Knowledge is Power
BARE METAL CYBERKnowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, and individual lessons.
ISC2 Certified in Cybersecurity (CC) Study Guide cover

Certification companion

ISC2 Certified in Cybersecurity (CC) Study Guide

Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.

Bare Metal CyberISC2 learning path
View on AmazonOpen the related course

Certification names and marks belong to their respective owners. Bare Metal Cyber study resources are independent educational materials and do not imply endorsement.

Companion learning set

Use the resources together.

Move between the free audio course, structured reading, and active recall instead of treating each resource as a separate product.

Flashcards BookISC2 Certified in Cybersecurity (CC) FlashcardsOpen companion →Free audio courseISC2 Certified in Cybersecurity (CC)Open Academy course →

Certification study plan

Use the audio course and companion books as one learning system.

Use the study guide to organize the course, annotate difficult concepts, and build a reference you can revisit.

Five-step cycle

  1. Plan the week

    Choose the lessons for the week, scan the matching book headings, and identify the concepts you expect to learn.

  2. Listen for structure

    Complete the assigned audio lessons and mark terms, examples, or decisions that need a second pass.

  3. Read for depth

    Use the study guide to clarify the lesson, annotate key ideas, and connect related objectives.

  4. Recall without prompts

    Use the flashcards or your own questions before looking at the answer. Separate strong topics from weak ones.

  5. Close the loop

    Open the linked Cyber Wiki articles, revisit missed lessons, and repeat difficult cards until you can explain the concept clearly.

The schedule is Bare Metal Cyber editorial guidance. Adjust the pace for your exam date, prior experience, and practice-test results.

Inside the book

Major subjects and chapter areas

What Security Is Trying to ProtectRisk, Threat, Vulnerability, and ControlLaw, Policy, Frameworks, and GovernanceEthics, Due Care, and Professional ConductGovernance, Risk, and ComplianceSecurity Roles, Leadership, and OversightPolicies, Standards, Procedures, and ExceptionsBusiness ContinuityDisaster RecoveryResilience, Redundancy, and Failure PlanningSecurity Awareness and Human RiskMetrics, KRIs, Dashboards, and Reports

Continue learning

Explore the related Cyber Wiki.

Direct and course-derived connections come from the existing Bare Metal Cyber catalog. Broader topic links are editorial recommendations, not publisher claims or official framework mappings.

Direct book connection

Maximum Tolerable Downtime

Maximum tolerable downtime is the longest disruption a business process can endure before consequences become unacceptable.

Open article →Direct book connection

Single Points of Failure

A single point of failure is a component, person, service, dependency, or process whose loss can stop a critical function because no effective alternative exists.

Open article →Direct book connection

Symmetric and Asymmetric Encryption

Symmetric encryption uses the same secret key for encryption and decryption, while asymmetric encryption uses a mathematically related public and private key pair.

Open article →Direct book connection

Authenticity

Authenticity provides confidence that an identity, message, device, document, or software artifact is genuine and comes from the claimed source.

Open article →Companion-course connection

Policies, Standards, and Procedures

Policies state organizational intent, standards define required conditions, and procedures explain how people perform specific work.

Open article →Companion-course connection

Business Continuity and Recovery

Business continuity and recovery prepare an organization to maintain essential functions, operate through disruption, and restore dependable services at an acceptable level.

Open article →Companion-course connection

Cloud Network Segmentation

Cloud network segmentation separates workloads and services into controlled communication zones to limit exposure and lateral movement.

Open article →Companion-course connection

Digital Signatures and Non-Repudiation

Digital signatures use asymmetric cryptography to support message integrity, signer authentication, and evidence that an action came from a particular key holder.

Open article →Companion-course connection

Encryption, Hashing, and Digital Certificates

Encryption protects confidentiality, hashing produces fixed-length representations for integrity and comparison, and certificates bind public keys to identities or services.

Open article →Companion-course connection

Social Engineering (T1684)

Social Engineering (T1684) is an Enterprise ATT&CK technique associated with Stealth. This Bare Metal Cyber profile explains the behavior in plain language and focuses on evidence, detection, defensive design, response, and safe learning.

Open article →Companion-course connection

Project Risk Statements

Project risk statements describe an uncertain event or condition, its cause or context, and the potential effect on one or more objectives.

Open article →Companion-course connection

Role-Based Database Access

Role-based database access assigns permissions to managed job or service roles rather than granting broad rights directly to individual accounts.

Open article →