x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: The CISSP Audio Course

Dr. Jason Edwards

Welcome to The Bare Metal Cyber CISSP Audio Course—your comprehensive companion for mastering the Certified Information Systems Security Professional (CISSP) certification. Built for serious cybersecurity professionals and aspiring leaders alike, this Audio Course transforms the eight domains of the CISSP Common Body of Knowledge into clear, structured, and engaging lessons you can learn anytime, anywhere. Each episode blends real-world context, expert insight, and exam-focused explanations to help

education courses

All Episodes

10:36

Episode 58: Network Segmentation and Microsegmentation

Certified: The CISSP Audio Course ·

2025/06/23

Segmentation limits the spread of attacks and improves control over traffic flows within a network. In this episode, we examine both traditional network segmentation and microsegmentation techniques. You’ll learn how VLANs, firewalls, and subnetting create macro boundaries, while software-defined networking enables granular control over traffic between workloads and devices. We discuss how segmentation supports least privilege access, improves detection, and reduces risk. CISSPs must know

en

10:23

Episode 57: Secure Protocols: HTTPS, SSH, SFTP, SNMPv3

Certified: The CISSP Audio Course ·

2025/06/23

Secure communication protocols form the backbone of protected digital environments. In this episode, we explore widely used secure protocols like HTTPS, SSH, SFTP, and SNMPv3. You’ll learn how each one provides confidentiality, integrity, and authentication for various types of data exchanges—from web traffic and file transfers to remote administration and device management. We cover protocol strengths, configuration tips, and common pitfalls. CISSPs must understand which protocols are

en

10:30

Episode 56: OSI and TCP/IP Models Refresher

Certified: The CISSP Audio Course ·

2025/06/23

The OSI and TCP/IP models provide a layered approach to understanding how data is transmitted, received, and managed across networks. In this episode, we refresh your understanding of these models and their significance in network security. We explore the function of each layer—from physical cabling to application-level protocols—and explain how attacks and defenses map to specific layers. You’ll also learn how these models aid in troubleshooting, forensic analysis, and control

en

10:54

Episode 55: Network Architecture: LAN, WAN, Internet

Certified: The CISSP Audio Course ·

2025/06/23

Understanding how networks are built and connected is foundational for any security professional. In this episode, we review core network architecture concepts, including the structure and purpose of Local Area Networks (LANs), Wide Area Networks (WANs), and the global Internet. We examine how data moves across these networks and where vulnerabilities may appear, from physical access points to routing protocols. You’ll also learn about segmentation, perimeter controls, and traffic flow

en

10:25

Episode 54: Fault Tolerance, Redundancy, and High...

Certified: The CISSP Audio Course ·

2025/06/23

Downtime is not an option for mission-critical systems. In this episode, we dive into fault tolerance, redundancy, and high availability—design strategies that ensure continuity despite component failures or unexpected disruptions. You’ll learn the differences between active-active and active-passive configurations, the role of clustering, load balancing, failover mechanisms, and geographically distributed resources. We also cover the importance of regular testing and monitoring to validate

en

11:54

Episode 53: SCADA and Embedded System Security

Certified: The CISSP Audio Course ·

2025/06/23

Supervisory Control and Data Acquisition (SCADA) systems and embedded devices operate some of the most critical infrastructure in the world—from energy grids to transportation systems. This episode explores the unique challenges of securing these environments, including limited resources, outdated firmware, lack of patching, and real-time operational requirements. We cover best practices for access control, network isolation, vendor management, and secure configuration. As cyber threats

en

10:30

Episode 52: Emerging Technologies and Security...

Certified: The CISSP Audio Course ·

2025/06/23

Technological innovation continues to transform the security landscape. In this episode, we examine how emerging technologies such as the Internet of Things (IoT), Artificial Intelligence (AI), and machine learning are impacting security architecture. We discuss the benefits and vulnerabilities of these systems, including expanded attack surfaces, device sprawl, privacy concerns, and autonomous decision-making risks. You’ll also learn strategies for integrating these technologies securely

en

10:28

Episode 51: Security Boundaries and Isolation Techniques

Certified: The CISSP Audio Course ·

2025/06/23

Security boundaries are essential for creating logical separations between systems, users, and data flows. In this episode, we explore how boundaries are defined and enforced, using both physical and logical mechanisms. You’ll learn about concepts like trust zones, network segmentation, VLANs, virtualization, and sandboxing. We also discuss isolation techniques that prevent lateral movement, contain breaches, and ensure critical assets remain protected. Proper use of boundaries and

en

11:11

Episode 50: Security Evaluations: Common Criteria,...

Certified: The CISSP Audio Course ·

2025/06/23

Security evaluations provide assurance that systems meet defined security requirements. In this episode, we examine key evaluation frameworks including Common Criteria (CC), the NIST Risk Management Framework (RMF), and the ISO/IEC 27000 series. You'll learn how these models define evaluation assurance levels, categorize controls, and guide secure system development. We also discuss how evaluation results support procurement, risk analysis, and compliance audits. For CISSP candidates and

en

11:04

Episode 49: Cryptanalysis and Attacks Against Crypto

Certified: The CISSP Audio Course ·

2025/06/23

No cryptographic system is immune to attack, and CISSPs must understand the methods used to break or weaken them. In this episode, we explore cryptanalysis techniques including brute-force, dictionary attacks, chosen plaintext attacks, and side-channel analysis. We explain how poor implementation, weak keys, and outdated algorithms create vulnerabilities, and how to mitigate those risks through proper design and monitoring. Understanding these threats enables security professionals to

en

11:36

Episode 48: PKI, Digital Certificates, and Trust Models

Certified: The CISSP Audio Course ·

2025/06/23

Public Key Infrastructure (PKI) is essential for enabling secure communication and verifying digital identities. This episode breaks down how PKI works, including the roles of certificate authorities (CAs), registration authorities (RAs), and digital certificates. You’ll learn about certificate chaining, revocation, validation protocols like OCSP and CRL, and how trust is established in both hierarchical and web-of-trust models. From SSL/TLS to code signing and user authentication, PKI is

en

11:07

Episode 47: Key Management and Key Escrow

Certified: The CISSP Audio Course ·

2025/06/23

Cryptographic systems are only as secure as the keys they use—and how those keys are managed. In this episode, we delve into key management principles, including generation, storage, distribution, rotation, and destruction. We also explore key escrow, where a third party securely stores encryption keys for legal or recovery purposes. You’ll learn about hardware security modules (HSMs), key management systems (KMS), and the challenges of managing keys in cloud environments. Whether

en

11:00

Episode 46: Hashing and Message Integrity

Certified: The CISSP Audio Course ·

2025/06/23

Hashing ensures that data remains unchanged during storage or transmission—a core requirement for integrity. In this episode, we explore how cryptographic hash functions like SHA-256 and SHA-3 are used to detect tampering, generate digital signatures, and verify file authenticity. We discuss key properties such as collision resistance, pre-image resistance, and determinism. You'll also learn the difference between hashing and encryption, and how tools like checksums, MACs, and digital

en

11:29

Episode 45: Cryptographic Lifecycle: Algorithms,...

Certified: The CISSP Audio Course ·

2025/06/23

Cryptographic tools aren’t set-and-forget solutions—they require lifecycle management. This episode explores how organizations select, deploy, and eventually retire cryptographic algorithms. We examine how algorithm strength is determined, the impact of key length, and the risks posed by deprecated or broken ciphers like MD5 and SHA-1. You’ll learn how to stay ahead of threats by monitoring crypto standards and planning for migration to newer algorithms. From algorithm selection to

en

10:51

Episode 44: Cryptographic Concepts: Symmetric and...

Certified: The CISSP Audio Course ·

2025/06/23

Cryptography is the backbone of digital security, and understanding its core principles is essential. In this episode, we explain the difference between symmetric and asymmetric encryption, along with their real-world applications. You’ll learn how symmetric encryption uses a single key for both encryption and decryption, while asymmetric encryption relies on key pairs for secure key exchange, digital signatures, and more. We also discuss algorithm examples like AES, RSA, and ECC. Grasping

en

10:32

Episode 43: Common Security Flaws in Architecture

Certified: The CISSP Audio Course ·

2025/06/23

Flawed architecture is one of the most serious vulnerabilities in any system. In this episode, we explore common architectural security weaknesses, including insecure defaults, lack of isolation, poor trust boundaries, and insufficient input validation. We explain how these flaws emerge during design and how they can be exploited by attackers. You’ll also learn how to apply secure design principles to avoid introducing systemic weaknesses in new systems. Whether you're evaluating an

en

11:17

Episode 42: Secure Baseline and Configuration Management

Certified: The CISSP Audio Course ·

2025/06/23

Systems don’t stay secure by accident—they stay secure through consistent configuration and control. In this episode, we cover the concepts of secure baselining and configuration management. You’ll learn how to establish security baselines, enforce configuration standards, and use automation tools to detect and remediate drift. We also discuss patching, change control, and the role of configuration management databases (CMDBs). These practices ensure your systems remain hardened,

en

11:00

Episode 41: Virtualization and Cloud Infrastructure...

Certified: The CISSP Audio Course ·

2025/06/23

Virtualization and cloud computing are cornerstones of modern IT, but they also introduce unique security challenges. In this episode, we examine the architecture and risks associated with virtual machines, hypervisors, containers, and cloud platforms. You’ll learn how virtual environments increase complexity and expand the attack surface, and what controls are necessary to mitigate these risks. We also explore the shared responsibility model, virtualization sprawl, tenant isolation, and

en

11:12

Episode 40: Secure Hardware Architecture and TPM

Certified: The CISSP Audio Course ·

2025/06/23

Security isn’t only about software—hardware matters too. This episode introduces key elements of secure hardware architecture, including trusted computing bases, secure boot processes, and hardware root of trust. We also dive into the Trusted Platform Module (TPM), a hardware chip that provides cryptographic key storage, platform integrity checks, and secure identity verification. You’ll learn how TPMs support secure encryption, authentication, and remote attestation. CISSP candidates must

en

10:38

Episode 39: Architecture Layers: OSI, System,...

Certified: The CISSP Audio Course ·

2025/06/23

Security must be applied across all layers of a system, from the physical infrastructure to the application interface. In this episode, we explore the layered nature of system architecture—starting with the OSI model’s seven layers, then expanding into how security is applied at the hardware, system, and application levels. You’ll learn how to align controls with each layer’s function, recognize common threats at each level, and understand how layered defenses provide coverage across the

en

138 results

Similar Podcasts

Science Talk

Albert Einstein College of Medicine

五分钟心理学

柠檬心理

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Veterinary Clinical Podcasts

The Royal Veterinary College