Reduce Cyber Risk Podcast - Cyber Security Made Simple

Latest Episodes:

RCR 141: Mastering Logging, Monitoring, and AI in Cybersecurity (CISSP Domain 7) Jul 24, 2023

Show notes

Are you ready to level up your understanding of logging and monitoring in the world of cybersecurity? Join us, your host Sean Gerber, as we take a deep dive into CISSP domain seven, exploring the ins and outs of logging, monitoring, and how they play a crucial part in keeping your system protected. Listen closely as we unravel the challenges of managing vast amounts of data, deploying and disposing of resources, and utilizing cryptographic resources for physical security.
Discover the different types of logs - system, application, and security logs - and how they can be used to detect incidents, operational problems, and policy violations. We discuss the importance of accurate date and time stamps and the role logs play in forensics analysis, compliance, and troubleshooting. Moreover, we tackle the challenges of data overload, false positives, and evading detection.
In this episode, we also discuss the exciting role of Artificial Intelligence (AI) and Machine Learning (ML) in the security world, and how they can be used to enhance protection. Learn best practices when dealing with logging and monitoring, such as encryption, regular monitoring, and backups. By the end of this episode, you'll be well-equipped with knowledge on logging and monitoring that will not only help you pass the CISSP exam but also vastly improve your cybersecurity strategy.

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 140: CISSP Exam Questions (D6) Jul 20, 2023

Show notes

Ready to ace the CISSP exam? Join me in this episode as we explore domain six, focusing on security controls and assessments. You'll not only learn the primary objective of security control testing but also gain insights into various types of tests and the limitations of vulnerability scanners. Together, we'll dive into the nitty-gritty of security control testing, ensuring you're well-equipped to tackle the CISSP exam with confidence.
We'll go beyond just understanding the concepts - I'll provide examples and explanations for each question, so you truly grasp the material. From compliance-based security control tests to manual security control tests, we'll break down the benefits and limitations of each. We'll also discuss the crucial difference between black box security control tests and other types. By the end of this episode, you'll understand why security control testing should be an ongoing process and not just a one-time event in the system development lifecycle. So, let's get started and take that step closer to passing the CISSP exam!

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 139: Conduct security control testing (D6.2) Jul 17, 2023

Show notes

Ready to ace the CISSP exam and level up your cybersecurity knowledge? Together with my background as a former red teamer, we guide you through domain six - security assessments and testing, covering both military and corporate America perspectives. We'll discuss essential concepts such as vulnerability assessments, risk tolerance of companies, and the tools required to identify vulnerabilities.
Join us as we explore the different types of testing, including manual and automated testing, and explain the importance of following security methodologies during a security assessment. You'll learn about penetration testing as a form of surgical strike and its role in gaining long-term access to an organization. Additionally, we'll reveal the importance of securing AWS accounts and API connections to prevent data breaches, and how pen tests can help validate security controls and incident response processes.
Finally, discover the role of automated tools in meeting compliance requirements, like the American Disabilities Act. We'll also examine manual testing, code reviews, and the use of machine learning models and social engineering to manipulate individuals. With our valuable insights and practical examples, you'll be prepared to tackle the CISSP exam and enhance your cybersecurity skills. Don't miss out on this action-packed episode!

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 138: CISSP Exam Questions (D5) Jul 13, 2023

Show notes

Ready to conquer the CISSP exam and advance your cybersecurity career? Join me, Sean Gerber, as we break down identity and access management, exploring the primary benefits of single sign-on systems, session management, and multi-factor authentication. Plus, get insights on the differences between role-based access controls and other access controls, giving you the knowledge and tools to pass the CISSP exam the first time.
Not only will we discuss the importance of passing the CISSP for a successful career in cybersecurity, but we'll also share vital resources to support your exam preparation. Whether you're an experienced professional or just starting in the field, this episode is packed with valuable information to help you achieve CISSP certification and take your career to the next level. Don't miss out on this chance to gain expert guidance and confidence for your exam!
👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

#CISSP #CyberTraining #ExamPreparation #CISSPQuestions #Domain1 #Cybersecurity #Podcast #ShonGerber

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 137: Manage identification and authentication of people devices and services (D5.2) Jul 10, 2023

Show notes

Are you ready to up your cybersecurity game? Look no further, as I, Sean Gerber, take you on a deep-dive into the world of identity and access management. Together, we'll explore various authentication methods, such as passwords, tokens, biometrics, and multi-factor authentication, and analyze their strengths and vulnerabilities. We'll also tackle the all-important concept of credential creeping and discuss how to prevent unauthorized access to sensitive data.
But wait, there's more! Identity and access management isn't just about security; it's also about compliance. Join me as we examine the role of IDM in regulatory requirements like GDPR, HIPAA, CMMC, and Chinese Cyber Laws. I'll share expert tips on streamlining user management by creating and removing accounts to ensure the safety and security of your organization. Plus, we'll delve into the challenges of granting and denying access to resources based on privileges, helping you combat credential creeping effectively.
To wrap it all up, I'll reveal the best practices for identity and access management, including crafting clear and comprehensive policies, robust authentication and authorization frameworks, and privileged access management solutions. We won't stop there – I'll also discuss the significance of session and federated identity management, touching on aspects like user authentication, session tracking, session timeout, and session termination. So, don't miss this information-packed episode guaranteed to strengthen both your cybersecurity knowledge and CISSP exam preparation!

👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

#CISSP #CyberTraining #ExamPreparation #CISSPQuestions #Domain1 #Cybersecurity #Podcast #ShonGerber

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 136: CISSP Exam Questions (Domain 4) Jun 29, 2023

Show notes

Join Shon Gerber on the "CISSP Cyber Training Podcast" as he delves into Domain 4 of the CISSP exam, which focuses on Communications and Network Security. In this episode, Shon will cover some of the most challenging CISSP exam questions related to the OSI model, various TCP/IP layers, and protocols such as SYN, SYN/ACK, etc. He will explain the intricacies of each layer and how they work together to provide secure communication channels. Whether you are just starting to study for the CISSP exam or are a seasoned security professional, this episode is a must-listen. Shon will break down complex concepts into easy-to-understand terms and provide tips and tricks for passing the exam. Don't miss this informative and engaging episode of the "CISSP Cyber Training Podcast"!

👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

#CISSP #CyberTraining #ExamPreparation #CISSPQuestions #Domain1 #Cybersecurity #Podcast #ShonGerber

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 135: Implement Secure Communication Channels According to Design (D4.3) Jun 26, 2023

Show notes

In this episode of the CISSP Cyber Training Podcast, we explore Domain 4 of the CISSP exam - Implementing a Secure Channel. We delve into the intricacies of the OSI model and TCP/IP, as well as the four layers of the TCP/IP model, to provide a comprehensive understanding of how to establish and maintain secure communication channels in your network. We discuss the importance of encryption, authentication, and authorization in maintaining network security. Our expert guests share their insights and experiences on best practices for implementing secure channels, including practical examples and real-world scenarios. Whether you're a cybersecurity novice or a seasoned professional, this episode will provide you with valuable knowledge and skills to enhance your cybersecurity expertise. Join us on the CISSP Cyber Training Podcast and stay ahead of the curve in today's constantly evolving cybersecurity landscape.

👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

#CISSP #CyberTraining #ExamPreparation #CISSPQuestions #Domain1 #Cybersecurity #Podcast #ShonGerber

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 134: CISSP Exam Questions (Domain 3) Jun 22, 2023

Show notes

Join cybersecurity expert Shon Gerber on the CISSP Cyber Training Podcast as we explore Domain 3 of the CISSP exam, focused on security models. In this episode, we delve into the various security models, including the Bell-LaPadula, Biba, Clark-Wilson, and other models. Our expert guests share their experiences and insights on these models, their applications, strengths, and weaknesses, and how they are used in real-world scenarios. We also provide an in-depth review of the associated CISSP exam questions related to security models, giving you the knowledge and skills you need to succeed on test day. Whether you're a cybersecurity professional looking to enhance your knowledge or a student studying for the CISSP exam, this episode is a valuable resource. Don't miss out on this opportunity to gain a competitive edge in your cybersecurity career. Tune in to the CISSP Cyber Training Podcast with Shon Gerber now!

👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 133: Understanding the Fundamental Concepts of Security Models (D3.2) Jun 19, 2023

Show notes

Description: In this episode, we delve into the fundamental concepts of security models, a critical topic in the CISSP exam. Aspiring CISSP professionals and cybersecurity enthusiasts will gain valuable insights on Domain 3.2, covering key concepts, principles, and best practices related to security models. Join us as we explore various security models, including the Bell-LaPadula model, the Biba model, the Clark-Wilson model, and the Brewer-Nash model, among others. We'll discuss their unique features, strengths, limitations, and practical applications in securing information systems. Whether you're a CISSP candidate preparing for the exam or seeking to enhance your cybersecurity knowledge, this podcast provides comprehensive coverage of security models, supported by practical examples and exam tips. Don't miss this opportunity to expand your understanding of security models and ace the CISSP exam!

👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

#CISSP #CyberTraining #ExamPreparation #CISSPQuestions #Domain1 #Cybersecurity #Podcast #ShonGerber

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.

RCR 132: CISSP Exam Questions (Domain 2) Jun 15, 2023

Show notes

Do you struggle with understanding CISSP exam questions related to data ownership in Domain 2?

Tune in to our latest episode of the CISSP Cyber Training Podcast, where we discuss the most challenging CISSP exam questions outlined by Shon Gerber in relation to data ownership.

We cover the legal and regulatory requirements, establishing data ownership policies, and data ownership in the cloud.

Our experts provide insights and tips to help you understand the nuances of these questions, so you can confidently approach them on the exam.

Don't miss out on this opportunity to improve your chances of passing the CISSP exam. Listen now to the CISSP Cyber Training Podcast for valuable insights on Domain 2 of the CISSP Exam.

#CISSP #DataOwnership #CyberTraining #CyberSecurity #InformationSecurity #ShonGerber #ExamPrep

Podcast Link:

👉 LinkedIn: www.linkedin.com/in/shongerber

👉 Facebook: https://www.facebook.com/CyberRiskReduced/

👉 CISSPCyberTraining: https://www.cisspcybertraining.com/

Gain access to 30 FREE CISSP Exam Questions each and every month by going to FreeCISSPQuestions.com and sign-up to join the team for Free.