ISACA · Free, ad-free audio course
A structured, audio-first learning route for ISACA CDPSE, designed for focused review and practical understanding.
PUT IT INTO PRACTICE
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Companion Books
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
Flashcards Book
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
Complete Lesson Directory
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
70 lessons available
Getting Started
Listen to Decode what the CDPSE exam actually tests across real privacy engineering work in the ISACA CDPSE audio course.
Getting Started
Listen to Build a spoken 30-day CDPSE study plan that tracks every tested objective in the ISACA CDPSE audio course.
Getting Started
Listen to Exam Acronyms: High-Yield Audio Reference for Fast CDPSE Recall in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Recognize personal information precisely across systems, contexts, and data types in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Apply privacy principles like Privacy by Design, consent, and transparency end-to-end (Domain 1A-2 Privacy Principles) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Interpret privacy laws and regulations as concrete, testable engineering requirements (Domain 1A-3 Privacy Laws and Regulations) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Handle cross-border and sector rules without losing control of privacy obligations (Domain 1A-3 Privacy Laws and Regulations) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Build privacy documentation that survives audits, incidents, and organizational change (Domain 1A-4 Privacy Documentation) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Define privacy roles, culture, and responsibilities so accountability is real (Domain 1B-1 Organizational Culture, Structure, and Responsibilities) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Engineer vendor and supply chain privacy controls that hold up under pressure (Domain 1B-2 Vendor and Supply Chain Management) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Run privacy incident management with clear triggers, evidence, and remediation flow (Domain 1B-3 Incident Management) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Deliver data subject rights, requests, and notification with speed and correctness (Domain 1B-4 Data Subject Rights, Requests, and Notification) in the ISACA CDPSE audio course.
Domain 1 · Privacy Governance
Listen to Spaced Retrieval Review: Rapid recall for Domain 1 governance and operations essentials (Domain 1A-1 to 1B-4) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Build a privacy risk management process that stays consistent and repeatable (Domain 2A-1 Risk Management Process and Policies) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Perform privacy-focused assessments like PIAs with practical scope and outputs (Domain 2A-2 Privacy-Focused Assessment) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Make privacy training and awareness stick in real teams and workflows (Domain 2A-3 Privacy Training and Awareness) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Identify privacy threats and vulnerabilities before they become operational failures (Domain 2A-4 Threats and Vulnerabilities) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Choose risk responses that balance privacy, delivery, and business reality (Domain 2A-5 Risk Response) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Use privacy frameworks to structure controls, evidence, and governance decisions (Domain 2B-1 Privacy Frameworks) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Produce evidence and artifacts that prove privacy controls actually work (Domain 2B-2 Evidence and Artifacts) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Build a data inventory you can trust and keep it current (Domain 2C-1 Data Inventory) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Map data flows end-to-end so privacy risk is visible, not guessed (Domain 2C-2 Data Flow) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Classify data properly to drive the right privacy safeguards (Domain 2C-3 Data Classification) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Use data minimization to reduce exposure without breaking the business (Domain 2C-4 Data Minimization) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Define retention and disposal that is enforceable across systems and vendors (Domain 2C-5 Retention and Disposal) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Build consent management that is measurable, reversible, and reliable (Domain 2C-6 Consent Management) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Apply purpose limitation so data use stays aligned with promises and approvals (Domain 2C-7 Purpose Limitation) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Manage privacy in third-party data sharing with clear boundaries and controls (Domain 2C-8 Data Sharing and Third Parties) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Protect privacy in monitoring, logging, and observability without losing visibility (Domain 2C-9 Monitoring and Logging) in the ISACA CDPSE audio course.
Domain 2 · Privacy Risk Management
Listen to Spaced Retrieval Review: Data inventory, flows, classification, minimization, and retention (Domain 2C-1 to 2C-9) in the ISACA CDPSE audio course.
Domain 3 · Data Lifecycle Management
Listen to Spaced Retrieval Review: Data life cycle management from collection to destruction (Domain 3A-1 to 3B-4) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Choose infrastructure and platform approaches for privacy across legacy and cloud (Domain 4A-1 Infrastructure and Platform Technology) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Secure devices and endpoints so personal information exposure stays contained (Domain 4A-2 Devices and Endpoints) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Design connectivity choices that reduce privacy risk across networks and services (Domain 4A-3 Connectivity) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Embed privacy into the secure development life cycle without slowing delivery (Domain 4A-4 Secure Development Life Cycle) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Engineer APIs and cloud-native services to prevent silent privacy failure modes (Domain 4A-5 APIs and Cloud-Native Services) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Operationalize asset management so data assets and owners are never ambiguous (Domain 4B-1 Asset Management) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Implement identity and access management that enforces least privilege for privacy (Domain 4B-2 Identity and Access Management) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Maintain patching and hardening discipline that protects privacy at scale (Domain 4B-3 Patch Management and Hardening) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Select transport protocols that protect privacy across modern and legacy paths (Domain 4B-4 Communication and Transport Protocols) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Use encryption and hashing correctly so privacy goals match cryptographic reality (Domain 4B-5 Encryption and Hashing) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Build monitoring and logging that supports privacy without creating new exposure (Domain 4B-6 Monitoring and Logging) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Implement consent tagging that travels with data and survives system boundaries (Domain 4C-1 Consent Tagging) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Govern tracking technologies and cookie management with clear, enforceable rules (Domain 4C-2 Tracking Technologies) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Apply anonymization and pseudonymization with honest limits and verification (Domain 4C-3 Anonymization and Pseudonymization) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Choose privacy enhancing technologies that match threats, data, and architecture (Domain 4C-4 Privacy Enhancing Technologies) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Address AI and ML privacy considerations before models ship to production (Domain 4C-5 AI/Machine Learning (ML) Considerations) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Detect AI and ML privacy pitfalls like inference, drift, and overcollection risks (Domain 4C-5 AI/Machine Learning (ML) Considerations) in the ISACA CDPSE audio course.
Domain 4 · Privacy Engineering
Listen to Spaced Retrieval Review: Privacy engineering decisions across stacks, controls, and data (Domain 4A-1 to 4C-5) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Identify internal and external requirements that shape every privacy program decision (Task 1) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Review programs for legal alignment, best practices, and data subject expectations (Task 2) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Advise on data life cycle policies so data governance reflects privacy reality (Task 3) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Design and evaluate technical and operational controls for classification and life cycle (Task 4) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Perform PIAs and privacy-focused assessments without missing real-world impacts (Task 5) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Integrate privacy principles into procedures and operational manuals people follow (Task 6) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Collaborate to ensure Privacy by Design is applied through build and rollout (Task 7) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Identify and assess privacy threats and vulnerabilities with repeatable rigor (Task 8) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Evaluate vendor contracts, SLAs, and practices, then monitor for compliance evidence (Task 9) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Participate in incident management to address privacy impacts and drive remediation (Task 10) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Collaborate with stakeholders to resolve privacy compliance gaps and risk responses (Task 11) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Evaluate information architecture choices that enable privacy by design outcomes (Task 12) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Track regulatory change, emerging threats, and PETs so the program stays current (Task 13) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Keep personal information inventory and dataflows current with durable processes (Task 14) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Advise on personal information classification so risk and controls stay consistent (Task 15) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Build metrics that report privacy program performance in language leaders trust (Task 16) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Advocate for privacy maturity improvements aligned to organizational objectives (Task 17) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Create educational content and training that builds a privacy-aware culture (Task 18) in the ISACA CDPSE audio course.
Applied Privacy Practice
Listen to Promote accountability, fairness, and transparency across the full data life cycle (Task 19) in the ISACA CDPSE audio course.
Exam Strategy and Review
Listen to Exam-Day Tactics: A calm mental model for triage, time, and confidence (Domains 1–4) in the ISACA CDPSE audio course.
Exam Strategy and Review
Listen to Essential Terms: Plain-Language Glossary for Fast CDPSE Recall (Domains 1–4) in the ISACA CDPSE audio course.
Try another term or clear one of the filters.
A Practical Study Routine
Use the free audio course during a commute, walk, workout, or focused study session.
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Magazine Features
Related Cyber Wiki
AI bias and fairness assessment evaluates how data, labels, objectives, design choices, and deployment conditions can create uneven errors or harms across groups.
Third-party AI riskAI procurement and contract controls convert governance, security, privacy, performance, audit, incident, and exit requirements into enforceable supplier obligations.
AI transparencyAI transparency notices tell people when AI is used, what it does, what information it relies on, important limitations, and how to seek review or correction.
AI third-party riskAI vendor change notification requires providers to disclose material changes that could alter risk, performance, data handling, compliance, or system behavior.
API securityAPI-based data ingestion security validates the source, identity, authorization, format, rate, and integrity of data accepted through programmatic interfaces.
Privacy engineeringAnonymization and de-identification reduce the ability to associate released or shared data with a specific person, while accounting for linkage and re-identification risk.
