Find the exact control, technique, lesson, or book.

Deep Dive into NIST Cybersecurity Framework (CSF)

Listen to Deep Dive into NIST Cybersecurity Framework (CSF) in the ISACA CISM audio course.

Define Cybersecurity Objectives That Truly Support Business Outcomes (Task 19)

Listen to Define Cybersecurity Objectives That Truly Support Business Outcomes (Task 19) in the ISACA CCOA audio course.

Define Foundations of Cybersecurity and Why Security Matters to Business

Listen to Define Foundations of Cybersecurity and Why Security Matters to Business in the GIAC GISF audio course.

Essential Terms Plain Language Glossary for Core Cybersecurity Vocabulary

Listen to Essential Terms Plain Language Glossary for Core Cybersecurity Vocabulary in the ISC2 Certified in Cybersecurity (CC) audio course.

Map Assets, Threats, Vulnerabilities, and Controls with Foundations of Cybersecurity

Listen to Map Assets, Threats, Vulnerabilities, and Controls with Foundations of Cybersecurity in the GIAC GISF audio course.

Measure Cybersecurity Effectiveness Using KRIs Dashboards Scorecards and Reports

Listen to Measure Cybersecurity Effectiveness Using KRIs Dashboards Scorecards and Reports in the ISC2 Certified in Cybersecurity (CC) audio course.

Spaced Retrieval Review: Cybersecurity Principles and Risk in One Narrative (Task 18)

Listen to Spaced Retrieval Review: Cybersecurity Principles and Risk in One Narrative (Task 18) in the ISACA CCOA audio course.

Spaced Retrieval: Foundations of Cybersecurity and Risk Fundamentals Rapid Recall

Listen to Spaced Retrieval: Foundations of Cybersecurity and Risk Fundamentals Rapid Recall in the GIAC GISF audio course.

Translate Security Policies, Standards, and Procedures into Everyday Cybersecurity Actions

Listen to Translate Security Policies, Standards, and Procedures into Everyday Cybersecurity Actions in the GIAC GISF audio course.

Use Cybersecurity Models to Think Clearly: Defense Layers and Zero Trust (Task 4)

Listen to Use Cybersecurity Models to Think Clearly: Defense Layers and Zero Trust (Task 4) in the ISACA CCOA audio course.

NIST Cybersecurity Framework

The NIST Cybersecurity Framework organizes cybersecurity outcomes so organizations can understand current capability, identify priorities, communicate risk, and improve over time.

Certified in Cybersecurity (CC) Practice

Build confidence in the fundamentals, including governance, access, cloud, and response. Uses the September 2026 outline.

ISC2 Certified in Cybersecurity (CC) Flashcards

Use the flashcards book for active recall, terminology checks, rapid review, and repeated practice across the course objectives.

ISC2 Certified in Cybersecurity (CC) Study Guide

Use the companion study guide to organize the material, compare important concepts, annotate key ideas, and build a written reference for review.

Mastering Cybersecurity

A broad professional foundation covering threats, cryptography, networks, applications, cloud, privacy, forensics, risk, and incident response.

The Comprehensive Guide to Cybersecurity's Most Infamous Hacks

Seventy case studies of consequential cyberattacks, organized to preserve practical lessons for defenders, leaders, and students.

The Cybersecurity Guide to Governance, Risk, and Compliance

A practical guide to connecting governance, risk, compliance, controls, assurance, and organizational decision-making.

Bios, Chips, and Implants: Cybersecurity When the Endpoint Is a Human

The first time it comes up, it is usually not in a security steering committee. It is a plant engineer whose exoskeleton needs a firmware update, an executive with a cardiac implant asking about airport scanners, or a line manager wondering whether smart safety helmets are allowed on the factory floor Wi-Fi.

AI in Cybersecurity (Part 2): Offense

AI is no longer just a tool for cyber defense—it has become a powerful weapon for attackers, automating and scaling threats in ways we’ve never seen before. In this episode, I break down how offensive AI is reshaping cyber warfare, from deepfake-powered social engineering to AI-driven phishing campaigns that adapt in real time. We explore the rise of autonomous malware, where AI enables threats to evolve, evade…

Firewalls and Frontlines: Cybersecurity in the Age of Digital Warfare

In this episode of BareMetalCyber, we dive deep into the emerging frontlines of digital warfare, where traditional weapons have given way to malicious code and covert cyber operations. As nations increasingly turn to cyber espionage, sabotage, and sophisticated AI-driven attacks, the lines between crime, warfare, and espionage blur—placing everyday citizens and critical infrastructure directly in the crossfire.…

Setting the Trap: Honeypots in Cybersecurity

In this episode of Dot One, we explore honeypots, the sly decoys that trick attackers into revealing their moves while keeping your real systems safe. These fake servers or databases snag data on everything from malware drops to brute-force hacks, giving you a front-row seat to the bad guys’ playbook. We’ll dive into how they spot threats early, distract attackers, and supercharge your threat intel—plus keep you…

Welcome to Mastering Cybersecurity!

Zero Trust Architecture: Reimagining Cybersecurity Strategies

In this episode of Dot One, we dive into Zero Trust Architecture (ZTA), a security model that is transforming the way organizations defend against modern cyber threats. Unlike traditional security approaches that assume trust within a network perimeter, Zero Trust operates under the principle of "never trust, always verify." We explore the key components of Zero Trust, including identity verification…

Building Your Own Cybersecurity Lab Environment

Hands-on practice is essential for CySA+ success, and that means having your own lab environment. In this episode, we help you build one using tools you can install on your own laptop, run in the cloud, or deploy in virtual machines.…