Certified: The CISM Audio Course
di Dr. Jason Edwards
Ultimo episodio
Welcome to the ISACA CISM
Welcome to the ISACA CISM
Informazioni su questo podcast
The Bare Metal Cyber CISM Audio Course is your comprehensive, exam-focused audio companion for mastering the Certified Information Security Manager (CISM) certification. Designed to guide aspiring security leaders through all four domains of the CISM exam, this prepcast translates complex risk, governance, and incident response concepts into clear, structured, and easy-to-follow episodes. Whether you're transitioning from a technical role or already managing security programs, the series offers over 70 expertly crafted sessions to reinforce key principles, strengthen exam readiness, and accelerate your journey to certification. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episodi
I 20 episodi più recenti su 72
- Welcome to the ISACA CISM · 2 minDive into a fast, no-fluff overview of what this podcast delivers, who it’s for, and how each episode helps you level up with practical, real-world takeaways. In this trailer…
- Episode 71: Continuous Improvement through Post-Incident Reviews and Risk Reassessment · 19 min · Episodio 71Mature security programs improve over time. In this final episode, we explain how to lead post-incident reviews, implement lessons learned, and reassess risk in light of new…
- Episode 70: Supervising Risk Treatment and Continuous Monitoring · 19 min · Episodio 70Managing risk doesn’t stop with one decision. In this episode, we explore how to supervise treatment activities (mitigation, transfer, acceptance) and establish ongoing…
- Episode 69: Supervising Risk Identification and Assessment · 18 min · Episodio 69CISM-certified professionals must oversee—not just conduct—risk assessments. This episode covers how to supervise the process, validate results, and ensure assessments align with…
- Episode 68: Managing and Monitoring Security Compliance with External Parties · 19 min · Episodio 68Vendors, suppliers, and partners all affect your risk posture. This episode explores how to define, enforce, and monitor external security requirements. You’ll learn how to…
- Episode 67: Integrating Security Requirements into Organizational Processes · 18 min · Episodio 67In this episode, we cover how to embed security into core business workflows—from procurement to development and beyond. You’ll learn how to ensure that security requirements…
- Episode 66: Aligning Security Programs with Operational Business Objectives · 18 min · Episodio 66Security must support the mission. This episode teaches you how to align your security initiatives with day-to-day business operations, process priorities, and performance…
- Episode 65: Evaluating and Reporting Information Security Metrics · 17 min · Episodio 65Metrics turn performance into visibility. This episode shows you how to define, collect, and report information security metrics that support governance, justify decisions, and…
- Episode 64: Compiling and Presenting Effective Security Reports · 17 min · Episodio 64CISM candidates must know how to report program results and risk insights to both executives and operational teams. This episode explains how to compile relevant data, translate…
- Episode 63: Defining and Communicating Security Roles and Responsibilities · 18 min · Episodio 63Effective governance depends on clear roles and responsibilities. In this episode, we walk through how to assign, document, and communicate who owns what in your security…
- Episode 62: Gaining Senior Leadership Commitment and Stakeholder Support · 17 min · Episodio 62Security programs rise or fall on leadership support. This episode teaches you how to earn and sustain executive commitment, communicate risk in business terms, and align your…
- Episode 61: Communicating the Business Case and Gaining Stakeholder Buy-In · 19 min · Episodio 61CISM leaders must champion security through influence, not just authority. In this episode, we cover how to build and communicate compelling business cases for security…
- Episode 60: Building Effective Security Budgets and ROI Analysis · 18 min · Episodio 60Budgeting is about more than asking for money—it’s about justifying value. This episode explains how to estimate costs, present return on investment, and align security spending…
- Episode 59: Integrating Information Security into Corporate Governance · 17 min · Episodio 59Security can’t operate in a silo. This episode covers how to embed information security into broader corporate governance, ensuring risk, compliance, and audit processes align…
- Episode 58: Implementing Information Security Governance Frameworks · 16 min · Episodio 58Frameworks turn strategy into structure. In this episode, we explain how to implement security governance frameworks like COBIT and ISO in ways that support accountability…
- Episode 57: Establishing Information Security Strategy Aligned with Organizational Goals · 18 min · Episodio 57Security strategy must serve the business. This episode walks you through aligning your security vision, priorities, and investment with what the organization truly values—its…
- Episode 56: Identifying Internal and External Influences on Security Strategy · 19 min · Episodio 56Domain 1 isn’t just about governance—it’s about understanding what shapes strategy. This episode teaches you how to identify organizational drivers, market forces, regulatory…
- Episode 55: Conducting Meaningful Post-Incident Reviews · 19 min · Episodio 55CISM professionals must know how to lead structured post-incident reviews. This episode explains how to capture lessons learned, evaluate what went wrong (and right), and…
- Episode 54: Techniques for Secure Recovery and Restoration · 18 min · Episodio 54After eradication comes recovery—and it must be secure. This episode shows you how to safely bring systems back online, validate their integrity, and ensure that no backdoors or…
- Episode 53: Techniques for Incident Eradication · 17 min · Episodio 53Eradication is where you eliminate the root cause of an incident. This episode walks you through how to fully remove malware, close exploited vulnerabilities, and validate that…
