x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CompTIA Security+ Audio Course

Dr. Jason Edwards

Certified - Security+ 701 is your completely free audio companion for mastering the CompTIA Security+ SY0-701 certification exam. Developed by BareMetalCyber.com, this immersive Audio Course transforms every domain of the official exam objectives into clear, practical, and exam-ready lessons you can learn anywhere—whether commuting, exercising, or studying at home. Each episode delivers focused explanations, real-world examples, and proven study strategies designed to build confidence and help you

technology courses

All Episodes

9:31

Consequences of Non-Compliance (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Failing to meet regulatory or contractual obligations can carry severe consequences, both financially and reputationally. In this episode, we break down the real-world impacts of non-compliance—including fines, sanctions, lawsuits, contract termination, and loss of certifications or business licenses. We examine examples where organizations were penalized for data breaches, late disclosures, weak encryption, or improper record retention, showing how these failures often stemmed from

en

10:08

Effective Compliance Reporting (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Compliance reporting ensures that an organization can demonstrate adherence to regulatory, contractual, and internal security requirements—and in this episode, we explore how to make it both accurate and efficient. We cover internal reporting practices, such as monthly compliance dashboards and policy enforcement summaries, as well as external reports prepared for auditors, regulators, and industry certifying bodies. Good compliance reporting requires structured data collection,

en

9:13

Ongoing Vendor Monitoring and Engagement (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Vendor risk doesn’t stop after the contract is signed—ongoing monitoring and relationship management are critical for maintaining visibility and accountability. In this episode, we explore how organizations track vendor performance through periodic assessments, SLA reviews, compliance reports, and security questionnaires. We highlight how to use continuous monitoring tools and threat intelligence feeds to detect vulnerabilities in vendor software or public disclosures of breaches. Rules of

en

9:22

Agreement Types and Contractual Security (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Contracts are one of the most powerful tools in managing cybersecurity obligations, and in this episode, we break down the types of agreements that define roles, responsibilities, and expectations with external parties. We cover Service-Level Agreements (SLAs), which outline performance and availability targets; Memorandums of Understanding (MOUs) and Memorandums of Agreement (MOAs), which define intent and responsibilities without legal enforceability; and Master Service Agreements (MSAs),

en

10:00

Vendor Risk and Supply Chain Considerations (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

A growing portion of cybersecurity risk now comes from outside the organization—specifically, through third-party vendors, suppliers, and service providers. In this episode, we examine how to assess and manage vendor risk across the full lifecycle, starting with due diligence during procurement and continuing through onboarding, monitoring, and offboarding. We explore how to evaluate vendors based on their security policies, compliance certifications, breach history, and contract

en

10:09

Mean Time Metrics and System Resilience (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

System resilience depends not only on planning but on measurable performance—and in this episode, we explore four key metrics that define how systems behave under failure: Mean Time to Repair (MTTR), Mean Time Between Failures (MTBF), Mean Time to Detect (MTTD), and Mean Time to Respond (MTTR—the other one). MTTR (repair) reflects how long it takes to fix a failed system, while MTBF gives insight into overall reliability by measuring the average time between those failures. MTTD and MTTR

en

9:08

Understanding Recovery Objectives (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Recovery objectives define how quickly and how completely a system must return to functionality after a disruption—and in this episode, we explore two of the most critical metrics: Recovery Time Objective (RTO) and Recovery Point Objective (RPO). RTO sets the maximum allowable downtime before business operations suffer unacceptable consequences, while RPO defines how much data loss an organization can tolerate, typically measured as the time between the last backup and the disruption. These

en

9:16

Business Impact Analysis (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Business Impact Analysis (BIA) is the foundation of business continuity and disaster recovery planning, helping organizations understand which processes matter most and how downtime affects operations. In this episode, we break down how BIAs identify critical systems, estimate recovery time objectives (RTOs) and recovery point objectives (RPOs), and assess financial, operational, and reputational impacts of disruptions. We explore how BIA data feeds into decisions about backup strategies,

en

9:47

Risk Reporting and Communication (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Risk is meaningless if it isn’t communicated effectively—and in this episode, we focus on how risk reporting bridges the gap between technical findings and business leadership. We explore how to craft reports that align with the audience: dashboards and trend lines for executives, technical remediation plans for IT, and regulatory compliance summaries for auditors. Effective risk communication translates complex concepts into business-relevant impact, using clear visuals, prioritized lists,

en

10:17

Risk Management Strategies (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Once risks are identified and analyzed, organizations must decide how to respond—and in this episode, we examine the five primary risk management strategies: mitigate, transfer, accept, avoid, and exempt. Mitigation involves applying controls to reduce risk impact or likelihood, such as enabling MFA or installing endpoint protection. Transferring risk often involves insurance or outsourcing functions to vendors with specialized capabilities and contractual safeguards. Acceptance applies

en

9:43

Risk Appetite, Tolerance, and Thresholds (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Every organization must decide how much risk it is willing to accept in pursuit of its goals—and this decision informs every security investment, policy, and control. In this episode, we break down the concepts of risk appetite (what you’re willing to pursue), risk tolerance (what you’re willing to withstand), and risk thresholds (the hard lines that should not be crossed). We explore how these values differ across business units and change over time depending on market conditions,

en

9:07

Risk Registers and Key Risk Indicators (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Managing risk at scale requires tools that provide structure and visibility, and in this episode, we examine two of the most important: risk registers and key risk indicators (KRIs). A risk register is a living document that catalogs identified risks, their likelihood, potential impact, status, ownership, and mitigation plans. It enables organizations to prioritize action, track accountability, and monitor trends over time. KRIs are measurable values—like failed login attempts, unpatched

en

8:45

Risk Analysis and Scoring (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

After risks are identified, they need to be analyzed and prioritized—and that’s where risk scoring comes in. In this episode, we break down both qualitative methods (like high/medium/low ratings and heat maps) and quantitative techniques (like Single Loss Expectancy, Annualized Loss Expectancy, and Annualized Rate of Occurrence). We explain how these models help translate risk into business impact, using dollar values, probability estimates, or criticality ratings to justify security

en

9:40

Conducting Risk Assessments (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Risk assessments provide the data organizations need to make informed security decisions, and in this episode, we explore the different types of assessments and how they’re conducted. We start by comparing ad hoc, recurring, one-time, and continuous assessments, each of which serves different operational or compliance needs. We explain how to scope an assessment, identify stakeholders, gather data, and evaluate controls to determine risk levels for systems, processes, or projects. Tools

en

9:34

Risk Management Fundamentals (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Risk management is the engine that drives strategic decision-making in security, helping organizations focus their efforts on what matters most. In this episode, we explain how to identify risks, evaluate their likelihood and impact, and decide whether to accept, avoid, mitigate, or transfer them. We cover key concepts like threat, vulnerability, asset, and exposure, as well as tools such as risk registers, impact matrices, and scenario modeling. Whether qualitative or quantitative, risk

en

9:27

Governance Structures and Roles (Part 2) (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Having a governance structure is only the beginning—the real value comes from clearly defining roles and responsibilities within that structure. In this episode, we examine the key roles involved in managing data and systems securely, including data owners, custodians, stewards, processors, and controllers. Data owners are responsible for setting classification levels and defining access policies, while custodians implement and manage those policies through technical controls and

en

9:04

Governance Structures and Roles (Part 1) (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Security governance relies on a clear structure that defines how decisions are made, who enforces them, and how oversight is maintained. In this episode, we explore governance structures such as boards, steering committees, and cross-functional security councils, each playing a role in shaping strategy, prioritizing risks, and allocating resources. These structures help align security goals with business objectives by bringing together stakeholders from IT, legal, HR, operations, and

en

8:31

Monitoring and Revising Governance Policies (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Security policies must evolve with technology, threat landscapes, and business goals—and that’s why continuous monitoring and revision are essential. In this episode, we explore how organizations maintain governance effectiveness by regularly reviewing policies, tracking their implementation, and auditing their relevance. We cover methods like policy health checks, control performance metrics, stakeholder feedback, and lessons learned from incidents or industry shifts. Revision isn’t just

en

9:23

External Security Governance Considerations (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Security doesn't operate in a vacuum—organizations must navigate a complex web of external considerations that shape how security is governed. In this episode, we explore regulatory requirements (like GDPR, HIPAA, and PCI-DSS), industry standards, and legal obligations that influence security architecture, policies, and practices. We also cover how government agencies, professional associations, and contractual requirements from partners or clients can impose additional controls or audit

en

9:05

Procedures and Playbooks (Domain 5)

Certified: The CompTIA Security+ Audio Course ·

2025/06/16

Procedures and playbooks are the operational backbone of a mature security program—translating policy into detailed, repeatable steps for responding to specific threats or performing security tasks. In this episode, we explain the difference between general procedures (e.g., user onboarding or access review) and incident-specific playbooks (e.g., malware containment or phishing investigation). Playbooks are especially valuable in reducing response time and minimizing errors during

en

222 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs