Start with a myth-buster: the First Amendment wasn’t originally first. We open the door to the real story behind the Bill of Rights—how a wary public demanded assurances, how Madison turned state models into national guarantees, and why the most overlooked provisions may be the ones that guard your freedom most effectively. Together we map the logic that shaped the first ten amendments: eight that name individual rights and two that anchor the Constitution’s core design—limited, enumerated fe...

Send us a text This week we will be talking about the Government’s plans for New Towns. This episode content meets PC3 - Legal Framework & Processes of the Part 3 Criteria. Resources from today's episode: Websites: https://www.ribaj.com/buildings/government-plans-new-towns-housing-infrastructure-what-shape-will-they-take?utm_campaign=30/09/2025 Editor's cut&utm_content=New towns are back once again – but what shape will they take?&utm_term=&utm_medium=email&utm_source=Ade...

Mishnah Berurah - Siman 495: Seif 4 סימן תצ"ה סעיף ד Hilchos Yom Tov -הלכות יום טוב Rabbi Mordechai Fishman Purchase  The Laws and Customs of Krias HaTorah, by Rabbi Mordechai Fishman here: www.kriashatorah.com www.orachchaim.com For sponsorship opportunities contact: www.rabbifishman.com or email: rabbifishman@gmail.com #mishna berura

Send us a text In this episode, we move beyond theory and watch the law’s favorite imaginary character face real-life legal drama. We explore how courts decide what’s foreseeable, what behavior counts as reasonable, and what happens when someone says: 👉 “I didn’t think that would happen.” You’ll learn: How juries decide what’s “normal” behaviorWhy texting and driving is a perfect case study in unreasonablenessHow lawyers build (and destroy) the Reasonable Person in courtWhy your

Improvement only happens when you measure and test what you’ve built. This episode focuses on how audits, exercises, and management reviews sustain progress after controls are implemented. You’ll learn how internal audits validate compliance and independence, how external attestations provide assurance, and how drills—from tabletop to full-scale—test readiness under pressure. The conversation explains how evidence, findings, and feedback feed directly into risk management and program

Every hour of study leads to this moment, and this closing episode focuses on how to perform at your best when it counts. You’ll learn strategies for managing nerves, pacing yourself, and applying structured reasoning under time pressure. We revisit how to interpret scenario-based questions, eliminate distractors, and use your reference materials efficiently. The discussion also touches on logistics—what to bring, how to manage breaks, and how to keep focus during long sessions.Listeners

Once an incident is confirmed, response shifts from analysis to action. This episode explores containment strategies—isolating infected hosts, blocking malicious domains, and preventing lateral movement without destroying evidence. You’ll learn how eradication removes root causes by cleaning or rebuilding compromised systems, followed by recovery steps that restore normal operations safely. The conversation connects these phases to change management and communication requirements, ensuring

Every incident ends with questions: what happened, why, and how to prevent it next time. This episode explains how post-incident reviews turn disruption into progress. You’ll learn how root cause analysis (RCA) identifies not just technical failures but procedural or cultural gaps that allowed the event to escalate. We discuss how to conduct debrief meetings, collect evidence, and document findings in a way that feeds both improvement and compliance reporting. The conversation highlights

Security frameworks turn best practices into organized action, and this episode introduces three of the most widely used: the Center for Internet Security (CIS) Controls, the NIST Cybersecurity Framework (CSF), and MITRE ATT&CK. You’ll learn how CIS provides a prioritized checklist of technical safeguards, while NIST CSF focuses on high-level functions—Identify, Protect, Detect, Respond, and Recover—that guide program maturity. We then connect these to MITRE ATT&CK, a living

A control has no value unless it addresses a real risk, and this episode explores how to build that connection intentionally. You’ll learn how risk assessments identify threats, vulnerabilities, and impacts, and how mapping controls to those elements ensures defenses are purposeful rather than cosmetic. The discussion explains qualitative and quantitative approaches to risk analysis, how to rank priorities, and how to justify security investments with evidence rather than assumption. We

A strong security program doesn’t happen by chance—it’s built through deliberate planning and continuous growth. This episode walks through how to design, implement, and mature a cybersecurity program over time. You’ll learn how roadmaps translate vision into milestones, aligning people, processes, and technology with organizational objectives. The discussion explains maturity models such as CMMI and NIST’s Implementation Tiers, showing how they measure capability and drive

Cybersecurity is as much about responsibility as it is about technology, and this episode explores the legal and ethical framework professionals must navigate. You’ll learn how privacy laws such as GDPR, HIPAA, and state data protection acts define obligations around data collection, storage, and disclosure. The discussion also explains how incident notification requirements, breach reporting timelines, and contractual clauses affect response planning. Ethics comes into focus as we discuss

Metrics are how security proves its value, and this episode teaches you how to turn measurements into meaningful management insight. You’ll learn how to distinguish between metrics and key performance indicators (KPIs), and how to align them with business goals. We explain why tracking patch rates, incident response times, and user compliance rates matters less as raw numbers and more as trend indicators. The discussion also covers visualization best practices—how to present complex

Detection engineering bridges the gap between raw telemetry and actionable alerts, and this episode explores how the process works. You’ll learn how analysts form hypotheses about attacker behavior, translate those into detection logic, and validate results against real data. The discussion breaks down rule types—correlation rules, threshold alerts, and anomaly detection—and explains how each supports specific investigative goals. We also cover frameworks like MITRE ATT&CK, which help

Consistency under pressure saves time, and this episode explains how playbooks and runbooks make that possible. You’ll learn the difference between the two: playbooks describe response strategy at a high level, while runbooks contain the detailed, step-by-step actions analysts follow. The discussion explores how standardized workflows reduce human error, speed containment, and improve communication between teams during incidents. We also highlight how automation tools can execute runbook

Incident response begins long before an alert fires, and this episode focuses on the first two phases—preparation and detection. You’ll learn how preparation includes building policies, defining roles, assembling tools, and conducting training so teams are ready when an event occurs. We explain how detection depends on accurate baselines, tuned alerts, and integrated monitoring systems that distinguish anomalies from expected behavior. Together, these elements create a proactive posture

Not all data is created equal, and this episode explains how classification brings order and protection to information assets. You’ll learn how organizations categorize data based on sensitivity, impact, and regulatory requirement—often using tiers like Public, Internal, Confidential, and Restricted. The discussion connects classification to controls, showing how encryption, access restrictions, and retention schedules align with each level. We also explain why labeling and user awareness

Data Loss Prevention (DLP) combines technology and policy to stop sensitive information from leaving where it belongs. This episode introduces the core DLP models—endpoint, network, and cloud—and how they monitor and control data in motion, in use, and at rest. You’ll learn how pattern matching, fingerprinting, and contextual rules detect violations such as unencrypted uploads or unauthorized transfers. The discussion also clarifies how DLP integrates with classification systems and

Email remains the top vector for phishing, fraud, and malware, and this episode explains how layered defenses counter those risks. You’ll learn how Sender Policy Framework (SPF) verifies authorized mail servers, DomainKeys Identified Mail (DKIM) ensures message integrity through digital signatures, and Domain-based Message Authentication, Reporting, and Conformance (DMARC) ties them together to validate domain identity. The discussion illustrates how these standards prevent spoofing and

As organizations share data across teams, vendors, and regions, secure file transfer becomes essential to maintaining trust. This episode explains the difference between ad-hoc sharing and structured file exchange systems, highlighting the risks of uncontrolled uploads and public links. You’ll learn how protocols like SFTP, FTPS, and HTTPS-based APIs safeguard confidentiality and integrity in motion, and how managed file transfer (MFT) platforms enforce authentication, encryption, and