Study Guide
ISC2 ISSAP Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
ISC2 · Free, ad-free audio course
ISC2 ISSAP
A structured, audio-first learning route for ISC2 ISSAP, designed for focused review and practical understanding.
Companion Books
Study with the audio course, then reinforce it in print.
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Flashcards Book
ISC2 ISSAP Flashcards
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
PUT IT INTO PRACTICE
Practice ISSAP concepts
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
50 original questionsExplanation after every answerAchievements and sharing
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Complete Lesson Directory
Choose the exact subject you want to study.
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
86 lessons available
S01E01Transcript
Getting Started
Decode the ISSAP Exam Blueprint, Domain Weights, and Question Styles
Listen to Decode the ISSAP Exam Blueprint, Domain Weights, and Question Styles in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E02Transcript
Getting Started
Build a Spoken, Realistic Study Rhythm That Fits a Working Architect:
Listen to Build a Spoken, Realistic Study Rhythm That Fits a Working Architect: in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E03Transcript
Getting Started
Execute Exam Registration, Policies, and Time Management Without Surprises
Listen to Execute Exam Registration, Policies, and Time Management Without Surprises in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E04Transcript
Governance, Risk and Compliance Architecture
Identify Applicable Security Standards and Guidelines That Shape Architecture Decisions
Listen to Identify Applicable Security Standards and Guidelines That Shape Architecture Decisions in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E05Transcript
Governance, Risk and Compliance Architecture
Translate Legal and Regulatory Requirements Into Enforceable Architecture Constraints
Listen to Translate Legal and Regulatory Requirements Into Enforceable Architecture Constraints in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E06Transcript
Governance, Risk and Compliance Architecture
Design for Third-Party and Contractual Obligations Across Partners and Outsourcing
Listen to Design for Third-Party and Contractual Obligations Across Partners and Outsourcing in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E07Transcript
Governance, Risk and Compliance Architecture
Architect for Supply Chain Risk Without Slowing Delivery and Operations
Listen to Architect for Supply Chain Risk Without Slowing Delivery and Operations in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E08Transcript
Governance, Risk and Compliance Architecture
Apply Privacy Regulations and Sensitive Data Standards to Real System Designs
Listen to Apply Privacy Regulations and Sensitive Data Standards to Real System Designs in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E09Transcript
Governance, Risk and Compliance Architecture
Build Resilient Solutions That Preserve Security Under Failure and Disruption
Listen to Build Resilient Solutions That Preserve Security Under Failure and Disruption in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E10Transcript
Governance, Risk and Compliance Architecture
Identify Key Assets and Business Objectives That Drive GRC Architecture Priorities
Listen to Identify Key Assets and Business Objectives That Drive GRC Architecture Priorities in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E11Transcript
Governance, Risk and Compliance Architecture
Map Stakeholders to Security Outcomes Without Losing Accountability and Ownership
Listen to Map Stakeholders to Security Outcomes Without Losing Accountability and Ownership in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E12Transcript
Governance, Risk and Compliance Architecture
Design Monitoring and Reporting for Vulnerability Management and Audit Readiness
Listen to Design Monitoring and Reporting for Vulnerability Management and Audit Readiness in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E13Transcript
Governance, Risk and Compliance Architecture
Engineer Compliance Evidence Flows That Survive Audits and Incident Scrutiny
Listen to Engineer Compliance Evidence Flows That Survive Audits and Incident Scrutiny in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E14Transcript
Governance, Risk and Compliance Architecture
Design for Auditability, Segregation, Forensics, and High-Assurance Requirements
Listen to Design for Auditability, Segregation, Forensics, and High-Assurance Requirements in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E15Transcript
Governance, Risk and Compliance Architecture
Incorporate Risk Assessment Artifacts Into Architecture Choices and Tradeoffs
Listen to Incorporate Risk Assessment Artifacts Into Architecture Choices and Tradeoffs in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E16Transcript
Governance, Risk and Compliance Architecture
Advise Risk Treatment Options With Clear Rationale and Decision Traceability
Listen to Advise Risk Treatment Options With Clear Rationale and Decision Traceability in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E17Transcript
Security Architecture Models and Validation
Define Security Architecture Scope and Types for Enterprise and Cloud
Listen to Define Security Architecture Scope and Types for Enterprise and Cloud in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E18Transcript
Security Architecture Models and Validation
Choose Network and SOA Architecture Approaches That Match Threat Realities
Listen to Choose Network and SOA Architecture Approaches That Match Threat Realities in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E19Transcript
Security Architecture Models and Validation
Apply TOGAF and SABSA to Structure Security Architecture Work Products
Listen to Apply TOGAF and SABSA to Structure Security Architecture Work Products in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E20Transcript
Security Architecture Models and Validation
Use Reference Architectures and Blueprints Without Copying Hidden Assumptions
Listen to Use Reference Architectures and Blueprints Without Copying Hidden Assumptions in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E21Transcript
Security Architecture Models and Validation
Operationalize STRIDE Threat Modeling From Concept to Concrete Mitigations
Listen to Operationalize STRIDE Threat Modeling From Concept to Concrete Mitigations in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E22Transcript
Security Architecture Models and Validation
Apply CVSS and Threat Intelligence to Prioritize Architecture Risk Decisions
Listen to Apply CVSS and Threat Intelligence to Prioritize Architecture Risk Decisions in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E23Transcript
Security Architecture Models and Validation
Verify Design With Functional Acceptance Testing Without Missing Security Behaviors
Listen to Verify Design With Functional Acceptance Testing Without Missing Security Behaviors in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E24Transcript
Security Architecture Models and Validation
Validate Design With Regression Thinking When Systems and Dependencies Change
Listen to Validate Design With Regression Thinking When Systems and Dependencies Change in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E25Transcript
Security Architecture Models and Validation
Turn Threat Vectors, Impact, and Probability Into Testable Design Requirements
Listen to Turn Threat Vectors, Impact, and Probability Into Testable Design Requirements in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E26Transcript
Security Architecture Models and Validation
Identify Architecture Gaps Early and Document Them for Fast Remediation
Listen to Identify Architecture Gaps Early and Document Them for Fast Remediation in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E27Transcript
Security Architecture Models and Validation
Select Alternative Mitigations and Compensating Controls That Truly Reduce Risk
Listen to Select Alternative Mitigations and Compensating Controls That Truly Reduce Risk in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E28Transcript
Security Architecture Models and Validation
Run Tabletop Exercises to Validate Security Architecture Under Real Stress
Listen to Run Tabletop Exercises to Validate Security Architecture Under Real Stress in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E29Transcript
Security Architecture Models and Validation
Use Modeling and Simulation to Expose Security Failures Before Production
Listen to Use Modeling and Simulation to Expose Security Failures Before Production in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E30Transcript
Security Architecture Models and Validation
Perform Manual Function Reviews to Catch Design Flaws Automated Tools Miss
Listen to Perform Manual Function Reviews to Catch Design Flaws Automated Tools Miss in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E31Transcript
Security Architecture Models and Validation
Execute Peer Review Practices That Improve Architecture Quality Without Politics
Listen to Execute Peer Review Practices That Improve Architecture Quality Without Politics in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E32Transcript
Security Architecture Models and Validation
Choose Dynamic Analysis Approaches That Reveal Runtime Security Weaknesses
Listen to Choose Dynamic Analysis Approaches That Reveal Runtime Security Weaknesses in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E33Transcript
Security Architecture Models and Validation
Use Static Analysis Effectively Without Drowning in False Positives
Listen to Use Static Analysis Effectively Without Drowning in False Positives in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E34Transcript
Security Architecture Models and Validation
Apply Manual Code Review Techniques for High-Risk Components and Interfaces
Listen to Apply Manual Code Review Techniques for High-Risk Components and Interfaces in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E35Transcript
Security Architecture Models and Validation
Use Source Composition Analysis to Control Supply Chain and Dependency Risk
Listen to Use Source Composition Analysis to Control Supply Chain and Dependency Risk in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E36Transcript
Infrastructure and Application Security Architecture
Define Deployment Model Requirements Across On-Premises, Cloud, and Hybrid Systems
Listen to Define Deployment Model Requirements Across On-Premises, Cloud, and Hybrid Systems in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E37Transcript
Infrastructure and Application Security Architecture
Separate IT and Operational Technology Requirements Without Breaking Safety Goals
Listen to Separate IT and Operational Technology Requirements Without Breaking Safety Goals in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E38Transcript
Infrastructure and Application Security Architecture
Architect Physical Security Requirements, Perimeter Controls, Zoning, and Fire Suppression
Listen to Architect Physical Security Requirements, Perimeter Controls, Zoning, and Fire Suppression in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E39Transcript
Infrastructure and Application Security Architecture
Specify Infrastructure and System Monitoring Requirements for Detection and Response
Listen to Specify Infrastructure and System Monitoring Requirements for Detection and Response in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E40Transcript
Infrastructure and Application Security Architecture
Define Infrastructure and System Cryptography Requirements That Avoid Fragile Designs
Listen to Define Infrastructure and System Cryptography Requirements That Avoid Fragile Designs in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E41Transcript
Infrastructure and Application Security Architecture
Translate Application Security Needs Using Traceability and Architecture Documentation
Listen to Translate Application Security Needs Using Traceability and Architecture Documentation in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E42Transcript
Infrastructure and Application Security Architecture
Build Physical Security Control Sets Using Cameras, Doors, and Controllers
Listen to Build Physical Security Control Sets Using Cameras, Doors, and Controllers in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E43Transcript
Infrastructure and Application Security Architecture
Architect Platform Security Across Hardware, Firmware, OS, Virtual, and Container
Listen to Architect Platform Security Across Hardware, Firmware, OS, Virtual, and Container in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E44Transcript
Infrastructure and Application Security Architecture
Design Wired and Wireless Network Security Without Creating Hidden Trust Paths
Listen to Design Wired and Wireless Network Security Without Creating Hidden Trust Paths in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E45Transcript
Infrastructure and Application Security Architecture
Secure Public, Private, and Management Networks With Segmentation and Policy
Listen to Secure Public, Private, and Management Networks With Segmentation and Policy in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E46Transcript
Infrastructure and Application Security Architecture
Architect IoT and Management Plane Security Without Losing Operational Visibility
Listen to Architect IoT and Management Plane Security Without Losing Operational Visibility in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E47Transcript
Infrastructure and Application Security Architecture
Select Firewalls, Airgaps, and Software Defined Perimeters for Clear Boundaries
Listen to Select Firewalls, Airgaps, and Software Defined Perimeters for Clear Boundaries in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E48Transcript
Infrastructure and Application Security Architecture
Design VPN and IPsec Strategies That Preserve Identity, Integrity, and Scale
Listen to Design VPN and IPsec Strategies That Preserve Identity, Integrity, and Scale in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E49Transcript
Infrastructure and Application Security Architecture
Apply NAC, DNS, and NTP Protections to Prevent Control-Plane Attacks
Listen to Apply NAC, DNS, and NTP Protections to Prevent Control-Plane Attacks in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E50Transcript
Infrastructure and Application Security Architecture
Secure VoIP and Unified Communications Without Sacrificing Availability and Quality
Listen to Secure VoIP and Unified Communications Without Sacrificing Availability and Quality in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E51Transcript
Infrastructure and Application Security Architecture
Apply Web Application Firewalls Where They Help and Where They Fail
Listen to Apply Web Application Firewalls Where They Help and Where They Fail in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E52Transcript
Infrastructure and Application Security Architecture
Design Storage Security for DAS, SAN, NAS, Archives, and Removable Media
Listen to Design Storage Security for DAS, SAN, NAS, Archives, and Removable Media in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E53Transcript
Infrastructure and Application Security Architecture
Secure Data Repositories With Access Control, Encryption, Redaction, and Masking
Listen to Secure Data Repositories With Access Control, Encryption, Redaction, and Masking in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E54Transcript
Infrastructure and Application Security Architecture
Architect Cloud Security Across IaaS, PaaS, and SaaS Responsibility Boundaries
Listen to Architect Cloud Security Across IaaS, PaaS, and SaaS Responsibility Boundaries in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E55Transcript
Infrastructure and Application Security Architecture
Secure Industrial Control Systems and SCADA Without Breaking Safety Operations
Listen to Secure Industrial Control Systems and SCADA Without Breaking Safety Operations in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E56Transcript
Infrastructure and Application Security Architecture
Design Endpoint Security for BYOD, Mobile, EDR, and HIDS/HIPS
Listen to Design Endpoint Security for BYOD, Mobile, EDR, and HIDS/HIPS in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E57Transcript
Infrastructure and Application Security Architecture
Secure Shared Services Like Email and Communications With Practical Control Sets
Listen to Secure Shared Services Like Email and Communications With Practical Control Sets in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E58Transcript
Infrastructure and Application Security Architecture
Integrate Third Parties Using Federation, APIs, VPN, and SFTP Safely
Listen to Integrate Third Parties Using Federation, APIs, VPN, and SFTP Safely in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E59Transcript
Infrastructure and Application Security Architecture
Design Infrastructure Monitoring Architecture That Supports Fast Triage and Containment
Listen to Design Infrastructure Monitoring Architecture That Supports Fast Triage and Containment in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E60Transcript
Infrastructure and Application Security Architecture
Build Content Monitoring Using DLP Across Email, Web, Data, and Social Media
Listen to Build Content Monitoring Using DLP Across Email, Web, Data, and Social Media in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E61Transcript
Infrastructure and Application Security Architecture
Plan Out-of-Band Communications for Incident Response and BC/DR Operations
Listen to Plan Out-of-Band Communications for Incident Response and BC/DR Operations in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E62Transcript
Infrastructure and Application Security Architecture
Evaluate Control Applicability Across Clients, Proxies, and Application Service Components
Listen to Evaluate Control Applicability Across Clients, Proxies, and Application Service Components in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E63Transcript
Cryptographic Architecture
Determine Cryptographic Design Constraints, Lifecycle, Algorithms, and System Capabilities
Listen to Determine Cryptographic Design Constraints, Lifecycle, Algorithms, and System Capabilities in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E64Transcript
Cryptographic Architecture
Choose Cryptographic Implementations for Data In-Transit, In-Use, and At-Rest
Listen to Choose Cryptographic Implementations for Data In-Transit, In-Use, and At-Rest in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E65Transcript
Cryptographic Architecture
Plan Key Management Lifecycle From Generation Through Storage and Distribution
Listen to Plan Key Management Lifecycle From Generation Through Storage and Distribution in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E66Transcript
Identity and Access Management Architecture
Architect Identity Proofing and Verification Using Physical and Logical Methods
Listen to Architect Identity Proofing and Verification Using Physical and Logical Methods in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E67Transcript
Identity and Access Management Architecture
Assign Identifiers to Users, Services, Devices, and Components Without Collisions
Listen to Assign Identifiers to Users, Services, Devices, and Components Without Collisions in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E68Transcript
Identity and Access Management Architecture
Design Joiners-Movers-Leavers Provisioning and Deprovisioning That Prevents Orphan Access
Listen to Design Joiners-Movers-Leavers Provisioning and Deprovisioning That Prevents Orphan Access in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E69Transcript
Identity and Access Management Architecture
Select Identity Management Technologies That Support Scale, Recovery, and Governance
Listen to Select Identity Management Technologies That Support Scale, Recovery, and Governance in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E70Transcript
Identity and Access Management Architecture
Define Authentication Approaches, Single-Factor, MFA, and Risk-Based Elevation
Listen to Define Authentication Approaches, Single-Factor, MFA, and Risk-Based Elevation in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E71Transcript
Identity and Access Management Architecture
Apply SAML, RADIUS, Kerberos, and OAuth Where Each Fits Best
Listen to Apply SAML, RADIUS, Kerberos, and OAuth Where Each Fits Best in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E72Transcript
Identity and Access Management Architecture
Use LDAP and XACML Controls to Enforce Authentication and Access Policies
Listen to Use LDAP and XACML Controls to Enforce Authentication and Access Policies in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E73Transcript
Identity and Access Management Architecture
Define Trust Relationships for Federated and Stand-Alone Identity Architectures
Listen to Define Trust Relationships for Federated and Stand-Alone Identity Architectures in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E74Transcript
Identity and Access Management Architecture
Apply Authorization Principles, Least Privilege, SoD, and Interactive vs Non-Interactive
Listen to Apply Authorization Principles, Least Privilege, SoD, and Interactive vs Non-Interactive in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E75Transcript
Identity and Access Management Architecture
Choose Authorization Models for Physical, Logical, and Administrative Access Control
Listen to Choose Authorization Models for Physical, Logical, and Administrative Access Control in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E76Transcript
Identity and Access Management Architecture
Design Authorization Workflows, Issuance, Review, Revocation, Suspension, and Governance
Listen to Design Authorization Workflows, Issuance, Review, Revocation, Suspension, and Governance in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E77Transcript
Identity and Access Management Architecture
Map Roles, Rights, and Responsibilities to System, Application, and Data Access
Listen to Map Roles, Rights, and Responsibilities to System, Application, and Data Access in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E78Transcript
Identity and Access Management Architecture
Implement DRM and Group Strategies Without Creating Unmanageable Entitlement Sprawl
Listen to Implement DRM and Group Strategies Without Creating Unmanageable Entitlement Sprawl in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E79Transcript
Identity and Access Management Architecture
Manage Privileged Accounts Using PAM to Reduce Standing Administrative Risk
Listen to Manage Privileged Accounts Using PAM to Reduce Standing Administrative Risk in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E80Transcript
Identity and Access Management Architecture
Select Authorization Approaches: SSO, RBAC, ABAC, Rules, Tokens, Certificates
Listen to Select Authorization Approaches: SSO, RBAC, ABAC, Rules, Tokens, Certificates in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E81Transcript
Identity and Access Management Architecture
Determine Accounting and Forensic Requirements That Drive Audit Logging Architecture
Listen to Determine Accounting and Forensic Requirements That Drive Audit Logging Architecture in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E82Transcript
Identity and Access Management Architecture
Define Audit Events That Matter Without Flooding Storage and Analysts
Listen to Define Audit Events That Matter Without Flooding Storage and Analysts in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E83Transcript
Identity and Access Management Architecture
Establish Log Alerts and Notifications That Support Rapid Response and Investigation
Listen to Establish Log Alerts and Notifications That Support Rapid Response and Investigation in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E84Transcript
Identity and Access Management Architecture
Engineer Log Retention and Integrity Controls That Hold Up in Court
Listen to Engineer Log Retention and Integrity Controls That Hold Up in Court in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E85Transcript
Identity and Access Management Architecture
Build Log Analysis and Reporting That Connects IAM Events to Business Risk
Listen to Build Log Analysis and Reporting That Connects IAM Events to Business Risk in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
S01E86Transcript
Identity and Access Management Architecture
Align IAM Logging With Policies and Regulations Including PCI DSS and GDPR
Listen to Align IAM Logging With Policies and Regulations Including PCI DSS and GDPR in the ISC2 ISSAP audio course.
Transcript availableFebruary 22, 2026
No matching lessons
Try another term or clear one of the filters.
A Practical Study Routine
Listen, read, and review in the order that works for you.
Listen
Use the free audio course during a commute, walk, workout, or focused study session.
Read
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Review
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Magazine Features
Connect the course to current cybersecurity analysis.
Issue 38 · September 23, 2026Purple Team Statecraft: Turning Exercises into Actual ChangeRead the feature →
Issue 24 · June 17, 2026Spaceborne Security: Defending Satellites, Ground Stations, and the Links BetweenRead the feature →
Issue 16 · April 22, 2026Contact Lists and Chaos: The Human Reality of Incident CommandRead the feature →
Related Cyber Wiki
Continue with the concepts behind the course.
AI risk management
AI Risk Treatment Tracking
AI risk treatment tracking follows mitigation, transfer, avoidance, acceptance, or pursuit decisions from approval through implementation and validation.
AI security managementAI Security Metrics Governance
AI security metrics governance defines which measures support decisions, how they are calculated, who owns them, and how limitations and thresholds are communicated.
AI third-party riskAI Vendor Control Monitoring
AI vendor control monitoring evaluates whether a provider continues to meet security, privacy, resilience, transparency, and notification commitments after onboarding.
Security principleAccountability
Accountability makes people, roles, services, and organizations answerable for security decisions and actions by assigning ownership and preserving reliable evidence.
Agentic AI securityAgentic AI Authorization
Agentic AI authorization ensures every tool call and consequential action is permitted for the initiating identity, current context, resource, and purpose.
AI risk assessmentAlgorithmic Impact Assessment
An algorithmic impact assessment examines purpose, affected people, benefits, harms, data, rights, alternatives, controls, and residual risk before a consequential AI use proceeds.