x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CISM Audio Course

Dr. Jason Edwards

The Bare Metal Cyber CISM Audio Course is your comprehensive, exam-focused audio companion for mastering the Certified Information Security Manager (CISM) certification. Designed to guide aspiring security leaders through all four domains of the CISM exam, this prepcast translates complex risk, governance, and incident response concepts into clear, structured, and easy-to-follow episodes. Whether you"re transitioning from a technical role or already managing security programs, the series offers over

education courses

All Episodes

9:18

Episode 32: Developing and Using Information Security...

Certified: The CISM Audio Course ·

2025/07/06

If you can’t measure it, you can’t manage it. In this episode, we cover how to create meaningful metrics for tracking the effectiveness of your security program. You’ll learn how to align metrics with strategic goals, define KPIs, and communicate results—critical for demonstrating program value on the CISM exam. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

9:51

Episode 31: Writing Actionable Procedures and Guidelines

Certified: The CISM Audio Course ·

2025/07/06

Policies set direction—but procedures make things happen. This episode teaches you how to translate security policies into actionable procedures and practical guidelines. You’ll learn what ISACA expects in terms of clarity, accountability, and alignment with business operations—concepts tested heavily in Domain 3. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

12:01

Episode 30: Developing Effective Security Policies

Certified: The CISM Audio Course ·

2025/07/06

Every security program is built on policy. In this episode, we cover how to draft policies that support governance, define behavior, and reflect organizational risk appetite. We also walk through policy lifecycle management—creation, approval, communication, and revision—exactly what Domain 3 tests. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:16

Episode 29: Applying Industry Standards and...

Certified: The CISM Audio Course ·

2025/07/06

Domain 3 expects you to apply security frameworks—not just memorize them. In this episode, we explain how to align your program with standards like ISO 27001, NIST SP 800-53, and COBIT. Learn how to tailor controls, document decisions, and pass audits while staying focused on business needs. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:12

Episode 28: Information Asset Identification and...

Certified: The CISM Audio Course ·

2025/07/06

CISM professionals must protect what matters most. This episode covers how to identify, categorize, and classify information assets, including systems, data, and services. You'll also learn how asset classification feeds risk assessment and control selection—essential concepts for the exam. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:24

Episode 27: Selecting and Implementing Security Tools...

Certified: The CISM Audio Course ·

2025/07/06

Technology supports security—but strategy drives selection. This episode helps you evaluate tools based on business needs, risk reduction, and operational fit. You’ll also learn how to plan for integration, avoid vendor lock-in, and ensure your tools support your program metrics. Critical for Domain 3 success. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

9:58

Episode 26: Staffing and Managing Security Teams

Certified: The CISM Audio Course ·

2025/07/06

Domain 3 covers security program development—and that includes managing people. In this episode, we examine how to build and lead an effective security team, define roles, manage talent, and align personnel to program needs. Learn what ISACA expects you to know about staffing a security function. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:07

Episode 25: Best Practices in Risk Monitoring and...

Certified: The CISM Audio Course ·

2025/07/06

CISM exam scenarios often involve risk communication. This episode covers how to monitor risks over time and report findings in ways that drive decision-making. You'll learn how to use KRIs, track control performance, and escalate changes in risk posture effectively—all part of Domain 2's core competencies. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

9:26

Episode 24: Establishing Risk and Control Ownership

Certified: The CISM Audio Course ·

2025/07/06

Ownership is essential to accountability. In this episode, we explain how to assign ownership for risks and controls, and how to ensure those responsibilities are clearly communicated and understood across the enterprise. Expect questions on governance, reporting lines, and stakeholder accountability. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

9:33

Episode 23: Risk Transfer and Avoidance Strategies

Certified: The CISM Audio Course ·

2025/07/06

Sometimes the best risk response is walking away—or handing it off. This episode focuses on transferring and avoiding risk, from insurance and outsourcing to project termination and architecture redesign. We break down how these strategies apply in business scenarios and how to recognize them on the CISM exam. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:19

Episode 22: Risk Mitigation and Acceptance Strategies

Certified: The CISM Audio Course ·

2025/07/06

When risks can't be eliminated, they must be managed. This episode covers the two most frequently used risk treatment options: mitigation and acceptance. Learn how to assess control effectiveness, document risk decisions, and align responses with the organization’s risk appetite—exactly the type of judgment tested on the exam. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

9:57

Episode 21: Conducting Effective Risk Analysis Workshops

Certified: The CISM Audio Course ·

2025/07/06

CISM candidates must know how to facilitate cross-functional risk workshops. In this episode, we walk through the process—from identifying participants and setting objectives to analyzing risk scenarios and prioritizing outcomes. You'll learn what makes a workshop credible and how ISACA expects you to lead the process. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:38

Episode 20: Quantitative vs. Qualitative Risk Assessment

Certified: The CISM Audio Course ·

2025/07/06

Understanding how to evaluate risk is a CISM must-have. In this episode, we break down qualitative and quantitative assessment methods—including likelihood, impact, and exposure calculations. You’ll also learn how to choose the right method based on the organization's needs and what exam questions look like for both models. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:46

Episode 19: Conducting Vulnerability and Control...

Certified: The CISM Audio Course ·

2025/07/06

Risk management starts with understanding where you’re weak. This episode teaches you how to identify control gaps and vulnerabilities, distinguish between the two, and document their business impact. These foundational skills are vital for Domain 2 and are frequently tested in case-based exam questions. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

11:22

Episode 18: Identifying and Managing Emerging Risks...

Certified: The CISM Audio Course ·

2025/07/06

Emerging tech means evolving risk. In this episode, we cover how technologies like AI, IoT, and quantum computing introduce new security threats—and what CISM candidates need to understand to manage them. Learn how to evaluate innovation-driven risk while maintaining governance alignment and operational continuity. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

12:10

Episode 17: Current Cyber Threat Landscape

Certified: The CISM Audio Course ·

2025/07/06

CISM Domain 2 begins here—with risk identification. This episode explores common and emerging threats, including ransomware, insider risk, APTs, and supply chain compromise. We’ll also look at how threat awareness supports business risk decisions, asset valuation, and control design. Expect to see this material reflected in scenario items. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

10:14

Episode 16: Strategic Planning Essentials – Budgets,...

Certified: The CISM Audio Course ·

2025/07/06

Security managers must think like business leaders. This episode focuses on how to plan strategically: building security budgets, aligning resources with business priorities, and creating business cases that justify investment. These concepts show up across multiple domains and are key to demonstrating CISM-level maturity. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

9:45

Episode 15: Deep Dive into NIST Cybersecurity...

Certified: The CISM Audio Course ·

2025/07/06

The NIST CSF is another framework CISM candidates must understand. In this episode, we explain the five core functions—Identify, Protect, Detect, Respond, Recover—and how to apply them to build organizational resilience. You’ll also learn about implementation tiers and profile creation, two areas where exam questions often emerge. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

11:32

Episode 14: Deep Dive into ISO 27001 and ISO 27002

Certified: The CISM Audio Course ·

2025/07/06

ISO 27001 and ISO 27002 show up frequently on the CISM exam. This episode covers their purpose, structure, and use in implementing and managing an Information Security Management System (ISMS). You’ll learn how to use ISO standards to support risk-based controls, policies, and governance documentation. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

12:48

Episode 13: Deep Dive into COBIT Framework

Certified: The CISM Audio Course ·

2025/07/06

COBIT is more than just a buzzword—it’s a cornerstone of enterprise governance. In this episode, we explore COBIT’s structure, goals cascade, governance vs. management domains, and how to use COBIT to align IT with business objectives. Understanding COBIT’s principles is essential for acing CISM Domain 1 and scenario-based questions. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.

en

72 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College