GV.RR-04 — Cybersecurity in Human Resources | Defense Map
Cybersecurity is included in human resources practices
Search & Discovery 2.0
Find the exact control, technique, lesson, or book.
Search the complete Bare Metal Cyber knowledge system with identifier-aware ranking, framework filters, topic discovery, and direct paths into books, podcasts, and Academy learning.
11,003searchable records
6,025Academy lessons
6framework families
144published books
Search results
952 results for “cybersecurity”
ID.IM-04 — Improve Incident Response and Cybersecurity Plans | Defense Map
Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved
Mastering Cybersecurity
Compact cybersecurity lessons built around approachable explanations, practical concepts, certification subjects, and focused review that fits into a commute, walk, or study session.
PR.AT-01 — General Cybersecurity Awareness and Training | Defense Map
Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
Establish and Enforce Cybersecurity Policy (GV.PO-01) — NIST CSF 2.0 Subcategory
Apply GV.PO-01 to achieve this CSF 2.0 outcome: Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced.
Evaluate Cybersecurity Performance (GV.OV-03) — NIST CSF 2.0 Subcategory
Apply GV.OV-03 to achieve this CSF 2.0 outcome: Organizational cybersecurity risk management performance is evaluated and reviewed for adjustments needed.
General Cybersecurity Awareness and Training (PR.AT-01) — NIST CSF 2.0 Subcategory
Apply PR.AT-01 to achieve this CSF 2.0 outcome: Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind.
Improve Incident Response and Cybersecurity Plans (ID.IM-04) — NIST CSF 2.0 Subcategory
Apply ID.IM-04 to achieve this CSF 2.0 outcome: Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved.
Review and Update Cybersecurity Policy (GV.PO-02) — NIST CSF 2.0 Subcategory
Apply GV.PO-02 to achieve this CSF 2.0 outcome: Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission.
AI in Cybersecurity (Part 1): Defense
In this episode, I take a deep dive into how AI is transforming cybersecurity, from machine learning-driven anomaly detection to real-time automated threat hunting. I break down the ways AI enhances threat detection, reduces response times, and scales defenses for large environments, while also exploring the challenges security teams face—such as adversarial AI attacks and managing false positives. You’ll hear…
Bios, Chips, and Implants: Cybersecurity When the Endpoint Is a Human
When the “endpoint” is part of a person’s body, the stakes of cybersecurity change. In this narrated audio version of Bios, Chips, and Implants: Cybersecurity When the Endpoint Is a Human, we walk through how pacemakers, insulin pumps, exoskeletons, augmented reality headsets, and other bio-digital devices are already intersecting with your networks and decisions. You will hear how threat models evolve when…
Building a Strong Defense: Understanding Cybersecurity Frameworks
In this episode of Dot One, we unravel the power of cybersecurity frameworks and compliance requirements, essential tools that help organizations fortify their defenses against a relentless wave of cyber threats. These frameworks, like the NIST Cybersecurity Framework or ISO 27001, offer structured blueprints to standardize security practices, manage risks, and meet regulatory demands—think HIPAA or GDPR—while…
Cyber Talks: The Four Ps of Marketing for Cybersecurity: A Cyber Talks Conversation with Tapan Deka
In my latest Cyber Talks session, developed by BareMetalCyber.com, I sat down with Tapan Deka, assistant professor at Madhavi Skills University, to explore something most cybersecurity leaders feel every day but rarely name: marketing. Not marketing in the agency sense, but the way we “package” our security products, services, and programs so people actually adopt them. In the conversation above, Tapan walks…
Off the Record, On the Radar: Why Personal Comms Keep Haunting Government Cybersecurity
In this podcast episode, I explore the persistent cybersecurity issue involving U.S. government officials using personal communication methods—like private emails and encrypted messaging apps—for official business. Drawing from notable examples across multiple administrations, from Bush-era email scandals and Obama's private server controversy to recent messaging app incidents under Trump, I highlight the systemic…
The Cybersecurity Maturity Model
Join us on Bare Metal Cyber as we unpack the Cybersecurity Maturity Model—a roadmap to level up your security game from chaotic basics to slick, proactive defenses, perfect for February 28, 2025’s wild threat scene. We dig into how it sizes up your setup across stages—think initial to optimized—and domains like incident response, helping you spot gaps and build muscle against ransomware or phishing. It’s your…
The Cybersecurity Storm: 5G, IoT, and the Next Wave of Attacks
In this podcast episode, I take a deep dive into the evolving cybersecurity threats brought on by the rapid expansion of five gee and Eye oh tee. With billions of connected devices and ultra-fast network speeds, cyber risks are escalating at an unprecedented pace. I break down critical vulnerabilities, including network slicing exploits, Eye oh tee botnets, and man-in-the-middle attacks, highlighting how attackers…
The Fundamentals of Cybersecurity
In this bonus episode of the BareMetalCyber podcast, I dive into cybersecurity fundamentals, exploring what it means to protect digital systems, networks, and data in today’s interconnected world. We’ll discuss the importance of cybersecurity for individuals, businesses, and governments, breaking down common threats like phishing, malware, and nation-state attacks, as well as the motivations behind them. You’ll…
Virtual Reality Check: Cybersecurity in XR’s Wild West
In this episode of the Bare Metal Cyber podcast, we explore the cybersecurity challenges facing Extended Reality—everything from hijacked avatars to biometric surveillance, and deepfake impersonations to XR-based social engineering. As these immersive technologies become part of everyday life, we unpack the very real threats hiding behind virtual smiles and spatial data. We’ll walk you through the evolving XR…
What is Cybersecurity?
Welcome to the first episode of Mastering Cybersecurity, where small updates make a big impact! In this debut episode, we explore the fundamentals of cybersecurity—what it is, why it matters, and how it affects individuals, businesses, and governments. Discover key concepts, common threats, and simple steps to enhance your digital defenses. For more in-depth discussions, check out BareMetalCyber.com. Explore my…
AI in Cybersecurity: Detection, Triage, Automation
This episode explores the growing role of AI in cybersecurity, where the scale and speed of modern threats demand advanced detection and automation. AI techniques support intrusion detection, malware classification, phishing analysis, and anomaly monitoring.…
Build a Cybersecurity Program in OT: Risk Levels, Registry, and Maturity Assessment
Listen to Build a Cybersecurity Program in OT: Risk Levels, Registry, and Maturity Assessment in the CompTIA SecOT+ audio course.
CISA: Cybersecurity Information Sharing and Liability Protections
The Cybersecurity Information Sharing Act (CISA) encourages private companies to share cyber threat information with the government.…
Communicating Cybersecurity to Non-Technical Stakeholders
Technical knowledge alone isn’t enough. As a cybersecurity analyst, your ability to explain threats, risks, and remediation strategies to non-technical audiences can make or break your effectiveness.…
Core Cybersecurity Foundations You Need Before You Start
Before we dive into tools, techniques, and frameworks, it’s important to make sure your foundational knowledge is solid. In this episode, we review the essential cybersecurity concepts that every CySA+ candidate should understand before tackling more advanced material.…