x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CISSP Audio Course

Dr. Jason Edwards

Welcome to The Bare Metal Cyber CISSP Audio Course—your comprehensive companion for mastering the Certified Information Systems Security Professional (CISSP) certification. Built for serious cybersecurity professionals and aspiring leaders alike, this Audio Course transforms the eight domains of the CISSP Common Body of Knowledge into clear, structured, and engaging lessons you can learn anytime, anywhere. Each episode blends real-world context, expert insight, and exam-focused explanations to help

education courses

All Episodes

9:23

Episode 78: Privileged Access Management (PAM)

Certified: The CISSP Audio Course ·

2025/06/23

Privileged accounts have elevated access and are among the most targeted assets in any organization. In this episode, we examine Privileged Access Management (PAM) solutions, including vaulting, session recording, just-in-time provisioning, and approval workflows. We explain how PAM helps enforce least privilege, reduce insider threats, and meet compliance obligations. You'll also learn how to monitor, audit, and respond to anomalous privileged activity. Managing administrative access is

en

8:51

Episode 77: Federation and SSO: SAML, OAuth, OpenID

Certified: The CISSP Audio Course ·

2025/06/23

Federated identity systems allow users to authenticate across multiple platforms using a single identity, often enabling Single Sign-On (SSO). In this episode, we explain how standards like SAML, OAuth 2.0, and OpenID Connect enable cross-domain authentication. You’ll learn the difference between authentication and authorization, how token exchanges work, and what security concerns arise with federated systems. These technologies reduce friction, improve user experience, and centralize

en

8:43

Episode 76: Biometric Authentication Strengths and...

Certified: The CISSP Audio Course ·

2025/06/23

Biometric authentication uses unique physical or behavioral traits—like fingerprints, facial features, or voice—to verify identity. In this episode, we explore how biometrics work, including the concepts of enrollment, matching algorithms, false acceptance rates (FAR), false rejection rates (FRR), and spoofing resistance. We also examine the strengths and weaknesses of different biometric systems, their privacy implications, and where they’re most effectively deployed. As biometric

en

8:03

Episode 75: Password Policy Design and Management

Certified: The CISSP Audio Course ·

2025/06/23

Passwords remain one of the most widely used—but frequently abused—authentication methods. In this episode, we explore how to design and manage effective password policies that balance usability with security. We cover best practices like minimum complexity, reuse prevention, expiration cycles, and password vaulting. You’ll also learn about modern recommendations from NIST that challenge older practices like frequent forced changes. CISSPs must understand how password policies impact

en

8:13

Episode 74: IAM Lifecycle and Governance

Certified: The CISSP Audio Course ·

2025/06/23

Identity and Access Management (IAM) is not just about technology—it’s a continuous lifecycle that requires strong governance. This episode walks through each stage of the IAM lifecycle: provisioning, access management, auditing, revalidation, and deprovisioning. We also examine governance frameworks that ensure IAM aligns with policy, risk appetite, and regulatory standards. From role design and separation of duties to periodic access reviews and exception handling, we explain how to

en

8:50

Episode 73: Authorization Techniques: RBAC, ABAC,...

Certified: The CISSP Audio Course ·

2025/06/23

Once a user’s identity is authenticated, the system must decide what they are allowed to do. This episode focuses on common authorization models: Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), Mandatory Access Control (MAC), and Discretionary Access Control (DAC). We explore the rules and policies that govern each model, along with their strengths, weaknesses, and appropriate use cases. You'll learn how to align authorization mechanisms with security policies and

en

10:40

Episode 72: Identity Proofing and Registration Processes

Certified: The CISSP Audio Course ·

2025/06/23

Before you can authenticate someone, you must first establish their identity through a process called identity proofing. In this episode, we cover how identity proofing works—from in-person validation and biometric capture to document verification and knowledge-based authentication. We explain how organizations perform registration, bind credentials, and manage onboarding securely. These processes form the foundation of digital identity and trust. Whether you're issuing smart cards for

en

10:45

Episode 71: Authentication Factors and Methods

Certified: The CISSP Audio Course ·

2025/06/23

Authentication is the process of verifying identity, and it forms the first line of defense in access control. In this episode, we explore the different authentication factors: something you know (passwords, PINs), something you have (tokens, smart cards), something you are (biometrics), somewhere you are (location), and something you do (behavioral patterns). We also examine common authentication methods, including single-factor, multi-factor, and risk-based authentication. Understanding

en

10:05

Episode 70: DDoS Protection and High Availability...

Certified: The CISSP Audio Course ·

2025/06/23

Distributed Denial of Service (DDoS) attacks are designed to overwhelm systems and take down critical services. In this episode, we explain how these attacks work—volumetric, protocol, and application-layer—and the techniques used to defend against them. You’ll learn about scrubbing centers, rate limiting, traffic shaping, and the role of content delivery networks in mitigation. We also explore how to design high-availability network architectures with redundancy, failover, and load

en

10:27

Episode 69: Cloud Network Security (CASB, SASE,...

Certified: The CISSP Audio Course ·

2025/06/23

As more organizations move to the cloud, network security must evolve. This episode focuses on cloud-native controls including Cloud Access Security Brokers (CASB), Secure Access Service Edge (SASE), and virtual firewalls. You’ll learn how these tools provide visibility, policy enforcement, data loss prevention, and threat protection across hybrid and multi-cloud environments. We also cover identity-based access control, cloud segmentation, and encryption in transit. With cloud services

en

9:12

Episode 68: Content Delivery Networks and Edge Security

Certified: The CISSP Audio Course ·

2025/06/23

Content Delivery Networks (CDNs) accelerate access to web content by distributing it across global edge nodes, but they also introduce new attack surfaces. In this episode, we discuss how CDNs work, their role in performance optimization, and the security challenges they present, such as cache poisoning, misconfigured access controls, and DDoS targeting. We also explore edge computing security—protecting data and services closer to the end user. CISSPs must understand how to secure the

en

10:52

Episode 67: Zero Trust and Software-Defined...

Certified: The CISSP Audio Course ·

2025/06/23

Zero Trust has emerged as a powerful model for modern cybersecurity, shifting the focus from perimeter defenses to granular, identity-centric control. In this episode, we explain the principles of Zero Trust—never trust, always verify—and how it’s implemented using continuous authentication, microsegmentation, and least privilege access. We also explore Software-Defined Networking (SDN), a framework for dynamically managing and securing network resources through centralized controllers

en

11:13

Episode 66: Network Monitoring and Traffic Analysis

Certified: The CISSP Audio Course ·

2025/06/23

Continuous monitoring and traffic analysis are essential for detecting threats, performance issues, and policy violations. In this episode, we explore tools and techniques used to observe network behavior in real time. Topics include flow monitoring, deep packet inspection, NetFlow, and behavioral analytics. You’ll also learn about the role of Security Information and Event Management (SIEM) in aggregating data and generating actionable alerts. By understanding normal traffic patterns,

en

10:26

Episode 65: Network Address Translation and Proxy Usage

Certified: The CISSP Audio Course ·

2025/06/23

NAT and proxy servers play important roles in hiding internal IP addresses, enforcing access policies, and controlling traffic flow. In this episode, we explore how Network Address Translation (NAT) works to conserve IP space and obscure internal architectures. We also explain how proxies—forward, reverse, and transparent—support web filtering, anonymization, caching, and load balancing. You’ll learn how to implement these technologies securely, monitor their usage, and avoid common

en

11:08

Episode 64: VOIP and Secure Communication Channels

Certified: The CISSP Audio Course ·

2025/06/23

Voice over IP (VOIP) technologies have replaced traditional telephony in many organizations, but they come with their own set of security concerns. This episode explores the architecture of VOIP systems and the threats they face, including call interception, eavesdropping, spoofing, and denial-of-service attacks. We also cover secure communication protocols such as SRTP, SIPS, and encrypted signaling mechanisms. You’ll learn how to harden VOIP infrastructure, apply access controls, and

en

11:23

Episode 63: Wireless Network Security (WEP, WPA2/3,...

Certified: The CISSP Audio Course ·

2025/06/23

Wireless networks present a unique set of vulnerabilities due to their reliance on open air transmission. In this episode, we examine wireless security protocols and controls, including WEP, WPA2, WPA3, and 802.1X. We explain how authentication frameworks, encryption standards, and access controls protect against threats like rogue access points, packet sniffing, and brute-force attacks. You’ll also learn about secure SSID broadcasting, segmentation, and signal isolation. Securing wireless

en

10:55

Episode 62: VPNs, Remote Access, and Tunneling Protocols

Certified: The CISSP Audio Course ·

2025/06/23

en

9:28

Episode 61: Secure Routing and Switching

Certified: The CISSP Audio Course ·

2025/06/23

Secure routing and switching are foundational elements of network security. In this episode, we explore how routers and switches operate, and how attackers exploit their misconfigurations or weaknesses to gain access or disrupt communication. Topics include route hijacking, ARP poisoning, MAC flooding, and VLAN hopping. You’ll learn best practices for hardening these devices, including access control lists (ACLs), management plane protection, port security, and proper firmware management

en

10:40

Episode 60: Intrusion Detection and Prevention Systems

Certified: The CISSP Audio Course ·

2025/06/23

Intrusion Detection Systems (IDS) and Intrusion Prevention Systems (IPS) are crucial for identifying and stopping threats in real time. This episode explores how these tools work, their deployment strategies, and how they integrate with broader security operations. You’ll learn about signature-based and anomaly-based detection, false positives, evasion techniques, and tuning practices. We also cover network-based and host-based implementations, and how alerts are correlated in a Security

en

10:34

Episode 59: Defense in Depth with Firewalls and DMZs

Certified: The CISSP Audio Course ·

2025/06/23

Layered security—known as defense in depth—is a core concept in cybersecurity architecture. This episode focuses on how firewalls and demilitarized zones (DMZs) serve as essential layers in protecting internal networks. We explore different types of firewalls (packet filtering, stateful, next-gen), the design of DMZs for public-facing services, and how to enforce traffic controls between zones. You'll also learn how to implement rule sets, audit firewall logs, and support intrusion

en

138 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College