ISACA · Free, ad-free audio course
A structured, audio-first learning route for ISACA CCOA, designed for focused review and practical understanding.
PUT IT INTO PRACTICE
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
70 lessons available
Getting Started and Review
Listen to CCOA Exam Orientation: Format, Scoring, Policies, and Spoken Study Plan (Task 19) in the ISACA CCOA audio course.
Getting Started and Review
Listen to Map the 21 Supporting Tasks Into Your Everyday SOC Workflow (Task 4) in the ISACA CCOA audio course.
Getting Started and Review
Listen to Exam Acronyms: High-Yield Audio Reference for Fast Recognition (Task 5) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Build Cloud Networking Intuition for Security: Virtual Networks, Routing, and DNS (Task 5) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Strengthen Computer Networking Fundamentals: Packets, Sessions, and Trust Boundaries (Task 5) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Decode Devices, Ports, and Protocols Quickly Like a Threat Hunter (Task 5) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Secure Network Access Paths: VPNs, NAC, Identity, and Remote Entry (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Use Network Tools Confidently: Testing Reachability, Name Resolution, and Paths (Task 10) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Master Network Technology Concepts: Wireless, SDN, WAN, and Virtualization (Task 5) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Apply Segmentation With Purpose to Reduce Blast Radius and Exposure (Task 4) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Understand Databases for Analysts: Data Models, Queries, and Audit Trails (Task 10) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Command Line Fundamentals: Navigate Systems, Inspect Processes, and Read Logs (Task 10) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Command Line for Triage: Fast Evidence Collection Without Breaking Systems (Task 10) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Containerization and Virtualization Demystified: Isolation, Images, and Escape Risks (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Make Middleware Make Sense: Queues, App Servers, APIs, and Hidden Trust (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Operating Systems Essentials: Permissions, Services, Memory, and Persistence Paths (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to API Basics for Security Analysts: Requests, Authentication, and Common Failures (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Harden Automated Deployment Thinking: CI/CD Risks, Secrets, and Supply Chains (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Cloud Applications Explained: Shared Responsibility, Identity Boundaries, and Visibility Gaps (Task 2) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Scripting and Coding for Analysts: Read, Tweak, and Automate Repeatable Checks (Task 6) in the ISACA CCOA audio course.
Domain 1 · Technology Essentials
Listen to Spaced Retrieval Review: Technology Essentials Across Networks, Systems, and Applications (Task 18) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Navigate Compliance Realities: Regulations, Controls Evidence, and Audit-Ready Operations (Task 21) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Define Cybersecurity Objectives That Truly Support Business Outcomes (Task 19) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Governance in Practice: Decision Rights, Policy Hierarchies, and Accountability (Task 21) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Risk Management Foundations: Identify, Assess, Treat, and Monitor Risk (Task 4) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Risk Management Deep Dive: Appetite, Registers, Exceptions, and Risk Communication (Task 4) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Clarify Roles and Responsibilities: SOC, IT, Legal, and Business Alignment (Task 20) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Use Cybersecurity Models to Think Clearly: Defense Layers and Zero Trust (Task 4) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Spot Application Risk Early: Insecure Design, Misconfigurations, and Input Abuse (Task 2) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Control Cloud Technology Risk: Identity Mistakes, Misconfigurations, and Shared Duties (Task 2) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Reduce Data Risk: Classification, Encryption, Retention, and Exfiltration Signals (Task 4) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Manage Network Risk: Exposure, Lateral Movement Paths, and Resilience Weaknesses (Task 2) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Tackle Supply Chain Risk: Vendors, Dependencies, and Software Integrity Validation (Task 17) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Contain System and Endpoint Risk: Patching, Hardening, and EDR Realities (Task 2) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Understand Web Application Risk: OWASP Patterns and Real-World Attack Paths (Task 2) in the ISACA CCOA audio course.
Domain 2 · Cybersecurity Principles and Risks
Listen to Spaced Retrieval Review: Cybersecurity Principles and Risk in One Narrative (Task 18) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Trace Attack Vectors From First Contact to Initial Foothold (Task 1) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Profile Threat Actors and Agents: Motivation, Capability, and Likely Next Moves (Task 1) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Evaluate Threat Intelligence Sources: Credibility, Context, Timeliness, and Actionability (Task 3) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Differentiate Attack Types: Ransomware, BEC, DDoS, and Data Theft (Task 1) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Walk Through Cyber Attack Stages: Recon, Exploit, Persist, and Exfiltrate (Task 1) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Grasp Exploit Techniques: Privilege Escalation, Lateral Movement, and Living Off Land (Task 1) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Penetration Testing Explained for Defenders: Reading Results and Closing Gaps (Task 2) in the ISACA CCOA audio course.
Domain 3 · Adversarial Tactics, Techniques and Procedures
Listen to Spaced Retrieval Review: Adversary Tactics, Techniques, and Procedures Rapid Recall (Task 18) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Data Analytics for Detection: Baselines, Outliers, Correlation, and Meaningful Signals (Task 6) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Build Detection Use Cases That Map to Real Adversary Behavior (Task 6) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Tune Detection Use Cases: Reduce Noise Without Missing True Positives (Task 6) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Recognize Indicators of Compromise and or Attack With High Confidence (Task 7) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Master Logs and Alerts: Sources, Normalization, Context, and Alert Fatigue (Task 7) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Logs and Alerts Triage: Prioritization, Enrichment, and Next-Best Questions (Task 8) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Compare Monitoring Tools and Technologies: SIEM, EDR, NDR, SOAR, and IDS (Task 7) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Incident Containment Choices: Isolate, Block, Disable, or Deceive Safely (Task 13) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Incident Handling End to End: Classification, Escalation, Notification, and Handoffs (Task 9) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Forensic Analysis Fundamentals: Preservation, Collection, Integrity, and Chain of Custody (Task 14) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Forensic Analysis in Practice: Timelines, Artifacts, and Proving What Happened (Task 14) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Malware Analysis Essentials: Static Clues, Behavioral Signals, and Scope Estimation (Task 10) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Network Traffic Analysis: Flows, Sessions, and Finding the Needle Fast (Task 10) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Packet Analysis Deep Listening: Decode Protocols and Reconstruct Conversations (Task 10) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Threat Analysis Synthesis: Hypotheses, Root Cause, and Adversary Objectives (Task 15) in the ISACA CCOA audio course.
Domain 4 · Incident Detection and Response
Listen to Spaced Retrieval Review: Detection and Response From Signal to Lessons Learned (Task 18) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Contingency Planning That Works: Backups, RTO RPO, and Recovery Priorities (Task 4) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Choose Controls and Techniques Wisely: Prevent, Detect, Correct, and Deter (Task 4) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Identity and Access Management Mastery: Authentication, Authorization, and Least Privilege (Task 4) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Apply Industry Best Practices and Frameworks Without Overcomplicating Operations (Task 21) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Vulnerability Assessment Basics: Scopes, Methods, Evidence, and Interpreting Findings (Task 2) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Vulnerability Identification Skills: CVE Context, Validation Steps, and False Positives (Task 2) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Vulnerability Remediation Strategies: Patch, Mitigate, Accept, or Compensate (Task 2) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Vulnerability Tracking Discipline: Ownership, SLAs, Verification, and Closure Proof (Task 18) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Essential Terms: Plain-Language Glossary for Fast Recall Under Pressure (Task 5) in the ISACA CCOA audio course.
Domain 5 · Securing Assets
Listen to Exam-Day Tactics: Calm Mental Models for Confident Incident Prioritization (Task 12) in the ISACA CCOA audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Cyber Wiki
AI audit analytics applies reproducible queries, statistics, visualizations, and anomaly detection to evaluate populations and focus testing without replacing professional judgment.
AI auditAI audit hallucination controls prevent unsupported generated statements from being treated as evidence, criteria, citations, calculations, or conclusions.
AI assuranceAI evidence chain of custody records who collected, transferred, accessed, transformed, stored, and analyzed evidence from an AI system or incident.
AI governanceAI governance roles assign decision rights and obligations across executives, business owners, developers, data stewards, security, privacy, legal, risk, and users.
AI transparencyAI transparency notices tell people when AI is used, what it does, what information it relies on, important limitations, and how to seek review or correction.
AI third-party riskAI vendor control monitoring evaluates whether a provider continues to meet security, privacy, resilience, transparency, and notification commitments after onboarding.
