Knowledge is Power
BARE METAL CYBERKnowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, and individual lessons.

ISACA · Free, ad-free audio course

ISACA CRISC

A structured, audio-first learning route for ISACA CRISC, designed for focused review and practical understanding.

Listen to the complete course Browse 93 lessons

Hear the course trailer →

Every Bare Metal Cyber audio course is free and 100% ad-free.

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

93 lessons available

S01E02Transcript

Getting Started and Comprehensive Review

Understanding ISACA and Key Resources for CRISC Exam Preparation

In this episode, you'll get to know ISACA—the organization behind CRISC—and the most valuable resources they provide to help you prepare. We cover the ISACA exam guide, official review manuals, practice questions, and tools that align with the exam domains.…

Transcript availableJuly 5, 2025
→
S01E13Transcript

Domain 1 · Governance

Organizational Culture

Listen to Organizational Culture in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E14Transcript

Domain 1 · Governance

Policies and Standards

Listen to Policies and Standards in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E15Transcript

Domain 1 · Governance

Business Processes

Listen to Business Processes in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E16Transcript

Domain 1 · Governance

Organizational Assets

Listen to Organizational Assets in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E18Transcript

Domain 1 · Governance

Three Lines of Defense Model

Listen to Three Lines of Defense Model in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E29Transcript

Domain 2 · IT Risk Assessment

Risk Scenario Development

Listen to Risk Scenario Development in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E34Transcript

Domain 2 · IT Risk Assessment

Inherent Risk vs. Residual Risk

Listen to Inherent Risk vs. Residual Risk in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E39Transcript

Domain 3 · Risk Response and Reporting

Assigning Risk and Control Ownership

Listen to Assigning Risk and Control Ownership in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E42Transcript

Domain 3 · Risk Response and Reporting

Issue, Finding, and Exception Management

Listen to Issue, Finding, and Exception Management in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E43Transcript

Domain 3 · Risk Response and Reporting

Managing Emerging Risks

Listen to Managing Emerging Risks in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E44Transcript

Domain 3 · Risk Response and Reporting

Control Types, Standards, and Frameworks

Listen to Control Types, Standards, and Frameworks in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E45Transcript

Domain 3 · Risk Response and Reporting

Control Design, Selection, and Analysis

Listen to Control Design, Selection, and Analysis in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E46Transcript

Domain 3 · Risk Response and Reporting

Control Implementation Best Practices

Listen to Control Implementation Best Practices in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E57Transcript

Domain 4 · Information Technology and Security

Enterprise Architecture Principles

Listen to Enterprise Architecture Principles in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E60Transcript

Domain 4 · Information Technology and Security

Project Management in the IT Environment

Listen to Project Management in the IT Environment in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E61Transcript

Domain 4 · Information Technology and Security

Disaster Recovery Management (DRM)

Listen to Disaster Recovery Management (DRM) in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E62Transcript

Domain 4 · Information Technology and Security

Data Lifecycle Management Principles

Listen to Data Lifecycle Management Principles in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E64Transcript

Domain 4 · Information Technology and Security

Emerging Technologies and Associated Risks

Listen to Emerging Technologies and Associated Risks in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E66Transcript

Domain 4 · Information Technology and Security

Information Security Awareness Training

Listen to Information Security Awareness Training in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→
S01E68Transcript

Domain 4 · Information Technology and Security

Data Privacy and Protection Principles

Listen to Data Privacy and Protection Principles in the ISACA CRISC audio course.

Transcript availableJuly 5, 2025
→

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.

Related Cyber Wiki

Continue with the concepts behind the course.

AI assurance

AI Audit Finding Follow-Up

AI audit finding follow-up verifies that corrective actions address the root cause, operate as intended, and reduce the stated risk before a finding is closed.

AI assurance

AI Control Design Effectiveness

AI control design effectiveness asks whether a control, as documented and configured, is capable of preventing, detecting, or correcting the risk it was selected to address.

AI assurance

AI Control Operating Effectiveness

AI control operating effectiveness evaluates whether an appropriately designed control performed consistently, by the right people or automation, throughout the period under review.

AI risk management

AI Risk Appetite Statement

An AI risk appetite statement describes the types and amount of AI-related risk an organization is willing to pursue or retain in support of its objectives.

AI risk management

AI Risk Register Integration

AI risk register integration records AI risks within the enterprise risk structure rather than isolating them in project-only documents.

AI risk management

AI Risk Scenario Analysis

AI risk scenario analysis describes a plausible chain from threat, vulnerability, error, misuse, or change through affected assets, stakeholders, and consequences.