Certified: The ISC(2) CC Audio Course
- Episodes
- 64
- Format
- Series – listen from the start
- Latest episode
- Mar 11, 2026
About the podcast
Certified: The ISC(2) CC Certification Audio Course is an audio-first study program built for people who want a clean, practical path into cybersecurity without getting buried in jargon. It’s designed for beginners and career changers, as well as IT and business professionals who need a solid security foundation. If you’re aiming for the ISC(2) Certified in Cybersecurity (CC) credential, this course gives you a structured way to learn the concepts the exam expects, using plain language and real-world framing. You do not need a deep technical background to start. You need consistency, curiosity, and a willingness to practice thinking like a security professional. Across Certified: The ISC(2) CC Certification Audio Course, you’ll learn core security principles, basic risk thinking, security operations fundamentals, access and identity concepts, network and endpoint basics, and the purpose behind common controls. The teaching style is built for audio: short, focused explanations, repeatable definitions, and quick mental checkpoints that help you remember what matters. You can learn during commutes, workouts, chores, or quiet time—anywhere you can listen. Because the format is voice-driven, it also helps you get comfortable with security vocabulary, which makes exam questions feel less like a foreign language. What makes Certified: The ISC(2) CC Certification Audio Course different is the editorial approach: it respects your time, stays focused, and keeps every episode tied to outcomes you can use. Instead of treating security as a pile of terms, it connects ideas to decisions you’ll actually make—what to protect, why it matters, and how to reduce risk without breaking the business. Success looks like this: you can explain key concepts in your own words, recognize what a question is really asking, and choose the best answer with confidence. By the end, you should feel ready to sit the CC exam—and ready to have smarter security conversations at work.
Episodes 64
Welcome to the ISC2 Certified in Cybersecurity Audio Course!
Certified: The ISC(2) CC Certification Audio Course is an audio-first study program built for people who want a clean, practical path into cybersecurity without getting buried in jargon. It’s designed for …
Show notes
Certified: The ISC(2) CC Certification Audio Course is an audio-first study program built for people who want a clean, practical path into cybersecurity without getting buried in jargon. It’s designed for beginners and career changers, as well as IT and business professionals who need a solid security foundation. If you’re aiming for the ISC(2) Certified in Cybersecurity (CC) credential, this course gives you a structured way to learn the concepts the exam expects, using plain language and real-world framing. You do not need a deep technical background to start. You need consistency, curiosity, and a willingness to practice thinking like a security professional.
Across Certified: The ISC(2) CC Certification Audio Course, you’ll learn core security principles, basic risk thinking, security operations fundamentals, access and identity concepts, network and endpoint basics, and the purpose behind common controls. The teaching style is built for audio: short, focused explanations, repeatable definitions, and quick mental checkpoints that help you remember what matters. You can learn during commutes, workouts, chores, or quiet time—anywhere you can listen. Because the format is voice-driven, it also helps you get comfortable with security vocabulary, which makes exam questions feel less like a foreign language.
What makes Certified: The ISC(2) CC Certification Audio Course different is the editorial approach: it respects your time, stays focused, and keeps every episode tied to outcomes you can use. Instead of treating security as a pile of terms, it connects ideas to decisions you’ll actually make—what to protect, why it matters, and how to reduce risk without breaking the business. Success looks like this: you can explain key concepts in your own words, recognize what a question is really asking, and choose the best answer with confidence. By the end, you should feel ready to sit the CC exam—and ready to have smarter security conversations at work.
Episode 64 — Security Awareness Training Importance: Building Habits That Resist Attacks
This episode explains why security awareness training matters, emphasizing that training is not about blaming users but about building repeatable habits that reduce the probability and impact of common attacks …
Show notes
This episode explains why security awareness training matters, emphasizing that training is not about blaming users but about building repeatable habits that reduce the probability and impact of common attacks. You will learn how awareness programs support multiple security goals, including preventing credential compromise, reducing malware infections, protecting sensitive data, and improving incident reporting speed. We will discuss what makes training effective, such as relevance to job roles, short refreshers, clear reporting paths, and reinforcement through realistic examples rather than abstract rules. You will practice interpreting scenarios like a suspicious email that targets payroll, a request for password sharing in the name of urgency, or an unexpected MFA prompt, and you will learn how consistent habits like verification and reporting change outcomes. Real-world best practices will include measuring training outcomes through reporting rates and reduced incident frequency, integrating awareness into onboarding and policy communications, and ensuring leadership models the behaviors expected, because culture is reinforced by what leaders tolerate and what they practice. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 63 — Security Awareness Training Concepts: Social Engineering and Human Exploits
This episode explains the foundational concepts behind security awareness training, focusing on how social engineering attacks work and why human behavior is a major factor in organizational risk, which the CC …
Show notes
This episode explains the foundational concepts behind security awareness training, focusing on how social engineering attacks work and why human behavior is a major factor in organizational risk, which the CC exam expects you to understand. You will learn how attackers exploit trust, urgency, authority, curiosity, and fear to trick people into revealing information, approving MFA prompts, opening malicious attachments, or sending money to fraudulent accounts. We will discuss common social engineering methods such as phishing, spear phishing, vishing, smishing, pretexting, and baiting, and how each maps to realistic indicators you can spot during daily work. You will practice analyzing scenarios where an email looks legitimate but contains subtle red flags, or where a caller pressures an employee for sensitive details, and you will learn the safest response actions such as verification through known channels and reporting procedures. Real-world best practices will include reinforcing simple decision rules, practicing reporting without shame, and using training to build habits that reduce risk without turning users into security experts overnight. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 62 — Privacy Policy Essentials: Expectations, Handling Rules, and Accountability
This episode focuses on privacy policy essentials and helps you understand how organizations define acceptable collection, use, sharing, and protection of personal data, which supports CC-level privacy and …
Show notes
This episode focuses on privacy policy essentials and helps you understand how organizations define acceptable collection, use, sharing, and protection of personal data, which supports CC-level privacy and governance concepts. You will learn what a privacy policy aims to communicate to stakeholders, including what data is collected, why it is collected, how it is used, who it may be shared with, and how long it is retained. We will discuss accountability concepts such as ownership, escalation paths, and documentation, because privacy failures often come from unclear responsibility as much as from technical weakness. You will practice interpreting scenarios where privacy expectations are violated, such as collecting unnecessary personal data, retaining it too long, sharing it without proper basis, or failing to protect it with appropriate access controls. Real-world best practices will include data minimization, clear consent and notice practices, secure handling rules aligned with classification, and regular reviews to keep policy accurate as systems and business practices evolve. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 61 — Change Management Policy: Documentation, Approval, and Rollback That Works
This episode explains change management policy as a control that protects integrity and availability by ensuring system changes are planned, reviewed, implemented carefully, and reversible when something goes …
Show notes
This episode explains change management policy as a control that protects integrity and availability by ensuring system changes are planned, reviewed, implemented carefully, and reversible when something goes wrong. You will learn why unmanaged changes create security risk through misconfigurations, untested updates, and undocumented access changes that are hard to investigate later. We will discuss core change management elements such as change requests, approvals, impact analysis, testing expectations, maintenance windows, and rollback plans, and we will connect these ideas to the kinds of scenario questions the CC exam uses. You will practice reasoning through examples like deploying a firewall rule change, applying a critical patch, or modifying access permissions, and you will learn what “good” documentation should capture so teams can reproduce decisions and troubleshoot failures. Real-world best practices will include prioritizing emergency changes with clear guardrails, ensuring stakeholders are informed, validating outcomes after implementation, and using post-change reviews to prevent repeating avoidable mistakes. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 60 — BYOD Policy Basics: Balancing User Convenience and Organizational Security
This episode introduces bring your own device (BYOD) policy concepts and helps you understand how organizations manage the security risks of personal devices accessing corporate systems, a topic that appears in …
Show notes
This episode introduces bring your own device (BYOD) policy concepts and helps you understand how organizations manage the security risks of personal devices accessing corporate systems, a topic that appears in CC objectives through administrative and technical control thinking. You will learn the kinds of risks BYOD introduces, such as uncontrolled patching, mixed personal and corporate data, lost devices, insecure apps, and inconsistent logging visibility. We will discuss common BYOD policy elements like minimum device requirements, mobile device management expectations, encryption and screen lock rules, acceptable apps, and separation of work and personal data where possible. You will practice interpreting scenarios such as an employee wanting email access on a personal phone, a lost device with stored credentials, or a device that cannot meet security requirements, and you will learn which policy approach best reduces risk while maintaining productivity. Real-world best practices will include clear enrollment and offboarding steps, remote wipe options for corporate data, strong authentication, and communicating policy expectations up front so users understand what the organization can enforce and what support it will provide. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 59 — Acceptable Use Policy: Setting Boundaries Without Creating Shadow IT
This episode explains acceptable use policies (AUPs) as governance tools that set clear expectations for how users may access and use organizational systems, data, and networks, a concept that supports multiple …
Show notes
This episode explains acceptable use policies (AUPs) as governance tools that set clear expectations for how users may access and use organizational systems, data, and networks, a concept that supports multiple CC objectives around administrative controls. You will learn what an AUP typically covers, such as appropriate device use, prohibited activities, safe browsing expectations, handling of organizational data, and consequences for misuse. We will discuss how AUPs reduce risk by clarifying what is allowed, supporting consistent enforcement, and providing a foundation for disciplinary action when behavior creates security exposure. You will practice reasoning through scenarios like employees installing unapproved software, using personal cloud storage for work files, or connecting unknown devices to the network, and you will learn how policy and technical controls work together to reduce these risks. Real-world best practices will include writing policies in plain language, aligning them with actual workflows so users are not forced into workarounds, and reinforcing expectations through regular training and reminders that emphasize safety and accountability rather than fear. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 58 — Password Policy Essentials: Strength, Rotation Myths, and Practical Enforcement
This episode covers password policy fundamentals and prepares you for CC questions that test how authentication controls should be designed and enforced in real environments. You will learn what makes a …
Show notes
This episode covers password policy fundamentals and prepares you for CC questions that test how authentication controls should be designed and enforced in real environments. You will learn what makes a password policy effective, including length expectations, banned password lists, secure storage practices, and account lockout considerations that reduce brute force risk without enabling denial-of-service through excessive lockouts. We will discuss the difference between password strength guidance and password management behavior, including why predictable patterns undermine complexity rules and why security teams often pair passwords with MFA. You will practice interpreting scenarios such as repeated login failures, credential stuffing risk, and users writing passwords down due to overly burdensome requirements, and you will learn what policy adjustments could reduce risk while improving compliance. Real-world best practices will include using password managers where appropriate, monitoring for compromised credentials, ensuring secure password reset workflows, and aligning policy with risk tolerance and user roles so privileged accounts receive stronger protections without forcing impossible requirements on everyone. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 57 — Data Handling Policy Essentials: Rules That Prevent the Most Common Mistakes
This episode explains data handling policies as administrative controls that translate confidentiality and privacy expectations into clear, repeatable behaviors across the organization, which the CC exam …
Show notes
This episode explains data handling policies as administrative controls that translate confidentiality and privacy expectations into clear, repeatable behaviors across the organization, which the CC exam expects you to understand in principle. You will learn what effective data handling policies typically address, including classification rules, approved storage locations, sharing limitations, encryption expectations, and safe transmission practices. We will discuss why vague policies fail, how policy exceptions should be documented, and how enforcement and training turn policy into reality rather than shelfware. You will practice evaluating scenarios such as employees storing sensitive files in personal accounts, sending data to the wrong recipient, or copying restricted information into unsecured tools, and you will learn which policy element would prevent or reduce the risk. Real-world best practices will include aligning policy with business workflows, providing approved tools that make compliance easy, using access control and logging to support enforcement, and reviewing policy regularly so it stays current as systems, threats, and regulatory expectations change. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 56 — System Hardening Through Configuration Management: Baselines, Updates, Patches
This episode focuses on system hardening through configuration management, which is the discipline of maintaining secure, consistent settings across systems while controlling change to reduce risk. You will …
Show notes
This episode focuses on system hardening through configuration management, which is the discipline of maintaining secure, consistent settings across systems while controlling change to reduce risk. You will learn how baselines define known-good configurations, how patching reduces exposure to known vulnerabilities, and how update processes must balance security urgency with stability and testing requirements. We will discuss why configuration drift occurs, how unauthorized changes create hidden risk, and how change management supports integrity and availability by ensuring changes are reviewed and reversible. You will practice interpreting scenarios where insecure defaults remain enabled, systems are out of date, or patching causes unexpected outages, and you will learn how to choose the best mitigation approach based on risk tolerance and criticality. Real-world best practices will include maintaining asset inventories, prioritizing patches based on exposure and impact, using staged rollouts, validating configuration compliance, and documenting exceptions so risk decisions remain visible and accountable. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 55 — Logging and Monitoring Security Events: What to Capture for Real Value
This episode explains logging and monitoring as foundational security capabilities, showing how collecting the right events supports detection, investigation, and accountability, which are important themes in …
Show notes
This episode explains logging and monitoring as foundational security capabilities, showing how collecting the right events supports detection, investigation, and accountability, which are important themes in CC-level security operations. You will learn what good logs typically capture, such as authentication activity, privilege changes, configuration changes, and access to sensitive resources, and why context like timestamps and user identifiers matters for meaningful analysis. We will discuss common pitfalls including excessive noise, inconsistent formats, missing coverage, and time synchronization issues that make investigations harder than they need to be. You will practice reasoning through scenarios where an organization cannot confirm what happened because logs were not enabled, not retained, or not protected from tampering, and you will learn what corrective control would address the gap. Real-world best practices will include defining logging standards, protecting logs through access control and integrity measures, monitoring for anomalies like unusual login patterns, and ensuring alerts map to response processes so monitoring results in action rather than ignored dashboards. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 54 — Data Handling Discipline: Classification, Labeling, Retention, and Destruction
This episode covers data handling as a practical security skill, connecting classification, labeling, retention, and secure destruction to the confidentiality and compliance outcomes the CC exam tests. You will …
Show notes
This episode covers data handling as a practical security skill, connecting classification, labeling, retention, and secure destruction to the confidentiality and compliance outcomes the CC exam tests. You will learn why classification defines how data should be protected, how labels communicate handling expectations, and how retention rules reduce risk by limiting how long sensitive data remains exposed. We will discuss secure destruction methods in concept, including why deletion alone is often insufficient and how organizations use policies and approved processes to ensure data is removed appropriately. You will practice interpreting scenarios where data is mishandled through oversharing, improper storage, uncontrolled copies, or retention beyond business need, and you will learn how to identify the best corrective action. Real-world best practices will include minimizing data collection, restricting access based on role, using encryption for sensitive datasets, documenting retention schedules, and ensuring disposal processes cover backups and replicas so risk does not quietly persist. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 53 — Encryption Essentials: Symmetric, Asymmetric, and Hashing Without Confusion
This episode explains foundational cryptography concepts that appear frequently on the CC exam, focusing on how symmetric encryption, asymmetric encryption, and hashing solve different security problems. You …
Show notes
This episode explains foundational cryptography concepts that appear frequently on the CC exam, focusing on how symmetric encryption, asymmetric encryption, and hashing solve different security problems. You will learn what each method is used for in practical terms, such as symmetric encryption for efficient confidentiality, asymmetric encryption for key exchange and digital signatures, and hashing for integrity verification and safe comparisons. We will discuss common misunderstandings, like thinking hashing can be reversed or assuming encryption automatically proves who sent a message, and we will tie these ideas to real security controls such as TLS, password storage, and file integrity checks. You will practice recognizing which cryptographic method is appropriate in scenarios like protecting data in transit, verifying a downloaded file has not been altered, or enabling non-repudiation through signatures. Real-world troubleshooting considerations will include certificate trust issues, weak algorithm choices, key management failures, and why cryptography is only as strong as the processes used to implement and maintain it. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 52 — Cloud Network Concepts: SLA, MSP, SaaS, PaaS, IaaS, Hybrid Explained
This episode introduces cloud service models and key terms such as service level agreements (SLAs), managed service providers (MSPs), and hybrid deployments, helping you interpret CC exam questions that …
Show notes
This episode introduces cloud service models and key terms such as service level agreements (SLAs), managed service providers (MSPs), and hybrid deployments, helping you interpret CC exam questions that describe shared environments and shared responsibilities. You will learn how SaaS, PaaS, and IaaS differ in who manages what, and why misunderstanding responsibility boundaries leads to gaps in security controls, logging, and patching. We will discuss what an SLA represents, what it does and does not guarantee, and how organizations use SLAs and contracts to set availability expectations and support continuity planning. You will practice identifying which party is responsible for controls like identity management, data protection, configuration hardening, and incident response coordination in different service models. Real-world examples will include using cloud services for email and storage, running applications on managed platforms, and integrating on-prem and cloud networks, with best practices that emphasize visibility, access control discipline, and clear governance. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 51 — Defense in Depth and NAC: Segmentation for Embedded Systems and IoT
This episode focuses on defense in depth and network access control (NAC) as practical strategies for managing risk from embedded systems and IoT devices, which frequently have limited security features and …
Show notes
This episode focuses on defense in depth and network access control (NAC) as practical strategies for managing risk from embedded systems and IoT devices, which frequently have limited security features and long patch cycles. You will learn how defense in depth layers controls so a single failure does not become a full compromise, and how NAC helps enforce who and what is allowed onto a network based on identity, device posture, or policy. We will discuss why IoT and embedded devices expand attack surface through weak defaults, hard-to-change credentials, limited logging, and inconsistent update mechanisms, and why segmentation is a common compensating control when device hardening is not realistic. You will practice reasoning through scenarios like isolating smart devices on a separate network, restricting their outbound traffic, and monitoring for unusual connections that suggest compromise. Real-world best practices will include inventorying devices, enforcing least privilege at the network level, validating vendor support expectations, and designing segmentation rules that limit lateral movement without breaking required device functionality. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 50 — Network Design Security: DMZ, VLAN, VPN, and Micro-Segmentation Done Right
This episode teaches secure network design concepts, including DMZs, VLANs, VPNs, and micro-segmentation, focusing on how segmentation reduces attack surface and limits blast radius, which is directly relevant …
Show notes
This episode teaches secure network design concepts, including DMZs, VLANs, VPNs, and micro-segmentation, focusing on how segmentation reduces attack surface and limits blast radius, which is directly relevant to CC exam objectives. You will learn how a DMZ isolates public-facing services, how VLANs separate internal traffic into logical segments, and how VPNs provide secure remote connectivity when properly configured and controlled. We will discuss micro-segmentation as a finer-grained approach that restricts east-west movement, reducing lateral spread when a host is compromised. You will practice reasoning through scenarios like placing a web server that must be reachable from the internet, isolating guest devices from internal systems, and securing remote access for employees without exposing administrative interfaces broadly. Real-world troubleshooting considerations will include misrouted traffic due to VLAN configuration errors, access failures caused by overly broad or overly narrow rules, and designing segmentation policies that align with least privilege rather than relying on a single perimeter boundary. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 49 — MOUs and MOAs in Infrastructure Planning: Shared Responsibilities and Risk
This episode explains memorandums of understanding (MOUs) and memorandums of agreement (MOAs) as governance tools that clarify shared responsibilities, which is useful for CC scenarios involving third parties …
Show notes
This episode explains memorandums of understanding (MOUs) and memorandums of agreement (MOAs) as governance tools that clarify shared responsibilities, which is useful for CC scenarios involving third parties, shared services, or cross-department operations. You will learn how these documents define expectations, roles, service responsibilities, and accountability boundaries so security does not fall into gaps between teams. We will discuss why unclear responsibility creates risk, such as unpatched systems, unmonitored logs, or inconsistent access control enforcement, and how agreements help prevent “we thought they handled that” failures. You will practice interpreting a scenario where a vendor provides a service but security controls are not clearly defined, and you will learn what questions a security professional should ask to ensure responsibilities align with policy and risk tolerance. Real-world examples will include shared data environments, managed service providers, and interdepartmental systems where clear agreements support incident response coordination, compliance obligations, and continuity planning. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 48 — On-Prem Network Infrastructure: Power, HVAC, Fire Suppression, Redundancy
This episode covers on-premises infrastructure considerations that affect security and resilience, helping you answer CC questions where physical and operational realities determine availability and risk. You …
Show notes
This episode covers on-premises infrastructure considerations that affect security and resilience, helping you answer CC questions where physical and operational realities determine availability and risk. You will learn why power, cooling, fire suppression, and environmental monitoring matter to security, and how failures in these areas can cause downtime, data loss, and unsafe conditions. We will discuss redundancy concepts such as uninterruptible power supplies, generators, redundant network links, and hardware failover, emphasizing how these support availability targets and disaster recovery planning. You will practice identifying the likely point of failure in scenarios where systems overheat, networks intermittently drop, or equipment is damaged due to poor environmental control. Real-world best practices will include regular testing of backup power, maintaining physical security around infrastructure rooms, monitoring for temperature and humidity drift, and documenting dependencies so continuity and recovery plans reflect the actual environment rather than assumptions. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 47 — Firewalls and IPS Fundamentals: Blocking, Allowing, and Stopping What Matters
This episode explains firewalls and intrusion prevention systems (IPS) at a foundational level, emphasizing how they support confidentiality, integrity, and availability by controlling traffic and stopping …
Show notes
This episode explains firewalls and intrusion prevention systems (IPS) at a foundational level, emphasizing how they support confidentiality, integrity, and availability by controlling traffic and stopping known malicious patterns. You will learn how firewall rules decide what is allowed or denied based on criteria like source, destination, protocol, and port, and why default-deny thinking is often safer than permissive configurations. We will discuss IPS as a control that can actively block or drop traffic based on detection logic, and why prevention introduces tuning requirements to avoid disrupting legitimate business activity. You will practice reasoning through scenarios like an application failing after a rule change, repeated blocked traffic that suggests scanning, or an IPS generating frequent alerts that may represent misconfiguration rather than real attack activity. Real-world best practices will include documenting rule changes, validating business requirements, monitoring for unintended consequences, and using segmentation so firewalling supports least privilege at the network level, not just at the perimeter. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 46 — Prevent Attacks with Antivirus and Scanning: Strengths, Limits, and Good Use
This episode covers antivirus and scanning as preventive and detective measures, helping you understand what these tools do well, where they fail, and how the CC exam expects you to reason about layered …
Show notes
This episode covers antivirus and scanning as preventive and detective measures, helping you understand what these tools do well, where they fail, and how the CC exam expects you to reason about layered protection. You will learn the difference between traditional signature-based antivirus and more behavior-focused approaches, and why updates and tuning are necessary to remain effective against evolving threats. We will discuss how scanning can identify known vulnerabilities, misconfigurations, and exposures, but also why scans must be interpreted carefully to avoid chasing false positives or breaking systems through careless remediation. You will practice evaluating scenarios such as a workstation repeatedly flagging malware, an organization running vulnerability scans before patching, or a new system failing compliance checks due to missing updates. Real-world troubleshooting considerations will include investigating repeated detections, validating scan scope, scheduling scans to reduce operational disruption, and coordinating remediation through change management so security improvements do not create availability incidents. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 45 — HIDS and NIDS Explained: Host Versus Network Detection Tradeoffs
This episode compares host-based intrusion detection systems (HIDS) and network-based intrusion detection systems (NIDS), giving you a practical framework for choosing the right visibility for a given risk …
Show notes
This episode compares host-based intrusion detection systems (HIDS) and network-based intrusion detection systems (NIDS), giving you a practical framework for choosing the right visibility for a given risk, which is a common exam expectation. You will learn what each approach can observe, such as host process activity and file changes for HIDS versus traffic patterns and protocol behavior for NIDS. We will discuss tradeoffs including deployment effort, coverage, performance impact, and how encryption can limit network visibility while endpoint tools may still see behavior after decryption. You will practice selecting an approach in scenarios like detecting lateral movement between hosts, monitoring a sensitive server for unauthorized changes, or identifying suspicious scanning activity at the network edge. Real-world considerations will include how to reduce alert fatigue, how to tune detection rules responsibly, and why detection tools are most effective when paired with incident response processes that define who investigates, how evidence is captured, and what containment actions are authorized. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 44 — Identify Attacks Using IDS Concepts: What Detection Can and Cannot Prove
This episode explains intrusion detection system (IDS) concepts and helps you understand how detection works at a high level, which the CC exam often tests through scenario questions about alerts and …
Show notes
This episode explains intrusion detection system (IDS) concepts and helps you understand how detection works at a high level, which the CC exam often tests through scenario questions about alerts and monitoring. You will learn the difference between signature-based and anomaly-based detection, and why both approaches can produce false positives and false negatives depending on context. We will discuss how IDS fits into a broader monitoring strategy, including the importance of baselines, logging quality, and a clear process for validating whether an alert reflects real malicious activity. You will practice thinking through an alert scenario by asking what evidence is needed next, what the alert suggests, and what it does not prove, which is critical for avoiding overreaction or complacency. Real-world troubleshooting considerations will include noisy alerts caused by misconfigured thresholds, blind spots caused by encrypted traffic, and the need to correlate IDS signals with endpoint logs, authentication logs, and network flow data for a more accurate picture. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 43 — Network Threat Types: DDoS, Viruses, Worms, Trojans, MITM, Side-Channels
This episode surveys common network and malware threat types that the CC exam expects you to recognize, focusing on what each threat aims to do and how it typically shows up in symptoms and logs. You will learn …
Show notes
This episode surveys common network and malware threat types that the CC exam expects you to recognize, focusing on what each threat aims to do and how it typically shows up in symptoms and logs. You will learn how denial-of-service attacks affect availability, how malware families differ in propagation and intent, and why man-in-the-middle attacks are especially dangerous for confidentiality and integrity when trust is misplaced. We will discuss side-channel concepts at a foundational level so you can recognize the idea that information can leak through unintended signals, even when encryption is used correctly. You will practice mapping each threat type to likely indicators, such as unusual outbound connections, repeated login attempts, unexpected process behavior, or large traffic spikes that overwhelm resources. Real-world examples will include phishing-delivered Trojans, worms spreading through weak patching, and MITM risks on untrusted WiFi, with best practices that focus on layered defenses rather than single-point solutions. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 42 — Ports and Applications: Mapping Network Conversations to Real Risk
This episode connects ports, services, and applications so you can interpret common exam scenarios that describe traffic, blocked connections, or suspicious network behavior. You will learn what a port …
Show notes
This episode connects ports, services, and applications so you can interpret common exam scenarios that describe traffic, blocked connections, or suspicious network behavior. You will learn what a port represents, why transport protocols matter, and how services are identified and exposed through listening ports on hosts and devices. We will discuss the security implications of open ports, including expanded attack surface, misconfigured services, and the risk of exposing administrative interfaces to untrusted networks. You will practice translating a scenario into practical questions such as “what service is this likely to be,” “should this be exposed,” and “what control would reduce risk,” without requiring you to memorize long port lists. Real-world examples will include troubleshooting why a service is unreachable, recognizing the difference between blocked traffic and service failure, and using firewall rules and segmentation to ensure only required ports are accessible to the right users and systems. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 41 — WiFi Fundamentals for Security: How Wireless Works and Where Attacks Hide
This episode explains WiFi fundamentals with a security lens, helping you understand what wireless networks are doing behind the scenes and why the CC exam expects you to recognize common wireless risks. You …
Show notes
This episode explains WiFi fundamentals with a security lens, helping you understand what wireless networks are doing behind the scenes and why the CC exam expects you to recognize common wireless risks. You will learn core ideas such as access points, clients, SSIDs, basic authentication and encryption concepts, and why radio-based communication changes the threat model compared to wired networks. We will discuss typical wireless attack paths, including rogue access points, evil twin hotspots, weak or misconfigured encryption, and credential capture attempts that rely on user trust rather than technical brilliance. You will practice identifying safer behaviors and controls, such as using strong encryption settings, disabling insecure legacy options, segmenting guest networks, and validating that you are connecting to the right network in the first place. Real-world troubleshooting considerations will include distinguishing signal problems from authentication failures, recognizing captive portals and misdirection, and understanding why “it connects” does not automatically mean it is secure. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 40 — IPv4 and IPv6 Basics: Addressing, Notation, and Security-Relevant Differences
This episode explains IPv4 and IPv6 addressing in practical terms, helping you recognize what you are looking at in exam questions and understand how addressing influences security and troubleshooting. You will …
Show notes
This episode explains IPv4 and IPv6 addressing in practical terms, helping you recognize what you are looking at in exam questions and understand how addressing influences security and troubleshooting. You will learn basic IPv4 structure, private versus public ranges at a high level, and the purpose of subnetting concepts without turning the discussion into math-heavy drills. We will then introduce IPv6 notation, why IPv6 exists, and how common IPv6 features change operational assumptions, such as larger address space and different address types. You will practice recognizing likely misconfigurations, such as incorrect gateway settings, duplicate addressing problems, and misunderstandings caused by mixed IPv4 and IPv6 environments. Real-world security considerations will include the risk of unmanaged IPv6 on networks that still think “we only use IPv4,” the importance of consistent filtering policies, and using logs and monitoring that accurately capture both protocol families. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 39 — Computer Networking Foundations: OSI and TCP/IP Models for Security Thinking
This episode teaches networking fundamentals through the OSI and TCP/IP models, focusing on how layered communication helps you reason about where security controls operate and where attacks occur, which is …
Show notes
This episode teaches networking fundamentals through the OSI and TCP/IP models, focusing on how layered communication helps you reason about where security controls operate and where attacks occur, which is CC-relevant knowledge. You will learn what each layer is responsible for and how data moves from an application down to the network and back, along with the practical meaning of encapsulation. We will discuss how common security tools map to layers, such as firewalls and filtering at network and transport levels, and how application-layer threats exploit higher-level protocols and services. You will practice translating a scenario into layers, for example identifying whether a problem is a physical connectivity issue, a routing issue, a port and transport issue, or an application protocol issue. Real-world troubleshooting considerations will include isolating the layer where failure occurs, understanding why a ping test does not prove an application is healthy, and recognizing how attackers exploit weak configurations at multiple layers. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 38 — Role-Based Access Control: Designing Roles That Actually Reflect Job Duties
This episode covers role-based access control (RBAC) and prepares you to apply it in exam questions that ask how to manage access at scale without creating chaos. You will learn how RBAC assigns permissions to …
Show notes
This episode covers role-based access control (RBAC) and prepares you to apply it in exam questions that ask how to manage access at scale without creating chaos. You will learn how RBAC assigns permissions to roles based on job functions, then assigns users to roles, making access easier to administer and review than individual, user-by-user permissions. We will discuss how good role design reduces over-permissioning and supports least privilege, while poor role design creates “role explosion,” confusion, and shadow access that is hard to audit. You will practice identifying RBAC in scenarios like help desk access, finance system permissions, and administrative duties that vary by team, and you will learn how to handle exceptions using temporary elevation or supplemental roles. Real-world best practices will include periodic role reviews, mapping roles to business processes, documenting role purpose clearly, and monitoring for privilege creep when users accumulate multiple roles over time. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 37 — Mandatory Access Control: Labels, Rules, and High-Control Environments
This episode explains mandatory access control (MAC), a model where a central authority defines access rules and users cannot override them, which is frequently tested through comparisons with DAC and RBAC. You …
Show notes
This episode explains mandatory access control (MAC), a model where a central authority defines access rules and users cannot override them, which is frequently tested through comparisons with DAC and RBAC. You will learn how MAC uses labels, classifications, and clear rules to control information flow, and why it is common in environments that require strict confidentiality protections. We will discuss how MAC reduces the risk of discretionary sharing, but can also increase operational complexity because exceptions are harder to implement and changes require formal administration. You will practice recognizing MAC in scenarios where data is classified, access is determined by clearance and need-to-know, and users cannot grant access even if they own a file. Real-world considerations will include handling labeled data correctly, understanding the difference between identity and clearance, and troubleshooting access issues that occur when labels, classifications, or authorization rules do not align with the user’s assigned permissions. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
Episode 36 — Discretionary Access Control: Ownership, Permissions, and Where It Breaks Down
This episode focuses on discretionary access control (DAC), a model where resource owners decide who gets access and what level of permission is granted, and it helps you answer CC questions that compare access …
Show notes
This episode focuses on discretionary access control (DAC), a model where resource owners decide who gets access and what level of permission is granted, and it helps you answer CC questions that compare access control approaches. You will learn how DAC commonly appears in operating systems through file and folder permissions, access control lists, and user-managed sharing settings. We will discuss the strengths of DAC, such as flexibility and ease of delegation, alongside weaknesses such as inconsistent permissioning, excessive sharing, and difficulty enforcing organization-wide rules when owners make independent decisions. You will practice identifying DAC in scenarios involving shared drives, collaboration platforms, and user-controlled resource permissions, and you will learn how to recognize when DAC increases confidentiality risk through accidental oversharing. Real-world best practices will include establishing standards for sharing, monitoring for excessive permissions, using groups and roles where possible to reduce complexity, and reviewing access periodically to prevent permission sprawl. Produced by BareMetalCyber.com, where you’ll find more cyber audio courses, books, and information to strengthen your educational path. Also, if you want to stay up to date with the latest news, visit DailyCyber.News for a newsletter you can use, and a daily podcast you can commute with.
These are the latest 60 of 64 episodes. You’ll find older episodes in the podcast’s feed.
Recommended by Certified: The ISC(2) CC Audio Course
Similar podcasts
More Education podcasts
Is this your podcast?
Confirm it with an entry in your feed: you get a code here, add it as podcast:txt to the channel of your feed, and we check it. Your podcast is then shown as “verified” on SoundNode.