x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CISSP Audio Course

Dr. Jason Edwards

Welcome to The Bare Metal Cyber CISSP Audio Course—your comprehensive companion for mastering the Certified Information Systems Security Professional (CISSP) certification. Built for serious cybersecurity professionals and aspiring leaders alike, this Audio Course transforms the eight domains of the CISSP Common Body of Knowledge into clear, structured, and engaging lessons you can learn anytime, anywhere. Each episode blends real-world context, expert insight, and exam-focused explanations to help

education courses

All Episodes

10:36

Episode 118: Waterfall vs. Agile vs. DevOps Approaches

Certified: The CISSP Audio Course ·

2025/06/23

Development methodologies have a direct impact on how security is integrated into software projects. This episode compares three major approaches—Waterfall, Agile, and DevOps—and how each handles risk, testing, and control. You'll learn the strengths and challenges of each model, including change management, documentation, and time-to-delivery. We also explore how DevSecOps brings security into the CI/CD pipeline. CISSPs must be familiar with these approaches to advise development teams,

en

10:41

Episode 117: Software Development Lifecycle (SDLC)...

Certified: The CISSP Audio Course ·

2025/06/23

Secure software doesn’t happen by accident—it’s the result of disciplined development practices. This episode explores common Software Development Lifecycle (SDLC) models, including waterfall, spiral, and V-model, and how they structure phases such as requirements, design, coding, testing, deployment, and maintenance. We also discuss where and how security should be integrated into each phase. CISSPs must understand SDLC frameworks to support secure software planning, ensure oversight of

en

10:45

Episode 116: Security Operations Center (SOC) Best...

Certified: The CISSP Audio Course ·

2025/06/23

The Security Operations Center (SOC) is the nerve center of cybersecurity monitoring and incident response. In this episode, we explore SOC roles, responsibilities, staffing models, tools, and key performance indicators. We discuss shift scheduling, escalation paths, use cases, and integration with threat intelligence feeds. You'll also learn about SOC maturity models and how to evolve from reactive operations to proactive threat hunting. CISSPs must understand how to structure, support,

en

10:39

Episode 115: Personnel Security Controls and...

Certified: The CISSP Audio Course ·

2025/06/23

People are at the heart of every security program—and also one of its greatest vulnerabilities. In this episode, we examine personnel security controls that mitigate human-based risks. Topics include background checks, onboarding protocols, security training, acceptable use policies, and ongoing behavior monitoring. We also explore separation of duties, job rotation, and least privilege principles that reduce fraud and error. CISSPs must be able to design and enforce personnel policies that

en

11:41

Episode 114: Physical Security Operations: Locks,...

Certified: The CISSP Audio Course ·

2025/06/23

Cybersecurity extends into the physical world, where threats like unauthorized access, theft, and sabotage can bypass digital defenses. In this episode, we explore physical security operations, including the use of barriers, locks, access control systems, security guards, surveillance cameras, and visitor management. We also cover how physical security integrates with IT through badges, biometrics, and monitoring. CISSPs must understand how to assess facility risks, implement layered

en

11:30

Episode 113: Malware Analysis and Containment

Certified: The CISSP Audio Course ·

2025/06/23

Understanding malware is essential for effective defense. This episode explores how security teams analyze and contain malicious software, including viruses, worms, ransomware, and trojans. We break down static and dynamic analysis techniques, sandboxing environments, signature development, and reverse engineering basics. You'll also learn how to contain outbreaks, remove malware safely, and update detection tools. CISSPs may not perform deep malware analysis themselves, but they must

en

11:06

Episode 112: Insider Threat Identification and...

Certified: The CISSP Audio Course ·

2025/06/23

Not all threats come from the outside. Insider threats—whether malicious or accidental—pose a significant risk to organizational security. In this episode, we examine how to identify, monitor, and respond to threats from employees, contractors, or partners with legitimate access. We discuss behavioral indicators, user activity monitoring, data loss prevention (DLP), and privacy considerations. You'll also learn how to balance detection efforts with employee trust and legal requirements

en

11:48

Episode 111: Endpoint Detection and Response (EDR)

Certified: The CISSP Audio Course ·

2025/06/23

Endpoints remain a primary target for cyberattacks, and protecting them requires more than traditional antivirus solutions. This episode explores Endpoint Detection and Response (EDR), a modern approach to securing laptops, desktops, servers, and mobile devices. We explain how EDR tools provide real-time monitoring, behavioral analysis, threat hunting, and automated response capabilities. You'll learn how EDR integrates with SIEM platforms, supports forensic investigations, and helps

en

10:49

Episode 110: Secure Disposal and Media Sanitization

Certified: The CISSP Audio Course ·

2025/06/23

Data doesn’t disappear just because you delete it. In this episode, we focus on how to securely dispose of media and sanitize storage devices to prevent data recovery. We cover techniques such as overwriting, degaussing, cryptographic erasure, and physical destruction, as well as when and how to apply each. You’ll also learn about documentation requirements, chain of custody for retired media, and applicable standards like NIST SP 800-88. CISSPs must ensure that end-of-life processes are

en

11:17

Episode 109: Change Control and Approval Processes

Certified: The CISSP Audio Course ·

2025/06/23

Security isn’t just about stopping bad changes—it’s about managing all changes effectively. In this episode, we examine the formal process of change control: how to submit change requests, perform impact assessments, obtain approvals, test in controlled environments, and document results. We also cover the importance of change advisory boards (CABs), rollback planning, and post-implementation review. For CISSPs, understanding change control is key to maintaining operational stability,

en

11:08

Episode 108: Patch Management and Configuration Control

Certified: The CISSP Audio Course ·

2025/06/23

Unpatched systems are one of the leading causes of successful cyberattacks. In this episode, we explore the role of patch management and configuration control in maintaining secure and reliable systems. We explain how to evaluate patches, schedule deployments, and monitor success. You'll also learn how to track configuration baselines, control changes, and enforce consistent settings across environments. CISSPs must ensure that vulnerabilities are addressed promptly and that unauthorized

en

11:34

Episode 107: Business Continuity Testing and Tabletop...

Certified: The CISSP Audio Course ·

2025/06/23

Plans are only useful if they’re tested. In this episode, we explore the various methods for testing business continuity and disaster recovery plans—including walkthroughs, simulations, functional tests, and tabletop exercises. We discuss how to design tests, involve key stakeholders, and evaluate performance without disrupting operations. You’ll learn how testing helps uncover weaknesses in coordination, communication, and recovery capabilities. For CISSPs, facilitating and analyzing these

en

10:53

Episode 106: Disaster Recovery Planning: RTO, RPO

Certified: The CISSP Audio Course ·

2025/06/23

When disaster strikes, organizations must restore operations quickly—and with minimal data loss. This episode focuses on Disaster Recovery Planning (DRP), particularly the metrics used to guide recovery strategies: Recovery Time Objective (RTO) and Recovery Point Objective (RPO). We explain how to define recovery priorities, select appropriate backup and failover solutions, and develop DR plans that meet business expectations. You’ll also learn about recovery site options, communication

en

11:00

Episode 105: Evidence Acquisition and Preservation

Certified: The CISSP Audio Course ·

2025/06/23

The reliability of evidence hinges on how it’s handled. In this episode, we dive deeper into the principles and techniques for acquiring and preserving digital evidence. Topics include imaging storage media, capturing memory dumps, recording live sessions, and documenting every step in the collection process. We also address how to avoid contamination, preserve timestamps, and ensure repeatability for court presentation. CISSPs must ensure that any evidence collected during

en

11:01

Episode 104: Digital Forensics and Chain of Custody

Certified: The CISSP Audio Course ·

2025/06/23

Preserving and analyzing digital evidence requires precision, consistency, and legal awareness. This episode explores the fundamentals of digital forensics—from identifying and collecting evidence to maintaining a documented chain of custody. We discuss volatile data acquisition, imaging tools, hashing for integrity verification, and timeline reconstruction. You’ll also learn about legal standards that govern admissibility and the responsibilities of forensic investigators. CISSPs don’t

en

11:04

Episode 103: Incident Management: Preparation and...

Certified: The CISSP Audio Course ·

2025/06/23

Incidents are inevitable, and how you respond can determine the scale of impact. In this episode, we walk through the phases of incident management—preparation, identification, containment, eradication, recovery, and lessons learned. We explain how to build an incident response plan, assemble a response team, and establish escalation protocols. You’ll also learn how to coordinate with legal, PR, and law enforcement when necessary. Incident management is a high-priority domain for CISSPs

en

10:17

Episode 102: Logging, Event Correlation, and SIEM

Certified: The CISSP Audio Course ·

2025/06/23

Capturing events is only the beginning—making sense of them is where the real value lies. This episode covers how organizations collect, normalize, and correlate logs from various systems and devices using Security Information and Event Management (SIEM) platforms. We discuss the components of a SIEM, alert tuning, and the use of correlation rules to detect complex threat patterns. You'll learn how SIEMs enhance visibility, speed up investigations, and support compliance with standards like

en

11:16

Episode 101: Daily Operations: Procedures,...

Certified: The CISSP Audio Course ·

2025/06/23

Security operations are built on consistency, structure, and clear documentation. In this episode, we explore the daily tasks that keep cybersecurity programs running—such as log reviews, system checks, user access reviews, and patch verification. We explain how operational procedures and checklists reduce errors, promote accountability, and streamline incident response. You’ll also learn how to align these routines with compliance requirements and best practices. CISSPs are expected to

en

11:14

Episode 100: Assessing Third-Party and Vendor Risk

Certified: The CISSP Audio Course ·

2025/06/23

Vendors and service providers often have privileged access to your data and systems—making them a potential weak link. This episode focuses on third-party risk management, including how to evaluate a vendor's security posture before and after engagement. We cover due diligence checklists, contract clauses, security questionnaires, and ongoing monitoring practices. You'll also learn about shared responsibility models and how to manage risks across cloud, SaaS, and supply chain relationships

en

11:43

Episode 99: Continuous Monitoring and Feedback Loops

Certified: The CISSP Audio Course ·

2025/06/23

Security is not a one-time event—it’s a continuous process. In this episode, we explore how continuous monitoring helps organizations detect changes, uncover risks, and maintain compliance in dynamic environments. We discuss how to implement automated data collection, baseline comparison, and event correlation across networks, endpoints, cloud services, and applications. You'll also learn how feedback loops from incidents, audits, and testing drive program maturity. CISSPs must understand

en

138 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College