Knowledge is Power

Sitewide Search

Search Bare Metal Cyber

Search exact control and technique identifiers, Cyber Wiki articles, framework records, playbooks, books, podcasts, Academy courses, and individual lessons.

PMI · Free, ad-free audio course

PMI-RMP

A structured, audio-first learning route for PMI-RMP, designed for focused review and practical understanding.

Every Bare Metal Cyber audio course is free and 100% ad-free.

Companion Books

Study with the audio course, then reinforce it in print.

The study guide helps you organize and revisit the material. The flashcards book adds active recall and rapid review across the course objectives.

Complete Lesson Directory

Choose the exact subject you want to study.

Search by topic or narrow the directory by exam domain. Courses with multiple editions are organized below so every season remains easy to find. Each lesson includes its own audio player, full description, transcript when available, and previous-or-next navigation.

83 lessons available

S01E01Transcript

Exam Orientation and Risk Foundations

PMI-RMP: Role, Value, and Career Paths

The PMI Risk Management Professional (PMI-RMP) credential validates applied competence in identifying, analyzing, and responding to project risk across delivery approaches.…

Transcript availableNovember 10, 2025
S01E02Transcript

Exam Orientation and Risk Foundations

Who Should Pursue PMI-RMP (and Why)

This episode helps you decide if PMI-RMP aligns with your background and goals by mapping common starting points—project managers, schedulers, business analysts, PMO specialists, Scrum Masters, and control-oriented engineers—to the exam’s expectations.…

Transcript availableNovember 10, 2025
S01E03Transcript

Exam Orientation and Risk Foundations

Eligibility, Application, and Audit Steps

Here we clarify PMI-RMP eligibility pathways so you can plan without guesswork. We translate the formal requirements into practical checklists: education, months of project risk experience, and hours of risk-specific practice.…

Transcript availableNovember 10, 2025
S01E04Transcript

Exam Orientation and Risk Foundations

Exam Format, Domains, and Weightings

This episode removes uncertainty about the exam experience by detailing structure, timing, question counts, and navigation features you can expect at the test center or online proctored.…

Transcript availableNovember 10, 2025
S01E05Transcript

Exam Orientation and Risk Foundations

Question Styles, Difficulty, and Timing

Understanding question construction is a competitive advantage, so we unpack common styles: single-best-answer, multi-step scenario, choose-the-first/next action, and governance-framed items that test threshold logic and escalation judgment.…

Transcript availableNovember 10, 2025
S01E06Transcript

Exam Orientation and Risk Foundations

Study Roadmap and Weekly Cadence

This episode converts the exam blueprint into a practical study plan you can actually follow. We begin by aligning domain weightings to weekly sprints so heavier areas receive proportionally more time without starving lighter but tricky topics.…

Transcript availableNovember 10, 2025
S01E07Transcript

Exam Orientation and Risk Foundations

Ethics, Professional Conduct, and Policies

Ethics questions test judgment under pressure, so this episode clarifies professional responsibility as a risk function, not just a compliance checkbox.…

Transcript availableNovember 10, 2025
S01E08Transcript

Exam Orientation and Risk Foundations

Delivery Approaches: Predictive, Agile, Hybrid

Risk practice changes with cadence, so we compare predictive, Agile, and hybrid approaches through the lens of artifacts, timing, and decision rights.…

Transcript availableNovember 10, 2025
S01E09Transcript

Domain I · Risk Strategy and Planning

Domain I Overview: Risk Strategy & Planning

Domain I sets the foundation for everything that follows, so we unpack its building blocks: risk strategy, governance choices, roles and responsibilities, cadence, and the risk management plan.…

Transcript availableNovember 10, 2025
S01E10Transcript

Domain I · Risk Strategy and Planning

Preliminary Document Analysis: What to Extract

Before workshops begin, high-value insights already sit in existing documents. This episode teaches you what to extract from charters, statements of work, contracts, business cases, and early roadmaps.…

Transcript availableNovember 10, 2025
S01E11Transcript

Domain I · Risk Strategy and Planning

Mining Charters, SOWs, and Contracts

This episode continues the document review process by explaining how to interpret charters, statements of work (SOWs), and contracts as sources of early risk data. Each of these artifacts defines obligations, assumptions, and decision authorities that shape your risk baseline.…

Transcript availableNovember 10, 2025
S01E12Transcript

Domain I · Risk Strategy and Planning

Environmental Assessment: Internal and External

Every project operates within two environments: the internal organizational setting and the external context that shapes risk dynamics.…

Transcript availableNovember 10, 2025
S01E13Transcript

Domain I · Risk Strategy and Planning

Culture and Risk Maturity Explained

Risk culture defines how openly teams discuss uncertainty, and risk maturity measures how consistently they act on it. This episode clarifies both ideas, since many PMI-RMP exam questions hinge on distinguishing cultural issues from procedural ones.…

Transcript availableNovember 10, 2025
S01E14Transcript

Domain I · Risk Strategy and Planning

Appetite, Tolerance, and Thresholds

The trio of appetite, tolerance, and thresholds lies at the heart of risk strategy, so this episode explains them in precise, exam-ready language.…

Transcript availableNovember 10, 2025
S01E15Transcript

Domain I · Risk Strategy and Planning

Eliciting Appetite from Executives

When executives cannot articulate appetite clearly, risk professionals must facilitate productive discussion to define it.…

Transcript availableNovember 10, 2025
S01E16Transcript

Domain I · Risk Strategy and Planning

Crafting the Risk Strategy: Big Decisions

This episode turns appetite, tolerance, and thresholds into an actionable risk strategy that guides choices before pressure mounts.…

Transcript availableNovember 10, 2025
S01E17Transcript

Domain I · Risk Strategy and Planning

Governance, Roles, and Cadence

Governance turns strategy into disciplined behavior, so this episode clarifies decision rights, responsibilities, and meeting rhythms that keep risk work timely.…

Transcript availableNovember 10, 2025
S01E18Transcript

Domain I · Risk Strategy and Planning

Writing the Risk Management Plan

The risk management plan is the blueprint for how your project treats uncertainty, and the exam expects you to know what belongs in it and why.…

Transcript availableNovember 10, 2025
S01E19Transcript

Domain I · Risk Strategy and Planning

Escalation Paths and Triggers

Escalation design determines whether risks are addressed while they are still cheap to handle, so this episode teaches you to connect specific triggers to clear paths and time limits.…

Transcript availableNovember 10, 2025
S01E20Transcript

Domain I · Risk Strategy and Planning

Leading Stakeholder Risk Activities

Risk leadership is a facilitation craft, and this episode centers on how to engage sponsors, teams, vendors, and regulators productively.…

Transcript availableNovember 10, 2025
S01E21Transcript

Domain I · Risk Strategy and Planning

Facilitating Buy-In and Alignment

Gaining buy-in for risk management means securing commitment, not just attendance, from sponsors and teams. This episode explains how to align diverse interests around a shared understanding of uncertainty by linking risk discussions to objectives each stakeholder values.…

Transcript availableNovember 10, 2025
S01E22Transcript

Domain II · Risk Identification

Domain II Overview: Risk Identification

Domain II shifts focus from planning to uncovering specific risks that could affect objectives. This episode outlines the identification process, inputs, and expected outputs: the risk register and supporting documentation.…

Transcript availableNovember 10, 2025
S01E23Transcript

Domain II · Risk Identification

Planning and Running ID Workshops

Identification workshops are where risk awareness becomes collective insight, so this episode explains how to plan, conduct, and document them effectively.…

Transcript availableNovember 10, 2025
S01E24Transcript

Domain II · Risk Identification

Facilitation Skills for Risk Leads

Facilitation is a test of composure and neutrality, qualities that define effective risk professionals. This episode covers techniques to guide discussions, manage conflict, and extract insight while maintaining objectivity.…

Transcript availableNovember 10, 2025
S01E25Transcript

Domain II · Risk Identification

Assumptions and Constraints Analysis

Every project carries assumptions that may prove false and constraints that limit options. This episode explains how to identify, analyze, and record both so they become structured inputs to risk identification and analysis.…

Transcript availableNovember 10, 2025
S01E26Transcript

Domain II · Risk Identification

Surfacing Hidden Assumptions Fast

Hidden assumptions are silent risk multipliers, so this episode focuses on rapid techniques to expose them before they harden into schedule or cost surprises.…

Transcript availableNovember 10, 2025
S01E27Transcript

Domain II · Risk Identification

Causes, Triggers, and Early Symptoms

This episode clarifies three terms the exam loves to intertwine: causes, triggers, and early symptoms. Causes are underlying conditions that make a risk plausible, triggers are measurable events that demand action, and early symptoms are weak signals that an exposure is developing.…

Transcript availableNovember 10, 2025
S01E28Transcript

Domain II · Risk Identification

Writing Clear, Testable Risk Statements

Ambiguous risk statements sabotage analysis and response, so this episode teaches a consistent pattern for clarity. We adopt a simple structure—Because [cause], [risk event] may occur, leading to [impact on objective]—and show how to adapt it for both threats and opportunities.…

Transcript availableNovember 10, 2025
S01E29Transcript

Domain II · Risk Identification

Building a High-Value Risk Register

A register is not a parking lot—it is a decision engine. This episode shows how to design a register that accelerates governance by structuring fields for ownership, evidence, and next decisions.…

Transcript availableNovember 10, 2025
S01E30Transcript

Domain II · Risk Identification

Maintaining Traceability Over Time

Traceability connects strategy to day-to-day actions, so this episode explains how to preserve a clear line from appetite and thresholds to identification, analysis, response, and monitoring.…

Transcript availableNovember 10, 2025
S01E31Transcript

Domain II · Risk Identification

Brainstorming and Nominal Group Technique

This episode explores two cornerstone techniques for risk identification: brainstorming and the Nominal Group Technique (NGT). Brainstorming encourages open idea generation in a collaborative setting, capturing as many potential risks as possible before filtering or ranking.…

Transcript availableNovember 10, 2025
S01E32Transcript

Domain II · Risk Identification

Delphi and Anonymous Elicitation Methods

When objectivity is critical or stakeholders hold strong opinions, anonymity preserves candor. This episode explains the Delphi technique and other anonymous elicitation methods, which use iterative surveys or digital platforms to collect and refine expert judgment.…

Transcript availableNovember 10, 2025
S01E33Transcript

Domain II · Risk Identification

Lessons Learned and Checklists Sweep

Historical insight is one of the fastest ways to uncover hidden risk patterns, and this episode shows how to mine organizational lessons learned and checklists effectively.…

Transcript availableNovember 10, 2025
S01E34Transcript

Domain II · Risk Identification

Using Risk Categories and RBS Thinking

Risk Breakdown Structure (RBS) thinking brings order to uncertainty. This episode explains how categorizing risks by source—technical, external, organizational, or project management—helps ensure completeness and supports analysis later.…

Transcript availableNovember 10, 2025
S01E35Transcript

Domain II · Risk Identification

Opportunity Identification and Framing

Opportunity management is risk management applied to positive outcomes, and this episode ensures you can frame it with the same rigor.…

Transcript availableNovember 10, 2025
S01E36Transcript

Domain III · Risk Analysis

Domain III Overview: Risk Analysis

Domain III moves from collecting risks to interpreting their meaning with disciplined judgment. This episode orients you to the analysis objectives, artifacts, and logic the exam expects you to apply under time pressure.…

Transcript availableNovember 10, 2025
S01E37Transcript

Domain III · Risk Analysis

Qualitative Analysis: Objectives and Flow

Qualitative analysis converts a long list of identified risks into a prioritized, comprehensible set of concerns that leaders can act on quickly.…

Transcript availableNovember 10, 2025
S01E38Transcript

Domain III · Risk Analysis

Scales, Probability–Impact, and Scoring

Scales are the language of qualitative analysis, and sloppy definitions produce unreliable results.…

Transcript availableNovember 10, 2025
S01E39Transcript

Domain III · Risk Analysis

Beyond P-I: Urgency and Proximity

Probability and impact are necessary, not sufficient. This episode adds urgency—the need to act quickly due to accelerating exposure—and proximity—the time until a risk could occur—to refine prioritization.…

Transcript availableNovember 10, 2025
S01E40Transcript

Domain III · Risk Analysis

Prioritization and Heat Map Pitfalls

Prioritization converts analysis into action, but common traps make results unreliable.…

Transcript availableNovember 10, 2025
S01E41Transcript

Domain III · Risk Analysis

Quantitative Analysis: When and Why

Quantitative analysis applies mathematics and modeling to express risk exposure in numerical terms, but the exam expects you to know when it adds value and when it wastes effort.…

Transcript availableNovember 10, 2025
S01E42Transcript

Domain III · Risk Analysis

Data Quality and Calibration Concepts

Accurate risk models depend on data quality, so this episode teaches how to evaluate and calibrate inputs before analysis. We define completeness, accuracy, consistency, and timeliness as the four quality dimensions most often referenced in exam questions.…

Transcript availableNovember 10, 2025
S01E43Transcript

Domain III · Risk Analysis

Schedule Risk Concepts (No Software Needed)

Understanding schedule risk analysis does not require advanced tools—it requires conceptual clarity. This episode explains how uncertainty in task duration, sequencing, and dependencies translates into exposure against milestones and delivery dates.…

Transcript availableNovember 10, 2025
S01E44Transcript

Domain III · Risk Analysis

Cost Risk Concepts and Ranges

Cost uncertainty deserves the same rigor as schedule uncertainty, and this episode clarifies how to interpret ranges, contingencies, and reserves in both predictive and Agile settings.…

Transcript availableNovember 10, 2025
S01E45Transcript

Domain III · Risk Analysis

Decision Trees and Expected Value, Verbally

Decision trees turn uncertainty into structured reasoning, and this episode teaches how to interpret them verbally—the way the exam presents them.…

Transcript availableNovember 10, 2025
S01E46Transcript

Domain III · Risk Analysis

Sensitivity and Drivers: Tornado Explained

Sensitivity analysis helps you discover which uncertain inputs actually move outcomes, and the tornado diagram is the clearest way to show that hierarchy.…

Transcript availableNovember 10, 2025
S01E47Transcript

Domain III · Risk Analysis

Critical Path vs. Risk-Adjusted Paths

Traditional plans highlight a single critical path based on deterministic durations, but risk-aware planning recognizes that “critical” can shift as uncertainty plays out.…

Transcript availableNovember 10, 2025
S01E48Transcript

Domain III · Risk Analysis

Correlation, Dependencies, and Common Causes

Many analyses fail because they assume inputs vary independently when, in practice, they rise and fall together.…

Transcript availableNovember 10, 2025
S01E49Transcript

Domain III · Risk Analysis

Presenting Analysis to Executives

Analysis only matters when it changes decisions, so this episode teaches you to translate findings into clear, credible executive narratives.…

Transcript availableNovember 10, 2025
S01E51Transcript

Domain IV · Risk Response

Domain IV Overview: Risk Response

Domain IV translates analysis into deliberate action, defining how risks will be addressed, owned, and tracked.…

Transcript availableNovember 10, 2025
S01E52Transcript

Domain IV · Risk Response

Selecting Responses for Threats

Threat response selection demands clear cause-and-effect reasoning. This episode teaches how to match strategy to risk characteristics such as controllability, proximity, and potential impact.…

Transcript availableNovember 10, 2025
S01E53Transcript

Domain IV · Risk Response

Selecting Responses for Opportunities

Opportunity management uses the same rigor applied to threats, framed for upside. This episode defines the four strategies: exploit, share, enhance, and accept. You will learn to decide which one fits by assessing control, resources, and timing.…

Transcript availableNovember 10, 2025
S01E54Transcript

Domain IV · Risk Response

Contingency, Fallback, and Triggers

Even the best responses can falter, so contingency and fallback planning ensure continuity.…

Transcript availableNovember 10, 2025
S01E55Transcript

Domain IV · Risk Response

Residual and Secondary Risks

Every response leaves behind residual risk and may create new secondary risks. This episode defines both and explains how to record, analyze, and monitor them to preserve traceability.…

Transcript availableNovember 10, 2025
S01E56Transcript

Domain IV · Risk Response

Assigning Risk Owners and Action Owners

Clear ownership is the backbone of effective risk management. This episode distinguishes between a risk owner—the person accountable for monitoring and deciding future actions—and an action owner—the individual or team responsible for executing a specific response.…

Transcript availableNovember 10, 2025
S01E57Transcript

Domain IV · Risk Response

Integrating Responses into Schedule and Budget

Responses gain credibility only when embedded in the project’s schedule and budget, not left in isolation. This episode explains how to translate response actions into scheduled tasks with durations, dependencies, and cost allocations.…

Transcript availableNovember 10, 2025
S01E58Transcript

Domain IV · Risk Response

Communicating Response Effectiveness

Response actions must be measured and communicated so stakeholders see progress and remaining exposure. This episode outlines how to evaluate effectiveness through indicators like probability reduction, impact change, trigger frequency, and response timeliness.…

Transcript availableNovember 10, 2025
S01E59Transcript

Domain IV · Risk Response

Leading Indicators and Trend Watching

Leading indicators offer early warning of emerging exposure before triggers are hit. This episode explains how to identify, monitor, and interpret these signals as part of continuous risk control.…

Transcript availableNovember 10, 2025
S01E60Transcript

Domain IV · Risk Response

Implementing Responses with Governance

Implementation discipline ensures responses become real actions, not promises. This episode ties execution to governance structures: approvals, documentation, reporting cadence, and closure criteria.…

Transcript availableNovember 10, 2025
S01E61Transcript

Domain V · Monitor and Close Risk

Domain V Overview: Monitor and Close

Domain V unifies everything you have built so far into a disciplined loop of observation, decision, and closure. The exam expects you to demonstrate how risks are monitored against indicators and triggers, how results are communicated, and how items are formally closed with evidence.…

Transcript availableNovember 10, 2025
S01E62Transcript

Domain V · Monitor and Close Risk

Tracking Indicators, Variance, and Trends

Effective monitoring begins with meaningful measures. This episode clarifies how to select indicators that align with causes and objectives, how to distinguish variance from noise, and how to communicate trends that drive decisions.…

Transcript availableNovember 10, 2025
S01E63Transcript

Domain V · Monitor and Close Risk

Risk Reviews vs. Retrospectives

Risk reviews and retrospectives both look back, but they serve different purposes and happen on different cadences.…

Transcript availableNovember 10, 2025
S01E64Transcript

Domain V · Monitor and Close Risk

Monitoring Residuals and Secondaries

After responses deploy, the job is not over—residual and secondary risks must be tracked with the same rigor as original entries.…

Transcript availableNovember 10, 2025
S01E65Transcript

Domain V · Monitor and Close Risk

Trigger Watchlists and Early Warning

A trigger watchlist is the practical bridge between indicators and action. This episode shows how to build and operate one: list each trigger with its threshold, the associated risk ID, the owner to notify, the decision forum to convene, and the time limit for response.…

Transcript availableNovember 10, 2025
S01E66Transcript

Domain V · Monitor and Close Risk

Updating Registers, Plans, and Baselines

Risk information is perishable, so this episode explains how to keep your registers, management plans, and baselines synchronized as the project evolves.…

Transcript availableNovember 10, 2025
S01E67Transcript

Domain V · Monitor and Close Risk

Close Criteria and Administrative Closure

Knowing when a risk is truly closed is just as important as identifying it in the first place.…

Transcript availableNovember 10, 2025
S01E68Transcript

Domain V · Monitor and Close Risk

Reporting Overall Risk Exposure

Beyond individual entries, leaders need to understand overall project risk—the integrated effect of all uncertainties on objectives. This episode explains how to synthesize exposure into narratives that show whether the project is trending safer, riskier, or stable.…

Transcript availableNovember 10, 2025
S01E69Transcript

Domain V · Monitor and Close Risk

Executive Dashboards as Narratives

Dashboards tell stories, and this episode explains how to design risk dashboards that inform decisions instead of simply displaying colors. We shift the mindset from reporting metrics to narrating change: what has improved, what remains critical, and what action is needed.…

Transcript availableNovember 10, 2025
S01E70Transcript

Domain V · Monitor and Close Risk

Issue vs. Risk: Boundaries and Hand-Offs

Understanding where a risk ends and an issue begins is vital to governance control. This episode clarifies that a risk is an uncertain event that may occur, while an issue is a realized event already affecting objectives.…

Transcript availableNovember 10, 2025
S01E71Transcript

Integrated and Specialized Project Risk

Integrated Change Control and Risk

Integrated change control is where risk management meets governance in real time. This episode explains how proposed changes—scope adjustments, schedule shifts, cost reallocations, or quality criteria updates—intersect with the risk strategy, register, and reserves.…

Transcript availableNovember 10, 2025
S01E72Transcript

Integrated and Specialized Project Risk

Procurement and Contract Risk (T&M, FP, CP)

Procurement shifts portions of risk to or from suppliers, and contract type determines how exposure is shared. This episode compares time-and-materials (T&M), fixed-price (FP), and cost-plus (CP) arrangements through a risk lens the PMI-RMP exam frequently leverages.…

Transcript availableNovember 10, 2025
S01E73Transcript

Integrated and Specialized Project Risk

Vendor and Supply Chain Risk Fundamentals

Vendor and supply chain risks compound because they cross organizational boundaries.…

Transcript availableNovember 10, 2025
S01E74Transcript

Integrated and Specialized Project Risk

Compliance, Legal, and Regulatory Risk

Compliance, legal, and regulatory exposures introduce hard constraints and nonnegotiable timelines. This episode clarifies how to convert obligations—privacy rules, safety codes, licensing, export controls, and sector standards—into concrete risk statements, indicators, and triggers.…

Transcript availableNovember 10, 2025
S01E75Transcript

Integrated and Specialized Project Risk

Safety, Environmental, and Social Risk

Projects operate within communities and ecosystems, making safety, environmental, and social risk both ethical imperatives and governance requirements. This episode frames these domains as objectives alongside cost and schedule, not as afterthoughts.…

Transcript availableNovember 10, 2025
S01E76Transcript

Integrated and Specialized Project Risk

Quality Risk and Fitness-for-Use

Quality risk concerns whether deliverables will meet functional expectations and stakeholder satisfaction, not just specifications. This episode clarifies how to express “fitness-for-use” as an exposure: performance shortfalls, missed acceptance criteria, or defects that erode trust.…

Transcript availableNovember 10, 2025
S01E77

Integrated and Specialized Project Risk

Financial and Currency Exposure in Projects

Exchange rates, inflation, and interest fluctuations can quietly shift project economics. This episode teaches you to identify, quantify, and respond to financial and currency risks through the same structured framework used for technical exposures.…

November 10, 2025
S01E78Transcript

Integrated and Specialized Project Risk

Cyber and Information Security Risk for PMs

Digital assets and data flows create vulnerabilities every project manager must understand. This episode outlines how to identify and treat cyber and information security risks within project scope, even when a dedicated security team exists.…

Transcript availableNovember 10, 2025
S01E79Transcript

Integrated and Specialized Project Risk

Operational Readiness and Transition Risk

A project’s finish line is not delivery—it is sustained operation. This episode examines operational readiness and transition risk: whether people, processes, and systems can absorb the new capability without disruption.…

Transcript availableNovember 10, 2025
S01E80Transcript

Integrated and Specialized Project Risk

Portfolio and Program Risk vs. Project Risk

Not all risks live at the project level. This episode differentiates portfolio, program, and project risks—each with distinct horizons and governance layers.…

Transcript availableNovember 10, 2025
S01E81Transcript

Integrated and Specialized Project Risk

Agile Risk: Backlogs, Sprints, and Reviews

Agile does not eliminate risk; it changes its rhythm. This episode explains how uncertainty flows through product backlogs, sprint planning, daily scrums, reviews, and retrospectives so you can manage exposure without breaking agility.…

Transcript availableNovember 10, 2025
S01E82Transcript

Integrated and Specialized Project Risk

Hybrid Risk: Guardrails and Touchpoints

Hybrid delivery mixes gated planning with iterative build, which multiplies handoffs—and risk—unless you design clear guardrails.…

Transcript availableNovember 10, 2025
S01E83Transcript

Integrated and Specialized Project Risk

Crisis Communication and Stakeholder Trust

When risk becomes reality, communication determines whether stakeholders remain confident or the project loses support.…

Transcript availableNovember 10, 2025

A Practical Study Routine

Listen, read, and review in the order that works for you.

01

Listen

Use the free audio course during a commute, walk, workout, or focused study session.

02

Read

Use the study guide to organize the material, annotate key ideas, and build a reference you can return to.

03

Review

Use the flashcards book to practice active recall and quickly revisit weak areas.