Sec Guy

4:30

CISM Full Course 2026: Resource Management & Security...

Sec Guy ·

2026/09/17

If you want to survive in the CISO chair, you have to stop speaking in vulnerabilities and start speaking in dollars. Here is the exact financial blueprint (CapEx, OpEx, and ROSI) to get your cybersecurity budget approved.Welcome back to the lab. In this module of the CISM/CISO series, Sec Guy breaks down the hardest transition for senior engineers: Resource Management. The Board of Directors doesn't care about the latest zero-day exploit—they care about the balance sheet. We cover Zero-Based

en

7:08

CISM Full Course 2026: Governance Engine: Frameworks,...

Sec Guy ·

2026/09/17

Stop being a hero and start building a machine. If your security program depends on you saving the day, you don't have a program—you have a high-stress hobby.In Video 3 of the CISM 2026 series, we move from the "Mindset" to the "Executive Machine." We break down how top-tier CISOs use frameworks like NIST, ISO, and COBIT to build repeatable security engines that survive global audits and protect the organization's revenue.In this video, we cover:• The Blueprint (NIST CSF): How to translate cyber

en

5:13

CISM Full Course 2026: CISM Mindset Stop Doing, Start...

Sec Guy ·

2026/09/17

We have seen the technical weeds. Now, let’s look at the boardroom. Welcome to Phase 1: The Executive Baseline. In this video, we switch to the C-Suite mindset.We are breaking down the "Business Alignment" stack, the fundamental shift in responsibility you need to know for the exam, and the critical separation of duties that keeps the organization secure without causing a bankruptcy.In this video, we cover:The CISM Mindset: Why the best technical engineer often fails as a Security Manager.Critical

en

5:09

CISM Full Course 2026: Risk Management Engine:...

Sec Guy ·

2026/09/17

Stop trying to secure everything and start managing business risk. If you are still trying to patch every single vulnerability without looking at the business impact, you are thinking like a technician, not an executive.In Video 4 of the CISM 2026 series, we explore the core language of the boardroom: Risk Management. Learn how to stop saying "no" to the business and start saying "yes, securely."In this video, we cover:• The Risk Triangle: The critical differences between Risk Capacity, Risk

en

4:09

CISM Full Course 2026: Supply Chain & Third-Party...

Sec Guy ·

2026/09/17

You can build a million-dollar security fortress, but if your HVAC vendor has a weak password, your network is compromised. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down Supply Chain and Third-Party Risk Management (TPRM). We move beyond technical configurations and dive into the executive procurement lifecycle: R-F-Is, R-F-Ps, Proof of Concepts (POC), and why the "Right-to-Audit" clause is the most important sentence in a vendor contract.🔥 GET JOB READY: Stop

en

6:32

CISM Full Course 2026: Incident Management: The...

Sec Guy ·

2026/09/17

A security plan on paper is just a liability waiting to be exposed. In Video 6, we tackle the CISO's ultimate test: Incident Management. Discover the critical differences between an IRP, BCP, and DRP, why technicians fail during a crisis, and how top-tier executives maintain control, legally protect the company, and manage the boardroom narrative during a massive cyber breach.In this video, we cover:• The Crisis Mindset: Why technicians pull cables while executives pull the incident playbook.• The

en

4:11

CISM Full Course: Data Governance for CISOs

Sec Guy ·

2026/09/17

You can build a million-dollar network fortress, but if you don't know where your most sensitive data lives, you have already lost. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down Data Governance. We cover the critical legal separation between Data Owners and Data Custodians, how to implement Data Loss Prevention (DLP), and why the CISO should never be the one deciding who gets access to a file.📘 GET THE BOOK: Ready to bridge the gap from analyst to executive? Grab

en

3:53

CISM Full Course 2026: Cybersecurity Metrics: KRIs...

Sec Guy ·

2026/09/17

When the CEO asks, "Are we secure?", how do you answer? If you reply with technical metrics like "firewall hits" or "malware blocked," you are thinking like an engineer, not an executive. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down the science of measuring security success. We explain the critical difference between Key Risk Indicators (KRIs), Key Performance Indicators (KPIs), and Key Goal Indicators (KGIs), and how to build a dashboard that actually secures your

en

3:57

CISM Full Course 2026: Managing C-Suite Conflict &...

Sec Guy ·

2026/09/17

You finally got the CISO job. You have the budget, you built the dashboard, and your S.O.C. is fully staffed. But there's one massive problem: You don't actually own the network. The CIO does. Welcome back to the CISM/CISO masterclass. In this module, SecGuy breaks down the brutal reality of boardroom politics. We cover "Influence Without Authority," how to navigate toxic friction between Engineering and Legal, and why forcing the business to sign a Risk Acceptance form is your ultimate

en

11:42

CompTIA Security+ SY0-801: 1.2 Change Management

Sec Guy ·

2026/09/17

Junior analysts picture major outages as the result of advanced nation-state hackers, but seasoned architects know that a single unvetted internal change can take down a multinational enterprise faster than any DDoS attack.In this module, Sec Guy breaks down Objective 1.2: Demonstrating the Impact of Change Management Processes on Security. Change management is not bureaucratic red tape; it is an operational governance framework ensuring that changes are documented, rigorously tested, authorized,

en

11:46

CompTIA Security+ SY0-801: 1.1 Security Concepts and...

Sec Guy ·

2026/09/17

If you are preparing for your CompTIA Security+ SY0-801 certification, throw away the idea of memorizing vocabulary just to pass a test. In the real world, enterprise security is about reasoning through decisions, understanding architectural tradeoffs, and knowing exactly what happens when a control fails.In this module, Sec Guy breaks down Objective 1.1: Security Concepts and Controls. We dismantle the outdated "castle and moat" strategy and build a modern Defense in Depth architecture. You will

en

7:47

CompTIA Security+ SY0-801: 2.1 Threat Intelligence &...

Sec Guy ·

2026/09/17

In enterprise security, you cannot defend against an adversary you do not understand. Today, we begin Domain 2 with Lesson S8-006: From Threat Intelligence to Vulnerability Priority for the CompTIA Security+ (SY0-801).Sec Guy breaks down the definitive difference between a threat (the force that exploits) and a vulnerability (the weakness in the system). You will learn how to consume intelligence across the entire threat lifecycle using Open-Source Intelligence (OSINT), Proprietary Threat Feeds, and

en

10:23

CompTIA Security+ SY0-801: Domain 1 Mastery Workshop

Sec Guy ·

2026/09/17

Theory without execution is useless in enterprise cybersecurity. In this Domain 1 Mastery Workshop for the CompTIA Security+ (SY0-801), you step into the shoes of the Lead Security Architect for a national healthcare processing network facing a critical Friday morning crisis. When infrastructure engineers submit an emergency Change Advisory Board (CAB) request to overhaul the patient billing portal, junior analysts see a standard business request, but an experienced architect spots an architectural

en

19:25

CompTIA Security+ SY0-801: 1.3 Cryptographic...

Sec Guy ·

2026/09/17

In modern enterprise security, cryptography is not an academic math drill; it is the trust engine that enforces identity, proves integrity, and secures multi-cloud environments. In this module, Sec Guy breaks down Objective 1.3: Cryptographic Solutions and the Trust Engine for the CompTIA Security+ (SY0-801). We demystify the difference between one-way integrity (hashing, salting, and rainbow table mitigation) and two-way confidentiality (symmetric vs. asymmetric encryption). You will master how

en

5:19

CompTIA Security+ SY0-801: 2.3 Message, Image,...

Sec Guy ·

2026/09/17

When the network is breached, a technician reacts with panic, but an executive reacts with a playbook.In this module, Sec Guy breaks down Objective 4.7: Incident Response and Forensics. Using the Salt Typhoon telecommunications breach as a real-world framework, we cover the entire incident response lifecycle. You will learn how to build a Computer Incident Response Team (CIRT), execute tabletop exercises, perform digital forensics using the order of volatility, and navigate the legal minefield of

en

11:06

CompTIA Security+ SY0-801: 2.2 Threat Actors &...

Sec Guy ·

2026/09/17

In cybersecurity, knowing the exploit is only half the battle. If you do not know the hand behind the keyboard, you are just chasing ghosts.In this module, Sec Guy breaks down Objective 2.2 for the CompTIA Security+ (SY0-801) exam: Threat Actors and Motivations. We move beyond textbook definitions to analyze the actual tradecraft, funding, and motivations of modern adversaries. You will learn how Nation-States use dwell time for espionage, how Organized Crime syndicates operate for financial gain,

en

6:37

AI Threat Landscape: Model Poisoning and Prompt...

Sec Guy ·

2026/09/17

When you type a password, the computer knows it's data. But when you talk to an AI, your instructions and your data are the exact same thing—just tokens in a stream. That single flaw is the root of every AI attack. In this video, Sec Guy explains the math behind Universal Adversarial Triggers, reveals how Indirect Prompt Injection can turn a resume into a weapon, and shows why Token Smuggling allows malware to slip right past your firewall.New Security+ SYO-801 Study Guide Available today:

en

4:17

Cloud IAM: STS, Roles, SCP, and Policies

Sec Guy ·

2026/09/17

A password can be stolen, but a temporary token expires. In this video, Sec Guy explains why Long-Term Access Keys are a "security smell" and how to replace them with IAM Roles and the STS (Security Token Service). We break down the critical difference between Identity-Based Policies (What I can do) and Resource-Based Policies (Who can access this bucket), and show you how to use SCPs (Service Control Policies) to create an unbreakable ceiling on permissions.New Security+ SYO-801 Study Guide

en

4:39

Cloud Architecture Security: CSPM, CASB, Zero Trust

Sec Guy ·

2026/09/17

If your cloud environment is a skyscraper, CSPM is the building inspector checking the foundation, while CASB is the security guard checking everyone who walks through the door. In this video, Sec Guy explains the critical difference between securing infrastructure (IaaS) and securing SaaS applications, breaks down Forward vs. Reverse Proxy deployment modes, and shows how a Zero Trust Policy Decision Point (PDP) can stop an identity attack in real-time.New Security+ SYO-801 Study Guide Available

en

6:12

Cloud Models: IaaS to Serverless, Shared...

Sec Guy ·

2026/09/17

If your data is breached in the cloud, is it Amazon's fault or yours? In this video, Sec Guy breaks down the Shared Responsibility Model, explaining why Capital One was liable for their massive breach (SSRF) despite using a secure cloud provider. We also cover the evolution from IaaS to Serverless (FaaS) and why Data Sovereignty (Microsoft Ireland Case) means your data is subject to the laws of the physical land it sits on.New Security+ SYO-801 Study Guide Available today:

en

All Episodes

Similar Podcasts

Bedtime Safari

Bedtime History

Daily Facts

Amalia Dupray and Montgomery Jones.

Les dents et dodo

BFMTV

Edutainment Learning

Ralph Krauss

Education Futures

Svenia Busson & Laurent Jolie