Study Guide
ISC2 ISSMP Study Guide
Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.
ISC2 · Free, ad-free audio course
ISC2 ISSMP
A structured, audio-first learning route for ISC2 ISSMP, designed for focused review and practical understanding.
Companion Books
Study with the audio course, then reinforce it in print.
The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.
Flashcards Book
ISC2 ISSMP Flashcards
Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.
PUT IT INTO PRACTICE
Practice ISSMP concepts
Try 50 original BMC questions, review every explanation, and return to the lessons behind the answer. No login is required. Earn Challenge achievements and share your progress as you go.
50 original questionsExplanation after every answerAchievements and sharing
Independent BMC learning practice—not official exam items, a full mock exam, or an exam-readiness score.
Complete Lesson Directory
Choose the exact subject you want to study.
Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.
119 lessons available
S01E01Transcript
Getting Started
Decode the ISSMP Blueprint, Domain Weights, and Realistic Time-Management Tactics
Listen to Decode the ISSMP Blueprint, Domain Weights, and Realistic Time-Management Tactics in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E02Transcript
Getting Started
Build a Spoken Study Plan That Tracks Every ISSMP Objective Precisely
Listen to Build a Spoken Study Plan That Tracks Every ISSMP Objective Precisely in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E03Transcript
Getting Started
Master Exam Policies, Question Mechanics, and Confident Elimination Techniques
Listen to Master Exam Policies, Question Mechanics, and Confident Elimination Techniques in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E04Transcript
Leadership and Security Program Management
Establish Security’s Role in Culture, Vision, Mission, and Daily Decisions
Listen to Establish Security’s Role in Culture, Vision, Mission, and Daily Decisions in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E05Transcript
Leadership and Security Program Management
Define the Information Security Program Vision, Mission, and Success Measures
Listen to Define the Information Security Program Vision, Mission, and Success Measures in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E06Transcript
Leadership and Security Program Management
Align Security With Organizational Goals, Objectives, and Stated Values
Listen to Align Security With Organizational Goals, Objectives, and Stated Values in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E07Transcript
Leadership and Security Program Management
Fit Security Into Enterprise Processes Without Becoming the “Department of No”
Listen to Fit Security Into Enterprise Processes Without Becoming the “Department of No” in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E08Transcript
Leadership and Security Program Management
Explain How Organizational Culture Shapes Security Behavior and Outcomes
Listen to Explain How Organizational Culture Shapes Security Behavior and Outcomes in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E09Transcript
Leadership and Security Program Management
Navigate Governance Structures and Place Security Authority in Context
Listen to Navigate Governance Structures and Place Security Authority in Context in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E10Transcript
Leadership and Security Program Management
Verify Key Stakeholder Roles and Responsibilities Without Guesswork
Listen to Verify Key Stakeholder Roles and Responsibilities Without Guesswork in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E11Transcript
Leadership and Security Program Management
Validate Sources and Boundaries of Authorization for Security Decisions
Listen to Validate Sources and Boundaries of Authorization for Security Decisions in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E12Transcript
Leadership and Security Program Management
Advocate for Security Initiatives and Win Durable Executive Support
Listen to Advocate for Security Initiatives and Win Durable Executive Support in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E13Transcript
Leadership and Security Program Management
Identify Security Requirements Driven by Organizational Initiatives and Change
Listen to Identify Security Requirements Driven by Organizational Initiatives and Change in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E14Transcript
Leadership and Security Program Management
Evaluate Capability and Capacity to Execute Security Strategies Realistically
Listen to Evaluate Capability and Capacity to Execute Security Strategies Realistically in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E15Transcript
Leadership and Security Program Management
Prescribe Security Architecture Direction That Enables Strategy Execution
Listen to Prescribe Security Architecture Direction That Enables Strategy Execution in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E16Transcript
Leadership and Security Program Management
Manage Implementation of Security Strategies Across People, Process, Technology
Listen to Manage Implementation of Security Strategies Across People, Process, Technology in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E17Transcript
Leadership and Security Program Management
Review and Maintain Security Strategies as Risks and Threats Evolve
Listen to Review and Maintain Security Strategies as Risks and Threats Evolve in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E18Transcript
Leadership and Security Program Management
Determine Applicable External Standards, Laws, and Regulatory Obligations
Listen to Determine Applicable External Standards, Laws, and Regulatory Obligations in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E19Transcript
Leadership and Security Program Management
Determine Data Classification and Protection Requirements That Hold Up
Listen to Determine Data Classification and Protection Requirements That Hold Up in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E20Transcript
Leadership and Security Program Management
Establish Internal Policies That Are Clear, Enforceable, and Auditable
Listen to Establish Internal Policies That Are Clear, Enforceable, and Auditable in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E21Transcript
Leadership and Security Program Management
Advocate for Policy Adoption and Secure Organization-Wide Commitment
Listen to Advocate for Policy Adoption and Secure Organization-Wide Commitment in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E22Transcript
Leadership and Security Program Management
Develop Procedures, Standards, Guidelines, and Baselines That Operate Together
Listen to Develop Procedures, Standards, Guidelines, and Baselines That Operate Together in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E23Transcript
Leadership and Security Program Management
Evaluate Service Management Agreements for Risk, Cost, and Accountability
Listen to Evaluate Service Management Agreements for Risk, Cost, and Accountability in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E24Transcript
Leadership and Security Program Management
Govern Managed Services and Cloud Services With Security Built In
Listen to Govern Managed Services and Cloud Services With Security Built In in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E25Transcript
Leadership and Security Program Management
Manage Security Impact of Mergers, Acquisitions, Outsourcing, and Reorgs
Listen to Manage Security Impact of Mergers, Acquisitions, Outsourcing, and Reorgs in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E26Transcript
Leadership and Security Program Management
Embed Regulatory Compliance Requirements Into Contracts and Service Agreements
Listen to Embed Regulatory Compliance Requirements Into Contracts and Service Agreements in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E27Transcript
Leadership and Security Program Management
Monitor and Enforce Contractual Security Commitments Without Creating Drag
Listen to Monitor and Enforce Contractual Security Commitments Without Creating Drag in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E28Transcript
Leadership and Security Program Management
Promote Security Programs to Stakeholders Using Their Language and Incentives
Listen to Promote Security Programs to Stakeholders Using Their Language and Incentives in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E29Transcript
Leadership and Security Program Management
Identify Training Needs and Implement Programs by Role and Target Segment
Listen to Identify Training Needs and Implement Programs by Role and Target Segment in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E30Transcript
Leadership and Security Program Management
Monitor, Evaluate, and Report Training Effectiveness With Meaningful Evidence
Listen to Monitor, Evaluate, and Report Training Effectiveness With Meaningful Evidence in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E31Transcript
Leadership and Security Program Management
Identify KPI and KRI Metrics That Reflect Security Performance and Exposure
Listen to Identify KPI and KRI Metrics That Reflect Security Performance and Exposure in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E32Transcript
Leadership and Security Program Management
Tie Security Metrics to Risk Posture and What Leadership Actually Cares About
Listen to Tie Security Metrics to Risk Posture and What Leadership Actually Cares About in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E33Transcript
Leadership and Security Program Management
Use Metrics to Drive Security Program and Operations Improvements That Last
Listen to Use Metrics to Drive Security Program and Operations Improvements That Last in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E34Transcript
Lifecycle, Resources and Security Operations
Prepare and Secure the Annual Security Budget Under Competing Priorities
Listen to Prepare and Secure the Annual Security Budget Under Competing Priorities in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E35Transcript
Lifecycle, Resources and Security Operations
Adjust Budget Requests as Risks and Threats Shift Mid-Year
Listen to Adjust Budget Requests as Risks and Threats Shift Mid-Year in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E36Transcript
Lifecycle, Resources and Security Operations
Manage and Report Financial Responsibilities With Credibility and Clarity
Listen to Manage and Report Financial Responsibilities With Credibility and Clarity in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E37Transcript
Lifecycle, Resources and Security Operations
Define Security Roles and Responsibilities Across Teams and Third Parties
Listen to Define Security Roles and Responsibilities Across Teams and Third Parties in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E38Transcript
Lifecycle, Resources and Security Operations
Create Team Accountability That Works in Real Organizational Friction
Listen to Create Team Accountability That Works in Real Organizational Friction in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E39Transcript
Lifecycle, Resources and Security Operations
Build Cross-Functional Relationships That Keep Security Embedded and Trusted
Listen to Build Cross-Functional Relationships That Keep Security Embedded and Trusted in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E40Transcript
Lifecycle, Resources and Security Operations
Resolve Conflicts Between Security and Stakeholders Without Losing Ground
Listen to Resolve Conflicts Between Security and Stakeholders Without Losing Ground in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E41Transcript
Lifecycle, Resources and Security Operations
Identify Communication Bottlenecks and Remove Barriers to Security Execution
Listen to Identify Communication Bottlenecks and Remove Barriers to Security Execution in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E42Transcript
Lifecycle, Resources and Security Operations
Integrate Security Controls Into Business Processes With Minimal Disruption
Listen to Integrate Security Controls Into Business Processes With Minimal Disruption in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E43Transcript
Lifecycle, Resources and Security Operations
Incorporate Security Throughout the Product Lifecycle From Concept to Retirement
Listen to Incorporate Security Throughout the Product Lifecycle From Concept to Retirement in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E44Transcript
Lifecycle, Resources and Security Operations
Choose and Apply Agile, Waterfall, Lean, and Hybrid Methods With Security Fit
Listen to Choose and Apply Agile, Waterfall, Lean, and Hybrid Methods With Security Fit in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E45Transcript
Lifecycle, Resources and Security Operations
Analyze Project Scope, Timelines, Quality, and Budget Through a Security Lens
Listen to Analyze Project Scope, Timelines, Quality, and Budget Through a Security Lens in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E46Transcript
Lifecycle, Resources and Security Operations
Integrate Security Decision Points and Requirements Across the System Lifecycle
Listen to Integrate Security Decision Points and Requirements Across the System Lifecycle in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E47Transcript
Lifecycle, Resources and Security Operations
Implement Security Controls Throughout the System Lifecycle With Traceability
Listen to Implement Security Controls Throughout the System Lifecycle With Traceability in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E48Transcript
Lifecycle, Resources and Security Operations
Oversee Security Configuration Management Processes That Prevent Drift
Listen to Oversee Security Configuration Management Processes That Prevent Drift in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E49Transcript
Lifecycle, Resources and Security Operations
Implement Core Security Principles Across Initiatives and Emerging Technology
Listen to Implement Core Security Principles Across Initiatives and Emerging Technology in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E50Transcript
Lifecycle, Resources and Security Operations
Address How Organizational Initiatives Shift Security Posture and Risk
Listen to Address How Organizational Initiatives Shift Security Posture and Risk in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E51Transcript
Lifecycle, Resources and Security Operations
Build Vulnerability Programs: Asset Criticality, Classification, and Prioritization
Listen to Build Vulnerability Programs: Asset Criticality, Classification, and Prioritization in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E52Transcript
Lifecycle, Resources and Security Operations
Prioritize Threats and Vulnerabilities Based on Risk, Impact, and Likelihood
Listen to Prioritize Threats and Vulnerabilities Based on Risk, Impact, and Likelihood in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E53Transcript
Lifecycle, Resources and Security Operations
Manage Security Testing Across Scanning, Pen Testing, and Threat Analysis
Listen to Manage Security Testing Across Scanning, Pen Testing, and Threat Analysis in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E54Transcript
Lifecycle, Resources and Security Operations
Drive Mitigation and Remediation to Closure Without Endless Re-Openings
Listen to Drive Mitigation and Remediation to Closure Without Endless Re-Openings in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E55Transcript
Lifecycle, Resources and Security Operations
Monitor and Report Vulnerabilities With Actionable, Executive-Ready Signal
Listen to Monitor and Report Vulnerabilities With Actionable, Executive-Ready Signal in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E56Transcript
Lifecycle, Resources and Security Operations
Integrate Security Requirements Into Change Control Without Slowing Delivery
Listen to Integrate Security Requirements Into Change Control Without Slowing Delivery in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E57Transcript
Lifecycle, Resources and Security Operations
Conduct Security Impact Analysis That Prevents Change-Driven Incidents
Listen to Conduct Security Impact Analysis That Prevents Change-Driven Incidents in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E58Transcript
Lifecycle, Resources and Security Operations
Coordinate Stakeholders and Manage Change Documentation and Tracking Cleanly
Listen to Coordinate Stakeholders and Manage Change Documentation and Tracking Cleanly in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E59Transcript
Lifecycle, Resources and Security Operations
Ensure Ongoing Policy Compliance Through Continuous Monitoring Practices
Listen to Ensure Ongoing Policy Compliance Through Continuous Monitoring Practices in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E60Transcript
Risk Management
Define Risk Program Objectives With Owners, Stakeholders, and Clear Scope
Listen to Define Risk Program Objectives With Owners, Stakeholders, and Clear Scope in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E61Transcript
Risk Management
Identify Risk Tolerance and Appetite and Translate It Into Real Decisions
Listen to Identify Risk Tolerance and Appetite and Translate It Into Real Decisions in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E62Transcript
Risk Management
Build and Verify Asset Inventory Inputs That Make Risk Analysis Reliable
Listen to Build and Verify Asset Inventory Inputs That Make Risk Analysis Reliable in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E63Transcript
Risk Management
Analyze Organizational Risks and Select Countermeasures and Compensating Controls
Listen to Analyze Organizational Risks and Select Countermeasures and Compensating Controls in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E64Transcript
Risk Management
Choose Risk Treatment Options and Perform Cost-Benefit Analysis That Persuades
Listen to Choose Risk Treatment Options and Perform Cost-Benefit Analysis That Persuades in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E65Transcript
Risk Management
Document and Manage Agreed Risks, Issues, Treatments, and Accountability
Listen to Document and Manage Agreed Risks, Issues, Treatments, and Accountability in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E66Transcript
Risk Management
Test, Monitor, and Report Risks and Issues With Operational Follow-Through
Listen to Test, Monitor, and Report Risks and Issues With Operational Follow-Through in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E67Transcript
Risk Management
Manage Supply Chain Risk Objectives Across Vendors, Suppliers, and Partners
Listen to Manage Supply Chain Risk Objectives Across Vendors, Suppliers, and Partners in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E68Transcript
Risk Management
Integrate Third-Party Risks Into Enterprise Risk Management End to End
Listen to Integrate Third-Party Risks Into Enterprise Risk Management End to End in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E69Transcript
Risk Management
Verify and Validate Supply Chain Controls and Confirm They Actually Work
Listen to Verify and Validate Supply Chain Controls and Confirm They Actually Work in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E70Transcript
Risk Management
Monitor and Review Supply Chain Risks as Dependencies and Threats Change
Listen to Monitor and Review Supply Chain Risks as Dependencies and Threats Change in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E71Transcript
Risk Management
Identify Risk Factors and Pick the Right Risk Assessment Approach
Listen to Identify Risk Factors and Pick the Right Risk Assessment Approach in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E72Transcript
Risk Management
Perform Risk Analysis With Repeatable Methods and Defensible Results
Listen to Perform Risk Analysis With Repeatable Methods and Defensible Results in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E73Transcript
Risk Management
Identify Risk Controls and Determine Control Effectiveness With Evidence
Listen to Identify Risk Controls and Determine Control Effectiveness With Evidence in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E74Transcript
Risk Management
Evaluate Control Coverage, Gaps, and Overlap Across the Control Portfolio
Listen to Evaluate Control Coverage, Gaps, and Overlap Across the Control Portfolio in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E75Transcript
Risk Management
Monitor and Report Control Effectiveness and Coverage for Decision-Makers
Listen to Monitor and Report Control Effectiveness and Coverage for Decision-Makers in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E76Transcript
Threat Intelligence and Incident Management
Establish and Maintain a Security Operations Center With Essential Documentation
Listen to Establish and Maintain a Security Operations Center With Essential Documentation in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E77Transcript
Threat Intelligence and Incident Management
Aggregate Threat Intelligence From Multiple Sources Into Usable Context
Listen to Aggregate Threat Intelligence From Multiple Sources Into Usable Context in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E78
Threat Intelligence and Incident Management
Baseline Network, Data, and User Behavior to Make Detection Credible
Listen to Baseline Network, Data, and User Behavior to Make Detection Credible in the ISC2 ISSMP audio course.
February 22, 2026
S01E79Transcript
Threat Intelligence and Incident Management
Detect and Analyze Anomalous Behavior Patterns for Actionable Security Triage
Listen to Detect and Analyze Anomalous Behavior Patterns for Actionable Security Triage in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E80Transcript
Threat Intelligence and Incident Management
Conduct Threat Modeling to Anticipate Attacks and Strengthen Defenses
Listen to Conduct Threat Modeling to Anticipate Attacks and Strengthen Defenses in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E81Transcript
Threat Intelligence and Incident Management
Identify and Categorize Attacks to Improve Response Speed and Accuracy
Listen to Identify and Categorize Attacks to Improve Response Speed and Accuracy in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E82Transcript
Threat Intelligence and Incident Management
Correlate Security Events and Threat Data Into Coherent, Prioritized Cases
Listen to Correlate Security Events and Threat Data Into Coherent, Prioritized Cases in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E83Transcript
Threat Intelligence and Incident Management
Define Actionable Alerts That Reduce Noise and Increase Analyst Confidence
Listen to Define Actionable Alerts That Reduce Noise and Increase Analyst Confidence in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E84Transcript
Threat Intelligence and Incident Management
Establish Incident Program Documentation That Drives Consistent Response
Listen to Establish Incident Program Documentation That Drives Consistent Response in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E85Transcript
Threat Intelligence and Incident Management
Build Incident Case Management Processes That Preserve Evidence and Momentum
Listen to Build Incident Case Management Processes That Preserve Evidence and Momentum in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E86Transcript
Threat Intelligence and Incident Management
Establish an Incident Response Team With Roles, Authority, and Coverage
Listen to Establish an Incident Response Team With Roles, Authority, and Coverage in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E87Transcript
Threat Intelligence and Incident Management
Apply Incident Management Methodologies That Scale Under Pressure
Listen to Apply Incident Management Methodologies That Scale Under Pressure in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E88Transcript
Threat Intelligence and Incident Management
Build Incident Handling Processes From Intake Through Containment and Recovery
Listen to Build Incident Handling Processes From Intake Through Containment and Recovery in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E89Transcript
Threat Intelligence and Incident Management
Establish Investigation Processes That Support Root Cause and Legal Needs
Listen to Establish Investigation Processes That Support Root Cause and Legal Needs in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E90Transcript
Threat Intelligence and Incident Management
Quantify and Report Incident Impact to Stakeholders Without Speculation
Listen to Quantify and Report Incident Impact to Stakeholders Without Speculation in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E91Transcript
Threat Intelligence and Incident Management
Conduct Root Cause Analysis That Drives Control Improvements and Prevention
Listen to Conduct Root Cause Analysis That Drives Control Improvements and Prevention in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E92Transcript
Contingency Management
Facilitate Resiliency Planning Inputs: COOP, External Factors, Laws, and BIA
Listen to Facilitate Resiliency Planning Inputs: COOP, External Factors, Laws, and BIA in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E93Transcript
Contingency Management
Facilitate BCP Development With Time, Resource, Verification, and BIA Constraints
Listen to Facilitate BCP Development With Time, Resource, Verification, and BIA Constraints in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E94Transcript
Contingency Management
Facilitate DRP Development With Time, Resource, and Verification Requirements
Listen to Facilitate DRP Development With Time, Resource, and Verification Requirements in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E95Transcript
Contingency Management
Identify Recovery Alternatives and Coordinate Practical Recovery Strategies
Listen to Identify Recovery Alternatives and Coordinate Practical Recovery Strategies in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E96Transcript
Contingency Management
Assign Recovery Roles and Responsibilities That Work During Real Disasters
Listen to Assign Recovery Roles and Responsibilities That Work During Real Disasters in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E97Transcript
Contingency Management
Plan Testing, Evaluation, and Modification of COOP, BCP, and DRP
Listen to Plan Testing, Evaluation, and Modification of COOP, BCP, and DRP in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E98Transcript
Contingency Management
Determine Survivability and Resiliency Capabilities Without False Confidence
Listen to Determine Survivability and Resiliency Capabilities Without False Confidence in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E99Transcript
Contingency Management
Manage the Plan Update Process So Contingency Plans Stay Current
Listen to Manage the Plan Update Process So Contingency Plans Stay Current in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E100Transcript
Contingency Management
Declare and Communicate a Disaster Clearly Across the Organization
Listen to Declare and Communicate a Disaster Clearly Across the Organization in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E101Transcript
Contingency Management
Implement the Plan and Coordinate Response Without Operational Chaos
Listen to Implement the Plan and Coordinate Response Without Operational Chaos in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E102Transcript
Contingency Management
Restore Normal Operations While Protecting Integrity, Availability, and Trust
Listen to Restore Normal Operations While Protecting Integrity, Availability, and Trust in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E103Transcript
Contingency Management
Capture Lessons Learned and Turn Them Into Concrete Program Changes
Listen to Capture Lessons Learned and Turn Them Into Concrete Program Changes in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E104Transcript
Law, Ethics and Compliance
Identify Legal Jurisdictions and Trans-Border Data Flow Obligations
Listen to Identify Legal Jurisdictions and Trans-Border Data Flow Obligations in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E105Transcript
Law, Ethics and Compliance
Identify Applicable Security and Privacy Laws, Regulations, and Standards
Listen to Identify Applicable Security and Privacy Laws, Regulations, and Standards in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E106Transcript
Law, Ethics and Compliance
Identify Intellectual Property Laws and Translate Them Into Security Controls
Listen to Identify Intellectual Property Laws and Translate Them Into Security Controls in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E107Transcript
Law, Ethics and Compliance
Advise on Risks of Non-Compliance and Non-Conformity With Business Clarity
Listen to Advise on Risks of Non-Compliance and Non-Conformity With Business Clarity in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E108Transcript
Law, Ethics and Compliance
Promote the ISC2 Code of Ethics Through Practical Leadership Decisions
Listen to Promote the ISC2 Code of Ethics Through Practical Leadership Decisions in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E109Transcript
Law, Ethics and Compliance
Promote Organizational Ethics and Resolve Security Dilemmas Without Hand-Waving
Listen to Promote Organizational Ethics and Resolve Security Dilemmas Without Hand-Waving in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E110Transcript
Law, Ethics and Compliance
Inform and Advise Senior Management on Compliance Strategy and Tradeoffs
Listen to Inform and Advise Senior Management on Compliance Strategy and Tradeoffs in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E111Transcript
Law, Ethics and Compliance
Evaluate and Select Compliance Frameworks That Fit Business and Regulation
Listen to Evaluate and Select Compliance Frameworks That Fit Business and Regulation in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E112Transcript
Law, Ethics and Compliance
Implement Compliance Frameworks Into Operations Without Creating Paper Security
Listen to Implement Compliance Frameworks Into Operations Without Creating Paper Security in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E113Transcript
Law, Ethics and Compliance
Define and Monitor Compliance Metrics That Survive Audit Scrutiny
Listen to Define and Monitor Compliance Metrics That Survive Audit Scrutiny in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E114Transcript
Law, Ethics and Compliance
Plan and Schedule Internal and External Audit Activities With Minimal Disruption
Listen to Plan and Schedule Internal and External Audit Activities With Minimal Disruption in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E115Transcript
Law, Ethics and Compliance
Coordinate Audit Activities and Maintain Evidence Readiness Year-Round
Listen to Coordinate Audit Activities and Maintain Evidence Readiness Year-Round in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E116Transcript
Law, Ethics and Compliance
Evaluate and Validate Findings and Build Responses That Address Root Causes
Listen to Evaluate and Validate Findings and Build Responses That Address Root Causes in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E117Transcript
Law, Ethics and Compliance
Monitor and Validate Remediation Actions Until Risk Is Truly Reduced
Listen to Monitor and Validate Remediation Actions Until Risk Is Truly Reduced in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E118Transcript
Law, Ethics and Compliance
Document Compliance Exceptions With Controls, Workarounds, and Risk Context
Listen to Document Compliance Exceptions With Controls, Workarounds, and Risk Context in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
S01E119Transcript
Law, Ethics and Compliance
Obtain Authorized Risk Waivers With Proper Approval and Traceable Records
Listen to Obtain Authorized Risk Waivers With Proper Approval and Traceable Records in the ISC2 ISSMP audio course.
Transcript availableFebruary 22, 2026
No matching lessons
Try another term or clear one of the filters.
A Practical Study Routine
Listen, read, and review in the order that works for you.
Listen
Use the free audio course during a commute, walk, workout, or focused study session.
Read
Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.
Review
Use the flashcards book to practice active recall and quickly revisit weak areas.
Related Magazine Features
Connect the course to current cybersecurity analysis.
Issue 49 · December 9, 2026Metrics That Move Money: Turning Security Data into Budget DecisionsRead the feature →
Issue 37 · September 16, 2026Making Alerts Great Again: Detection Engineering, Not Dashboard WorshipRead the feature →
Issue 13 · April 1, 2026CISO Exit Wounds: What Surfaces When the Security Leader WalksRead the feature →
Related Cyber Wiki
Continue with the concepts behind the course.
AI engineering assurance
AI Configuration Reproducibility
AI configuration reproducibility means an authorized team can recreate the relevant model build or runtime behavior from recorded code, data references, parameters, dependencies, prompts, and infrastructure settings.
AI assuranceAI Control Design Effectiveness
AI control design effectiveness asks whether a control, as documented and configured, is capable of preventing, detecting, or correcting the risk it was selected to address.
AI controlsAI Control Monitoring
AI control monitoring observes whether preventive, detective, and corrective controls remain active, correctly configured, sufficiently covered, and effective as systems change.
AI governanceAI Governance Roles and Accountability
AI governance roles assign decision rights and obligations across executives, business owners, developers, data stewards, security, privacy, legal, risk, and users.
AI operations governanceAI Post-Deployment Monitoring
AI post-deployment monitoring measures whether a released system continues to perform, comply, and behave safely in its actual environment.
AI risk managementAI Risk Appetite Statement
An AI risk appetite statement describes the types and amount of AI-related risk an organization is willing to pursue or retain in support of its objectives.