

9:39

Episode 16: Security Awareness and Training Programs

Certified: The CISSP Audio Course ·

2025/06/22

Even the best technical defenses can fail if employees don’t understand their security responsibilities. This episode focuses on the development and delivery of effective security awareness and training programs. We explore how to tailor content for different roles, choose the right delivery formats, and measure effectiveness through assessments and behavioral monitoring. You’ll also learn how awareness programs support compliance and reduce risks such as phishing, social engineering, and

en

10:14

Episode 15: Personnel Security: Background Checks,...

Certified: The CISSP Audio Course ·

2025/06/22

People are often the weakest link in cybersecurity, and managing personnel risk is a critical responsibility. In this episode, we discuss best practices for pre-employment screening, including background checks and reference validation. We also explore how organizations use security policies to govern employee behavior and set expectations for acceptable use, confidentiality, and compliance. Finally, we walk through secure termination processes that include revoking access, conducting exit

en

10:23

Episode 14: Security Policies, Standards, Procedures,...

Certified: The CISSP Audio Course ·

2025/06/22

A strong cybersecurity program is built on clear and well-documented policies. In this episode, we break down the four foundational types of documentation: policies, standards, procedures, and guidelines. You'll learn how each plays a role in setting expectations, enforcing controls, and guiding behavior. We also explain who creates these documents, how they’re maintained, and why they matter for regulatory compliance and security culture. Understanding this documentation hierarchy is

en

10:32

Episode 13: Disaster Recovery Planning (DRP) and...

Certified: The CISSP Audio Course ·

2025/06/22

Disaster Recovery Planning is a focused component of business continuity that addresses the rapid restoration of IT infrastructure and systems. In this episode, we explore how DRP helps organizations bounce back after major incidents such as natural disasters, cyberattacks, or system failures. You'll learn about recovery time objectives (RTOs), recovery point objectives (RPOs), and different recovery site strategies like hot, warm, and cold sites. We also explain how DRP integrates with

en

10:44

Episode 12: Business Continuity Planning (BCP)...

Certified: The CISSP Audio Course ·

2025/06/22

Business Continuity Planning, or BCP, is essential for maintaining operations during unexpected disruptions. This episode explores the key elements of a successful BCP strategy, including risk identification, business impact analysis, and recovery planning. We discuss how organizations determine critical functions, establish recovery priorities, and ensure that people, systems, and processes can recover efficiently. You’ll also learn the difference between BCP and disaster recovery, and why

en

11:28

Episode 11: Risk Response and Risk Appetite

Certified: The CISSP Audio Course ·

2025/06/22

Once a risk is identified and assessed, the next critical step is determining how to respond. In this episode, we examine the four primary risk response strategies: risk avoidance, risk mitigation, risk transference, and risk acceptance. We also clarify the concepts of risk appetite and risk tolerance, and how organizations use these to shape their security policies and control decisions. You'll learn how business objectives, regulatory pressure, and operational needs influence how much

en

10:53

Episode 10: Risk Management Concepts: Threats,...

Certified: The CISSP Audio Course ·

2025/06/22

Risk management is a cornerstone of cybersecurity, and this episode introduces the essential vocabulary and concepts you need to know. We define threats, vulnerabilities, likelihood, impact, and risk—and show how these elements interact in both assessments and real-world decision-making. You’ll also hear how organizations use risk tolerance and acceptance to prioritize controls and allocate resources. By mastering these fundamentals, you’ll be equipped to approach risk-based questions on

en

10:25

Episode 9: Professional Ethics and (ISC)² Code of Ethics

Certified: The CISSP Audio Course ·

2025/06/22

Ethics are the backbone of trust in the cybersecurity profession. This episode explores the professional responsibilities outlined in the ISC² Code of Ethics, including the duty to protect society, act honorably, provide competent service, and advance the profession. We explain how these ethical canons apply to real-world decision-making and the consequences of ethical violations. As a CISSP candidate, demonstrating ethical judgment isn’t just part of the exam—it’s a lifelong obligation

en

11:12

Episode 8: Organizational Roles and Responsibilities

Certified: The CISSP Audio Course ·

2025/06/22

Security is not the job of a single person or department—it’s a shared responsibility across the organization. In this episode, we examine the roles of executives, managers, security teams, end users, and third-party stakeholders in protecting assets and managing risk. You’ll learn about role-based access, segregation of duties, the function of a CISO, and the interplay between business units and IT. Understanding how responsibilities are distributed is essential for implementing effective

en

11:03

Episode 7: Compliance Requirements: Legal,...

Certified: The CISSP Audio Course ·

2025/06/22

Cybersecurity professionals must navigate a complex landscape of compliance obligations. This episode explains the differences between legal, regulatory, and contractual requirements, and how they impact your organization’s security posture. From privacy laws like GDPR and CCPA to industry frameworks such as HIPAA, PCI-DSS, and SOX, we explore what it takes to build and maintain compliance. We also address contractual security obligations that arise in third-party agreements. If you’re

en

11:17

Episode 6: Security Governance Principles: Frameworks...

Certified: The CISSP Audio Course ·

2025/06/22

Governance gives structure and direction to an organization’s cybersecurity efforts. In this episode, we explore what it means to build a security strategy aligned with business goals, risk appetite, and compliance obligations. You’ll learn about common governance frameworks such as NIST, ISO, and COBIT, and how they guide policy creation, control selection, and program management. We also discuss the importance of leadership involvement, accountability, and communication when establishing

en

10:52

Episode 5: The CIA Triad: Confidentiality, Integrity,...

Certified: The CISSP Audio Course ·

2025/06/22

Every cybersecurity professional must understand the CIA triad—confidentiality, integrity, and availability. These three pillars form the core of nearly every security strategy, policy, and control. In this episode, we break down what each term means, how they apply to real-world environments, and why balancing them is critical to risk management. You’ll learn how breaches in confidentiality, corruption of data integrity, or denial of availability can disrupt business operations and violate

en

9:23

Episode 4: How to Study and Pass the CISSP Exam:...

Certified: The CISSP Audio Course ·

2025/06/22

Success on the CISSP exam requires more than memorizing facts—it takes a strategy, the right materials, and a focused mindset. In this episode, we walk through the most effective ways to prepare for the test, from selecting the right books and practice exams to choosing between self-paced and instructor-led training. We also talk about managing study timelines, pacing your progress, and mentally preparing for the adaptive test environment. If you're committed to passing the CISSP on your

en

10:00

Episode 3: Career Impact of the CISSP: Roles,...

Certified: The CISSP Audio Course ·

2025/06/22

The CISSP isn’t just a certification—it’s a powerful career accelerator. This episode breaks down how earning your CISSP can open doors to high-level roles, raise your earning potential, and give you access to new leadership opportunities in the cybersecurity field. We cover the types of positions typically held by CISSP-certified professionals, explore industry data on salary trends, and discuss how employers view this credential during the hiring process. If you're wondering whether the

en

10:05

Episode 2: CISSP vs. Other Certifications: Which...

Certified: The CISSP Audio Course ·

2025/06/22

Choosing the right cybersecurity certification can shape your career for years to come. In this episode, we compare the CISSP to other well-known certifications including CompTIA Security+, CISM, CRISC, and CEH. We examine how these credentials differ in focus, experience level, and strategic alignment—helping you understand which path fits your background and goals. Whether you're looking for a technical launchpad or a management-level credential, this discussion highlights where the CISSP

en

10:16

Episode 1: What Is the CISSP and Why It Matters

Certified: The CISSP Audio Course ·

2025/06/22

In this foundational episode, we introduce the Certified Information Systems Security Professional—better known as the CISSP. You’ll learn what the certification represents, who it’s designed for, and why it continues to be considered the gold standard for cybersecurity professionals around the world. We explore how the CISSP stands apart from other security credentials, what it proves about your skills, and how it fits into the broader cybersecurity career ecosystem. Whether you’re

en

138 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College