x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CCISO Audio Course

Dr Jason Edwards

The Bare Metal Cyber CCISO Audio Course is your complete, executive-level training companion for mastering the Certified Chief Information Security Officer (CCISO) certification. Built for experienced cybersecurity professionals and strategic leaders, this Audio Course delivers over seventy focused episodes covering every domain, concept, and competency area tested on the official EC-Council exam. From governance, risk, and compliance to strategic planning, vendor oversight, and technical control

education courses

All Episodes

11:36

Episode 32: Continuous Monitoring of Security Controls

Certified: The CCISO Audio Course ·

2025/07/07

Continuous monitoring is the mechanism by which CISOs stay ahead of threats, vulnerabilities, and operational failures. In this episode, we unpack what it means to implement and sustain continuous monitoring programs at the enterprise level. You’ll learn how to define monitoring objectives, select appropriate technologies like SIEMs and dashboards, and set thresholds for alerting and escalation. We also cover the role of log management, event correlation, and behavior analytics in

en

11:37

Episode 31: Security Controls Lifecycle Management

Certified: The CCISO Audio Course ·

2025/07/07

Security controls are not set-and-forget tools—they require ongoing oversight to remain effective. In this episode, we guide you through the lifecycle of a control, from initial requirement analysis and selection through implementation, maintenance, performance monitoring, and eventual decommissioning or replacement. You’ll learn how lifecycle management connects with change control, asset inventory, and evolving threat intelligence to ensure that each control continues to serve its

en

10:48

Episode 30: Metrics and KPIs for Security Controls

Certified: The CCISO Audio Course ·

2025/07/07

Security metrics and key performance indicators (KPIs) are critical tools for evaluating the effectiveness of your security program. In this episode, we explain how to design, collect, and interpret meaningful metrics that tie directly to risk, compliance, and business impact. You’ll learn about common KPIs like incident response time, vulnerability remediation cycles, user access violations, and policy exceptions—and how these metrics support decision-making across all levels of

en

10:47

Episode 29: Reporting Audit Outcomes

Certified: The CCISO Audio Course ·

2025/07/06

Audit outcomes aren’t just internal affairs—they often need to be communicated to boards, regulators, and third-party partners. This episode focuses on how CISOs summarize and report audit results in ways that are both accurate and strategically positioned. You'll learn what key metrics to include, how to present findings with context, and how to frame unresolved issues as part of an improvement roadmap. This kind of executive reporting is essential for maintaining credibility and

en

10:25

Episode 28: Responding to and Managing Audit Findings

Certified: The CCISO Audio Course ·

2025/07/06

Once an audit is complete, the focus shifts to interpreting and responding to findings—a process that can significantly impact your credibility and the organization’s risk exposure. In this episode, we explore how CISOs review audit reports, validate findings, prioritize remediation activities, and engage stakeholders across business units. You’ll learn how to differentiate between high-risk and low-risk issues, and how to assign ownership and timelines that align with regulatory

en

11:08

Episode 27: External Audit Preparation

Certified: The CCISO Audio Course ·

2025/07/06

Unlike internal audits, external audits are driven by third parties, regulators, or clients—and come with heightened stakes and external visibility. In this episode, we explore the distinct challenges and executive responsibilities associated with preparing for external audits, including regulatory reviews, customer audits, and formal certification assessments. We walk you through how to coordinate teams, align expectations, and ensure that control documentation is aligned to the specific

en

12:03

Episode 26: Internal Audit Process Fundamentals

Certified: The CCISO Audio Course ·

2025/07/06

This episode breaks down the internal audit process from the perspective of a security executive. You’ll learn how internal audits are used to evaluate control effectiveness, assess risk posture, and provide assurance to executive leadership and the board. We walk through the typical audit lifecycle—including planning, scoping, fieldwork, reporting, and follow-up—and explain the roles and responsibilities of CISOs throughout each phase. Whether you're responding to audits of your own

en

11:57

Episode 25: Compliance Auditing Standards and Frameworks

Certified: The CCISO Audio Course ·

2025/07/06

In this episode, we take a comprehensive look at the major compliance standards and audit frameworks that govern information security practices across industries and geographies. You’ll gain insight into how standards such as ISO 27001, NIST SP 800-53, SOC 2, PCI DSS, HIPAA, and COBIT are used as the foundation for both internal and third-party audits. We break down the core structure of each framework, including how controls are defined, evaluated, and certified.Equally important is

en

12:04

Episode 24: Measuring and Evaluating Control...

Certified: The CCISO Audio Course ·

2025/07/06

After implementation, CISOs must continuously assess whether security controls are actually doing their job. This episode dives into the methodologies and metrics used to evaluate control effectiveness over time. We explore leading and lagging indicators, control testing, key performance indicators (KPIs), and the importance of both quantitative and qualitative data. You’ll learn how to interpret the results of vulnerability scans, control audits, and penetration tests—not just technically,

en

12:21

Episode 23: Implementing Security Controls

Certified: The CCISO Audio Course ·

2025/07/06

Once controls are designed, the implementation phase is where strategy meets execution—and where leadership challenges often emerge. In this episode, we examine what it takes to operationalize control frameworks in live environments, especially in organizations with legacy systems, siloed departments, or limited resources. You’ll learn best practices for rolling out new controls, establishing ownership, conducting pilot testing, and managing stakeholder expectations during the change

en

11:53

Episode 22: Designing Effective Security Controls

Certified: The CCISO Audio Course ·

2025/07/06

Designing security controls isn’t just about selecting tools—it’s about architecting defenses that support business operations while addressing real threats. In this episode, we explore how CISOs approach control design strategically, considering factors such as risk exposure, cost-effectiveness, legal obligations, and operational impact. You'll learn how to map controls to specific risk scenarios and how to balance control strength against user experience, system performance, and business

en

12:08

Episode 21: Introduction to Security Controls

Certified: The CCISO Audio Course ·

2025/07/06

This episode introduces the foundational concept of security controls and explains their critical role in any enterprise cybersecurity program. You’ll learn how controls are used to mitigate risk, enforce policy, and align security with business needs. We walk through the three primary categories of controls—preventive, detective, and corrective—and explore real-world examples of each, from firewalls and access restrictions to audit logs and incident containment procedures. This

en

11:29

Episode 20: Third-Party and Vendor Risk Management

Certified: The CCISO Audio Course ·

2025/07/06

Vendors can introduce significant security risks into your organization—and in this episode, we explain how CISOs assess, monitor, and manage those risks at scale. You’ll learn about the due diligence process, the importance of security questionnaires, and how to evaluate vendors based on data access, processing activities, regulatory exposure, and contractual obligations. From cloud service providers to SaaS platforms, the episode illustrates how vendor ecosystems extend your threat

en

11:21

Episode 19: Auditing Security Governance

Certified: The CCISO Audio Course ·

2025/07/06

Audit plays a vital role in validating that security governance structures are functioning as intended—and this episode teaches you how to prepare for, support, and learn from internal and external audits. You’ll learn how governance controls are evaluated, how auditors assess risk management practices, and how findings should be categorized and escalated. As a CISO, it’s your responsibility to ensure audit readiness across people, processes, and documentation.We also explore how to engage

en

11:59

Episode 18: Framework Alignment Strategies

Certified: The CCISO Audio Course ·

2025/07/06

In this strategy-focused episode, we guide you through aligning your security program with one or more established control frameworks. Whether your organization uses NIST CSF, ISO 27001, COBIT, CIS Controls, or a hybrid approach, you’ll need to understand how to map internal policies and procedures to external standards. We explain why framework alignment matters—not only for audit readiness, but for business credibility and stakeholder assurance.You’ll also hear how mature organizations

en

12:18

Episode 17: Information Security Policy Development

Certified: The CCISO Audio Course ·

2025/07/06

Effective policy is the backbone of a sound security governance program. In this episode, we break down the entire lifecycle of policy development—from initial scoping and stakeholder input to review, approval, communication, and enforcement. You’ll learn what makes policies successful in practice, not just on paper, and how executive sponsorship and cross-functional buy-in are essential to driving compliance.We also walk through common categories of security policy, including acceptable

en

12:38

Episode 16: GDPR Essentials for CISOs

Certified: The CCISO Audio Course ·

2025/07/06

This episode focuses on the General Data Protection Regulation (GDPR) and what CISOs must understand about it to lead global privacy programs effectively. We explore the regulation’s core principles—lawfulness, transparency, data minimization, purpose limitation, and accountability—and how they translate into policy and control requirements. You’ll also learn about the roles of Data Controllers and Data Processors, data subject rights, and breach notification timelines that security leaders

en

11:52

Episode 15: Legal and Regulatory Requirements

Certified: The CCISO Audio Course ·

2025/07/06

In this episode, we explore the legal landscape that CISOs must navigate when managing information security programs. You’ll learn about the growing body of national and international laws that shape data protection, breach notification, privacy obligations, and due diligence. We explain how executive leaders must interpret legal language, communicate implications to the board, and ensure policies are crafted with regulatory compliance in mind.This episode also touches on legal liabilities,

en

12:08

Episode 14: Compliance Essentials for CISOs

Certified: The CCISO Audio Course ·

2025/07/06

Compliance is more than just following rules—it’s about designing sustainable programs that meet regulatory expectations while supporting business objectives. In this episode, we break down the core responsibilities CISOs face when leading compliance initiatives across multiple domains. From industry-specific requirements like HIPAA and PCI DSS to broad frameworks like SOX and GLBA, we explain what executives must know and how compliance impacts budgeting, staffing, and risk posture.We also

en

11:24

Episode 13: FAIR Quantitative Risk Management Overview

Certified: The CCISO Audio Course ·

2025/07/06

Quantifying risk in financial terms is a vital executive skill, and this episode introduces the FAIR (Factor Analysis of Information Risk) framework to help you build that capability. We explain how FAIR enables CISOs to evaluate risk in dollars and probabilities, allowing for clearer prioritization and investment justification. You’ll learn how to distinguish between loss event frequency and probable loss magnitude, and how those elements work together to support defensible, board-ready

en

72 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College