Knowledge is Power
BARE METAL CYBERKnowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, individual lessons, and BMC Cyber Challenge activities.

ISC2 · Free, ad-free audio course

ISC2 Certified in Cybersecurity (CC)

A plain-language starting point for learners building the core knowledge expected in entry-level cybersecurity work.

Listen to the current course Open the earlier course archive Browse 123 lessons

Hear the course trailer →

Every Bare Metal Cyber audio course is free and 100% ad-free.

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

PUT IT INTO PRACTICE

Practice CC concepts

Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.

50 original questionsExplanation after every answerAchievements and sharing
Open Certified in Cybersecurity (CC) PracticeSee Challenge achievements

Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.

Certification practice in the BMC Cyber Challenge

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

123 lessons available

Season 1 · Current editionCurrent course 59lessons
Season 1 · Earlier editionEarlier course archive 64lessons

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.

Related Magazine Features

Connect the course to current cybersecurity analysis.

Cover art for Real-World Recovery: When “Return to Normal” Is the Wrong Goal
Issue 51 · December 23, 2026Real-World Recovery: When “Return to Normal” Is the Wrong GoalRead the feature →
Cover art for Culture of Disclosure: From “Don’t Tell Anyone” to “Report Early, Fix Faster”
Issue 50 · December 16, 2026Culture of Disclosure: From “Don’t Tell Anyone” to “Report Early, Fix Faster”Read the feature →
Cover art for M&A Malware: Security Debt Hidden Inside Acquisitions
Issue 45 · November 11, 2026M&A Malware: Security Debt Hidden Inside AcquisitionsRead the feature →

Related Cyber Wiki

Continue with the concepts behind the course.

AI policy

AI Acceptable Use Policy

An AI acceptable use policy defines approved, restricted, and prohibited uses of AI services, models, data, accounts, and generated content.

AI change assurance

AI Change Evidence Package

An AI change evidence package assembles the artifacts needed to understand, approve, reproduce, and later audit a model, data, prompt, configuration, or integration change.

AI data security

AI Data Lifecycle Security

AI data lifecycle security protects information during collection, labeling, storage, use, sharing, retention, and deletion.

AI resilience

AI Deactivation and Contingency Controls

AI deactivation and contingency controls let an organization pause, limit, localize, roll back, or replace an AI capability when risk exceeds tolerance.

AI operational resilience

AI Operational Readiness Review

An AI operational readiness review verifies that ownership, support, monitoring, incident response, continuity, capacity, user guidance, and rollback are ready before production use.

AI risk management

AI Risk Tolerance Thresholds

AI risk tolerance thresholds translate risk appetite into measurable limits for performance, safety, privacy, bias, security, availability, cost, or human-impact indicators.