Certified: The ISC(2) CC Audio Course

<p>This episode introduces bring your own device (BYOD) policy concepts and helps you understand how organizations manage the security risks of personal devices accessing corporate systems, a topic that appears in CC...

<p>This episode explains acceptable use policies (AUPs) as governance tools that set clear expectations for how users may access and use organizational systems, data, and networks, a concept that supports multiple CC...

<p>This episode covers password policy fundamentals and prepares you for CC questions that test how authentication controls should be designed and enforced in real environments. You will learn what makes a password...

<p>This episode explains data handling policies as administrative controls that translate confidentiality and privacy expectations into clear, repeatable behaviors across the organization, which the CC exam expects you...

<p>This episode focuses on system hardening through configuration management, which is the discipline of maintaining secure, consistent settings across systems while controlling change to reduce risk. You will learn how...

<p>This episode explains logging and monitoring as foundational security capabilities, showing how collecting the right events supports detection, investigation, and accountability, which are important themes in...

<p>This episode covers data handling as a practical security skill, connecting classification, labeling, retention, and secure destruction to the confidentiality and compliance outcomes the CC exam tests. You will learn...

<p>This episode explains foundational cryptography concepts that appear frequently on the CC exam, focusing on how symmetric encryption, asymmetric encryption, and hashing solve different security problems. You will...

<p>This episode introduces cloud service models and key terms such as service level agreements (SLAs), managed service providers (MSPs), and hybrid deployments, helping you interpret CC exam questions that describe...

<p>This episode focuses on defense in depth and network access control (NAC) as practical strategies for managing risk from embedded systems and IoT devices, which frequently have limited security features and long...

<p>This episode teaches secure network design concepts, including DMZs, VLANs, VPNs, and micro-segmentation, focusing on how segmentation reduces attack surface and limits blast radius, which is directly relevant to CC...

<p>This episode explains memorandums of understanding (MOUs) and memorandums of agreement (MOAs) as governance tools that clarify shared responsibilities, which is useful for CC scenarios involving third parties, shared...

<p>This episode covers on-premises infrastructure considerations that affect security and resilience, helping you answer CC questions where physical and operational realities determine availability and risk. You will...

<p>This episode explains firewalls and intrusion prevention systems (IPS) at a foundational level, emphasizing how they support confidentiality, integrity, and availability by controlling traffic and stopping known...

<p>This episode covers antivirus and scanning as preventive and detective measures, helping you understand what these tools do well, where they fail, and how the CC exam expects you to reason about layered protection...