x

75% of people globally want unbiased news (Pew Research) but are concerned they're not getting that.

Get balanced coverage with Symby. See how stories are covered across diverse outlets and spot when one side covers a story the other skips.

PODCAST

Certified: SANS GIAC GSEC Audio Course

The **GSEC Audio Course** from **BareMetalCyber.com** is your complete, audio-first companion for mastering the **GIAC Security Essentials (GSEC)** certification. Designed for cybersecurity professionals and motivated learners, this course transforms the full range of exam objectives into clear, structured lessons you can absorb anywhere. Each episode focuses on practical understanding—explaining how core security concepts like networks, encryption, access control, risk management, and incident

technology courses

All Episodes

1:20

Welcome to the SANS GSEC Audio Course

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

en

8:52

Episode 100 — Final Exam-Day Readiness: Calm,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Every hour of study leads to this moment, and this closing episode focuses on how to perform at your best when it counts. You’ll learn strategies for managing nerves, pacing yourself, and applying structured reasoning under time pressure. We revisit how to interpret scenario-based questions, eliminate distractors, and use your reference materials efficiently. The discussion also touches on logistics—what to bring, how to manage breaks, and how to keep focus during long sessions.Listeners

en

9:51

Episode 99 — Continuous Improvement: Audits, Drills,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Improvement only happens when you measure and test what you’ve built. This episode focuses on how audits, exercises, and management reviews sustain progress after controls are implemented. You’ll learn how internal audits validate compliance and independence, how external attestations provide assurance, and how drills—from tabletop to full-scale—test readiness under pressure. The conversation explains how evidence, findings, and feedback feed directly into risk management and program

en

9:18

Episode 98 — Building a Security Program: Roadmaps...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

A strong security program doesn’t happen by chance—it’s built through deliberate planning and continuous growth. This episode walks through how to design, implement, and mature a cybersecurity program over time. You’ll learn how roadmaps translate vision into milestones, aligning people, processes, and technology with organizational objectives. The discussion explains maturity models such as CMMI and NIST’s Implementation Tiers, showing how they measure capability and drive

en

9:21

Episode 97 — Mapping Controls to Risks and Threats

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

A control has no value unless it addresses a real risk, and this episode explores how to build that connection intentionally. You’ll learn how risk assessments identify threats, vulnerabilities, and impacts, and how mapping controls to those elements ensures defenses are purposeful rather than cosmetic. The discussion explains qualitative and quantitative approaches to risk analysis, how to rank priorities, and how to justify security investments with evidence rather than assumption. We

en

9:17

Episode 96 — Frameworks Overview: CIS, NIST CSF, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Security frameworks turn best practices into organized action, and this episode introduces three of the most widely used: the Center for Internet Security (CIS) Controls, the NIST Cybersecurity Framework (CSF), and MITRE ATT&CK. You’ll learn how CIS provides a prioritized checklist of technical safeguards, while NIST CSF focuses on high-level functions—Identify, Protect, Detect, Respond, and Recover—that guide program maturity. We then connect these to MITRE ATT&CK, a living

en

9:39

Episode 95 — Post-Incident Activities: Lessons, RCA,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Every incident ends with questions: what happened, why, and how to prevent it next time. This episode explains how post-incident reviews turn disruption into progress. You’ll learn how root cause analysis (RCA) identifies not just technical failures but procedural or cultural gaps that allowed the event to escalate. We discuss how to conduct debrief meetings, collect evidence, and document findings in a way that feeds both improvement and compliance reporting. The conversation highlights

en

9:42

Episode 94 — Incident Response II: Containment,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Once an incident is confirmed, response shifts from analysis to action. This episode explores containment strategies—isolating infected hosts, blocking malicious domains, and preventing lateral movement without destroying evidence. You’ll learn how eradication removes root causes by cleaning or rebuilding compromised systems, followed by recovery steps that restore normal operations safely. The conversation connects these phases to change management and communication requirements, ensuring

en

9:56

Episode 93 — Incident Response I: Preparation and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Incident response begins long before an alert fires, and this episode focuses on the first two phases—preparation and detection. You’ll learn how preparation includes building policies, defining roles, assembling tools, and conducting training so teams are ready when an event occurs. We explain how detection depends on accurate baselines, tuned alerts, and integrated monitoring systems that distinguish anomalies from expected behavior. Together, these elements create a proactive posture

en

9:44

Episode 92 — Playbooks and Runbooks: Standardizing...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Consistency under pressure saves time, and this episode explains how playbooks and runbooks make that possible. You’ll learn the difference between the two: playbooks describe response strategy at a high level, while runbooks contain the detailed, step-by-step actions analysts follow. The discussion explores how standardized workflows reduce human error, speed containment, and improve communication between teams during incidents. We also highlight how automation tools can execute runbook

en

9:57

Episode 91 — Detection Engineering Basics: From...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Detection engineering bridges the gap between raw telemetry and actionable alerts, and this episode explores how the process works. You’ll learn how analysts form hypotheses about attacker behavior, translate those into detection logic, and validate results against real data. The discussion breaks down rule types—correlation rules, threshold alerts, and anomaly detection—and explains how each supports specific investigative goals. We also cover frameworks like MITRE ATT&CK, which help

en

9:47

Episode 90 — Metrics and Reporting: Turning Data into...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Metrics are how security proves its value, and this episode teaches you how to turn measurements into meaningful management insight. You’ll learn how to distinguish between metrics and key performance indicators (KPIs), and how to align them with business goals. We explain why tracking patch rates, incident response times, and user compliance rates matters less as raw numbers and more as trend indicators. The discussion also covers visualization best practices—how to present complex

en

10:05

Episode 89 — Legal, Privacy, and Ethics for...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Cybersecurity is as much about responsibility as it is about technology, and this episode explores the legal and ethical framework professionals must navigate. You’ll learn how privacy laws such as GDPR, HIPAA, and state data protection acts define obligations around data collection, storage, and disclosure. The discussion also explains how incident notification requirements, breach reporting timelines, and contractual clauses affect response planning. Ethics comes into focus as we discuss

en

9:25

Episode 88 — Physical Security and Environmental...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Cybersecurity may dominate headlines, but physical safeguards remain just as vital. This episode explores how physical and environmental controls protect systems from tampering, theft, and natural hazards. You’ll learn about facility zoning, access control systems, surveillance, and intrusion detection, as well as how these measures integrate with cybersecurity operations. The discussion also covers environmental protections like fire suppression, uninterruptible power supplies (UPS), and

en

9:54

Episode 87 — Supply Chain and Third-Party Risk

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Every organization depends on vendors and partners, and this episode examines how that dependency creates new exposure. You’ll learn how software and hardware supply chains can be compromised through tampered updates, vulnerable components, or insecure integrations. The discussion clarifies how third-party risk management programs assess and monitor vendors through questionnaires, attestations, and continuous security ratings. We explore why trust must be earned and re-evaluated, not

en

10:49

Episode 86 — Secure File Transfer and Collaboration...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

As organizations share data across teams, vendors, and regions, secure file transfer becomes essential to maintaining trust. This episode explains the difference between ad-hoc sharing and structured file exchange systems, highlighting the risks of uncontrolled uploads and public links. You’ll learn how protocols like SFTP, FTPS, and HTTPS-based APIs safeguard confidentiality and integrity in motion, and how managed file transfer (MFT) platforms enforce authentication, encryption, and

en

9:54

Episode 85 — Email Security: SPF, DKIM, DMARC, and...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Email remains the top vector for phishing, fraud, and malware, and this episode explains how layered defenses counter those risks. You’ll learn how Sender Policy Framework (SPF) verifies authorized mail servers, DomainKeys Identified Mail (DKIM) ensures message integrity through digital signatures, and Domain-based Message Authentication, Reporting, and Conformance (DMARC) ties them together to validate domain identity. The discussion illustrates how these standards prevent spoofing and

en

9:13

Episode 84 — Data Loss Prevention: Endpoints,...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Data Loss Prevention (DLP) combines technology and policy to stop sensitive information from leaving where it belongs. This episode introduces the core DLP models—endpoint, network, and cloud—and how they monitor and control data in motion, in use, and at rest. You’ll learn how pattern matching, fingerprinting, and contextual rules detect violations such as unencrypted uploads or unauthorized transfers. The discussion also clarifies how DLP integrates with classification systems and

en

9:33

Episode 83 — Data Classification and Handling...

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Not all data is created equal, and this episode explains how classification brings order and protection to information assets. You’ll learn how organizations categorize data based on sensitivity, impact, and regulatory requirement—often using tiers like Public, Internal, Confidential, and Restricted. The discussion connects classification to controls, showing how encryption, access restrictions, and retention schedules align with each level. We also explain why labeling and user awareness

en

10:28

Episode 82 — Secrets Management and Key Handling

Certified: SANS GIAC GSEC Audio Course ·

2025/10/22

Every system depends on secrets—API tokens, encryption keys, and credentials—and this episode focuses on how to protect them. You’ll learn the difference between storing, transmitting, and using secrets securely, and why “hardcoding” them in scripts or configuration files remains one of the most common security mistakes. We explain how dedicated secrets management tools centralize storage, enforce access control, and generate short-lived credentials that reduce exposure. The discussion also

en

101 results

Similar Podcasts

Lead With AI

Tamara Nall

Linux in the Ham Shack

Black Sparrow Media

Data Engineering Podcast

Tobias Macey

Eye On A.I.

Craig S. Smith

Reflections

Livewire Labs