Certified: The ISACA CISA Audio Course
The Bare Metal Cyber CISA Audio Course is a comprehensive exam-focused companion for mastering the Certified Information Systems Auditor (CISA) certification. Designed for IT auditors, security professionals, and governance specialists, it transforms the ISACA exam blueprint into over one hundred clear, structured episodes. Each lesson delivers practical explanations and real-world context across all five CISA domains, including audit processes, IT governance, systems acquisition, operations, resilience, and information asset protection. The course helps learners understand key audit principles, retain critical terminology, and apply knowledge with confidence.
Episodes
Episode 1: Welcome to the CISA Certification
Start your CISA journey with a clear understanding of what the certification is, why it matters, and how it can transform your career in IT audit. This episode introduces the exam's structure, the benefits of certification, and what you can expect from the Prepcast series to help you succeed. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 2: Understanding ISACA and Key Resources
In this episode, we explore ISACA—the organization behind the CISA—and the essential study tools it provides. You'll learn how to use the official review manual, question database, and support resources to build a winning study strategy aligned with the exam objectives. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 3: Proven Strategies for Passing the CISA Exam
Get equipped with practical, actionable study strategies to tackle the CISA exam with confidence. This episode covers planning, retention techniques, practice question usage, and how to identify your weak spots before test day. It’s focused entirely on building the habits that lead to success. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 4: Critical Exam Tips, Test-taking Strategies, and Common Pitfalls
Learn how to avoid the most common CISA exam mistakes and apply time-tested test-taking strategies. From managing time to breaking down tricky questions, this episode is designed to help you stay sharp, focused, and in control during the exam. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 5: Final Review – Summary of Key Concepts Across All Domains
This episode gives you a high-level review of the most tested concepts across all five CISA domains. If you need a solid refresh or want to verify that your prep is on track, this targeted summary reinforces what you need to know most. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 6: Exam-Day Preparation – What to Expect and How to Prepare Mentally
Exam day can be stressful, but it doesn’t have to be. This episode walks you through everything from logistics and ID requirements to mental strategies and pacing, so you're ready to perform at your best. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 7: Overview of Domain 1 – Information Systems Auditing Process
Domain 1 is the foundation of the CISA exam. In this episode, we break down what IS auditing means, how it fits into the bigger picture of IT governance, and what the exam expects you to understand about audit roles, risk, and controls. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 8: IS Audit Standards, Guidelines, and Codes of Ethics
Know the rules before you’re tested on them. This episode covers the ISACA audit standards and ethics you’ll need to master for Domain 1. You’ll learn what to memorize, how these principles shape audits, and why they matter for exam questions. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 9: Types of Audits, Assessments, and Reviews
Not all audits are the same. This episode teaches you how to distinguish between audit types—compliance, financial, operational, and more—so you can answer CISA questions with clarity. Learn the nuances that the exam loves to test. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 10: Fundamentals of Risk-Based Audit Planning
Risk-based planning is at the core of IT auditing and a major theme on the CISA exam. This episode covers how to prioritize audits, identify risks, and design audit scopes that align with business impact—all framed for what you need to know to pass. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 11: Advanced Risk Assessment Methods and Practical Examples
Understanding risk is a cornerstone of the CISA exam, and this episode takes you beyond the basics. You’ll explore advanced techniques such as scenario-based analysis, quantitative vs. qualitative risk scoring, and how to apply them in real audit environments. Through practical examples, we connect these methods to the types of audit planning decisions you’ll be tested on. This deep dive
Episode 12: Types of Controls and Audit Considerations
The CISA exam tests your ability to evaluate and differentiate between control types—preventive, detective, corrective, and compensating. This episode breaks down each control category, explains when and how they’re used, and ties them to audit objectives. We also explore the difference between design and operational effectiveness, a key area where exam questions often challenge candidate
Episode 13: Audit Project Management
CISA candidates must not only understand audits—they must also understand how to manage them. This episode outlines the core principles of audit project management, including setting timelines, assigning resources, monitoring progress, and addressing unexpected changes. You’ll learn how to apply project management techniques to real audit environments and understand how these tasks align
Episode 14: Audit Testing and Sampling Methodology
Sampling is a heavily tested concept, and many CISA candidates struggle to distinguish between statistical and judgmental sampling. This episode demystifies sampling strategy, explains how to choose the right sample size, and shows you how to interpret sample-based results accurately. You'll also learn how testing ties directly into audit objectives. If you're unsure how to approach audit
Episode 15: Audit Evidence Collection Techniques
Effective audits rely on strong, defensible evidence. In this episode, we explore how to gather evidence using inquiry, observation, inspection, and re-performance. You'll learn how to assess evidence sufficiency, reliability, and relevance—three key terms you’ll see on the exam. We also discuss the auditor’s professional judgment in deciding which method to use and when. These foundation
Episode 16: Introduction to Audit Data Analytics Tools and Techniques
Modern audits demand more than checklists—they require smart use of data. This episode introduces audit data analytics, explains the types of analytics (descriptive, diagnostic, predictive), and outlines how tools like ACL and IDEA support audit objectives. You’ll also learn how data analytics supports risk-based auditing, improves coverage, and enhances evidence quality—core areas for CI
Episode 17: Practical Applications and Case Studies of Audit Data Analytics
To truly master data analytics, you need to see it in action. This episode presents real-world examples and case studies showing how data analytics is used in fraud detection, operational audits, and compliance testing. You’ll understand the workflow from data extraction to final analysis and learn how CISA exam questions might present similar scenarios. It’s a high-value session that con
Episode 18: Audit Reporting and Communication Techniques
Communicating audit results effectively is critical for both real-world auditors and CISA exam success. This episode teaches you how to write clear findings, structure reports logically, and deliver recommendations that management can act on. We’ll also explore techniques for presenting sensitive results diplomatically—a key soft skill that shows up in audit reporting scenarios on the tes
Episode 19: Quality Assurance and Improvement of Audit Processes
ISACA expects CISA-certified professionals to uphold audit quality through structured QA practices. In this episode, we explore internal reviews, peer assessments, and continuous improvement models that strengthen the audit function. You'll learn how quality metrics are defined, how findings are tracked, and how QA fits into the professional standards you’ll be tested on. This is a vital
Episode 20: Overview of Domain 2 – Governance of IT
Domain 2 shifts your focus from audit execution to how IT supports business objectives. This episode provides a strategic overview of IT governance principles, roles and responsibilities, and how auditors assess the effectiveness of governance frameworks. You'll gain a preview of the domain’s major topics—including risk management, IT strategy, and compliance—so you can prepare to master
Episode 21: Overview of Domain 2 – Management of IT
Domain 2 doesn’t stop at governance—it also expects you to understand IT management practices. This episode introduces the key responsibilities of IT leaders, including resource allocation, vendor oversight, performance monitoring, and quality assurance. You’ll gain clarity on how management supports governance goals and what you’ll need to know for CISA exam questions on IT operations. R
Episode 22: Laws, Regulations, and Industry Standards
The CISA exam expects you to recognize and apply legal, regulatory, and industry-specific requirements to audit scenarios. This episode explores major compliance drivers like GDPR, HIPAA, and SOX, and explains how auditors assess adherence to these standards. You’ll also learn how to distinguish between laws, regulations, and frameworks—a critical distinction for exam success. Ready to st
Episode 23: Organizational Structure, IT Governance, and IT Strategy
A solid grasp of organizational structure is key to evaluating IT governance. This episode walks you through reporting lines, governance committees, roles like CIO and CISO, and how strategy aligns with structure. You’ll also learn what the CISA exam expects you to know about evaluating the effectiveness of governance models. Ready to start your journey with confidence? Learn more at Bare
Episode 24: IT Policies, Standards, Procedures, and Practices
Policies and standards form the backbone of IT governance, and this episode helps you understand how auditors evaluate their design, communication, and enforcement. You’ll explore the differences between policies, procedures, and guidelines, and how each supports control objectives—critical distinctions the CISA exam frequently tests. Ready to start your journey with confidence? Learn mor
Episode 25: Enterprise Architecture and Considerations
Enterprise Architecture (EA) connects IT design to business strategy, and the CISA exam wants you to evaluate how well it supports organizational goals. In this episode, you’ll learn the components of EA, including frameworks like TOGAF, and how auditors assess EA governance, integration, and documentation across the enterprise. Ready to start your journey with confidence? Learn more at B
Episode 26: ERM Frameworks and Principles
Enterprise Risk Management (ERM) is a key pillar of IT governance. This episode explains risk frameworks like COSO ERM and ISO 31000 and shows how auditors evaluate the structure, roles, and processes of ERM programs. You’ll gain a clear understanding of how strategic risk management connects with audit objectives on the CISA exam. Ready to start your journey with confidence? Learn more a
Episode 27: ERM Implementation and Evaluation Examples
Building on the last episode, we now focus on how ERM is implemented and assessed. Through audit-relevant examples, you’ll learn how to evaluate risk ownership, review program maturity, and assess documentation quality. This practical insight will prepare you for case-based questions that test your understanding of ERM in action. Ready to start your journey with confidence? Learn more at
Episode 28: Privacy Program and Principles
Data privacy is no longer optional—it’s a regulatory and reputational imperative. This episode covers privacy frameworks, laws, and controls auditors must assess during evaluations. You'll also learn how to audit privacy program design, policy enforcement, and data protection measures, all aligned with CISA Domain 2 objectives. Ready to start your journey with confidence? Learn more at Ba
Episode 29: Data Governance Program Fundamentals
Governance doesn’t stop at systems—it includes data. This episode explores how data is owned, classified, and controlled across the enterprise. You’ll learn how to evaluate governance roles, policies, and procedures related to data quality, security, and accountability, which are all highly relevant to CISA exam questions. Ready to start your journey with confidence? Learn more at BareMet
Episode 30: Practical Data Classification Techniques and Compliance
Data classification is a key input to effective security and compliance auditing. In this episode, you’ll learn how to evaluate classification policies, review labeling and access controls, and understand how classification ties into privacy, retention, and audit scope. It’s a critical concept for mastering both Domains 2 and 5. Ready to start your journey with confidence? Learn more at B
Episode 31: IT Resource Management
Resource management is foundational to IT governance, and the CISA exam tests your ability to evaluate how organizations allocate, monitor, and optimize people, hardware, software, and funding. This episode walks you through how auditors assess resource alignment with business objectives, identify misallocations, and verify that capacity planning is realistic and well-documented. Ready to
Episode 32: IT Vendor Management
Managing third-party risk is a key topic on the CISA exam, and this episode dives into how to audit vendor selection, onboarding, performance evaluation, and contract compliance. You'll learn how to assess risk from service providers, examine contract clarity, and ensure that controls are in place to manage vendor performance effectively across the lifecycle. Ready to start your journey w
Episode 33: IT Performance Monitoring and Reporting
Audit success depends on knowing how to evaluate IT performance. This episode explains how key performance indicators (KPIs) and reports are used to measure service delivery, support governance goals, and drive corrective action. You’ll learn how to assess the accuracy, relevance, and alignment of performance data with business strategy—just like the CISA exam will test. Ready to start yo
Episode 34: Quality Assurance and Quality Management of IT
The CISA exam expects candidates to understand how IT quality is planned, implemented, and improved over time. This episode covers quality assurance policies, continuous improvement practices, metrics, and reviews. You’ll learn how to audit the effectiveness of IT quality management frameworks and ensure they support reliable and consistent service delivery. Ready to start your journey wi
Episode 35: Overview of Domain 3 – Information Systems Acquisition, Development & Implementation
Domain 3 focuses on the controls and governance involved in acquiring and implementing IT solutions. This episode provides a strategic overview of project governance, system development methodologies, and how these elements align with audit objectives. If you're looking to understand what ISACA expects from auditors in development environments, this is your starting point. Ready to start
Episode 36: Project Governance and Management
Project governance ensures IT initiatives deliver value and align with business goals. This episode covers how auditors evaluate project oversight, milestone tracking, risk management, and stakeholder involvement. You'll also learn how to audit project management methodologies like PMBOK and Agile, which the CISA exam often references in Domain 3 scenarios. Ready to start your journey wit
Episode 37: Business Case and Feasibility Analysis
Before a project begins, auditors must evaluate whether it’s justified. This episode focuses on auditing business case development, feasibility assessments, and benefit realization. You'll learn how to assess whether proposed IT investments align with strategic goals and whether cost, risk, and return have been properly considered—core concepts in Domain 3. Ready to start your journey wit
Episode 38: Waterfall and Traditional SDLC
Understanding the traditional software development lifecycle is essential for CISA candidates. This episode explains each phase of the waterfall model and the corresponding audit controls. You'll learn how to evaluate documentation, testing, change controls, and stakeholder approvals, all of which are commonly tested under Domain 3 of the CISA exam. Ready to start your journey with confid
Episode 39: Agile, DevOps, and Modern SDLC Approaches
Agile and DevOps are increasingly popular in IT development, and the CISA exam expects you to understand how to audit these environments. This episode explains how control requirements shift in iterative, fast-paced delivery models. You'll learn how to audit sprints, CI/CD pipelines, backlog grooming, and quality gates in flexible but compliant ways. Ready to start your journey with confi
Episode 40: Control Identification and Design
Strong control design starts early in the system lifecycle. In this episode, you'll learn how auditors assess whether appropriate controls have been identified and designed during planning, development, and implementation. From input validation to segregation of duties, this session aligns closely with Domain 3 control objectives and audit best practices. Ready to start your journey with
Episode 41: System Readiness and Implementation Testing
Before a new system goes live, auditors must confirm that it’s ready for production. This episode explains how to evaluate readiness through testing, validation, and stakeholder approvals. You’ll learn how to assess user acceptance testing (UAT), implementation criteria, and go/no-go decisions—all key exam topics in Domain 3. Ready to start your journey with confidence? Learn more at Bare
Episode 42: Implementation Configuration and Release Management
Poor configuration control can lead to outages, vulnerabilities, and audit findings. In this episode, we cover how to evaluate release planning, version control, rollback procedures, and configuration documentation. You’ll understand how to audit change approvals and production readiness, giving you the tools to answer configuration-related questions with confidence. Ready to start your j
Episode 43: System Migration, Infrastructure Deployment, and Data Conversion
CISA candidates must understand the risks and controls involved in moving systems and data. This episode explains how to audit system migrations, infrastructure rollouts, and data conversion processes. You’ll learn how to identify red flags during transitions and verify that testing, backups, and validation controls are in place. Ready to start your journey with confidence? Learn more at
Episode 44: Post-Implementation Review
Once a system is deployed, the work isn’t over—auditors still need to assess whether objectives were achieved. This episode teaches you how to conduct a post-implementation review, evaluate project outcomes, assess stakeholder satisfaction, and document lessons learned. It’s a must-know process for Domain 3 exam questions. Ready to start your journey with confidence? Learn more at BareMet
Episode 45: Overview of Domain 4 – Information Systems Operations & Business Resilience
Domain 4 shifts focus to the reliability and sustainability of IT operations. In this episode, you’ll gain an overview of operational controls, availability, service delivery, incident response, and business continuity. We highlight what ISACA wants you to know about managing daily operations and preparing for disruptions. Ready to start your journey with confidence? Learn more at BareMet
Episode 46: IT Components
Understanding the elements that make up the IT environment is essential for audit readiness. This episode breaks down how to evaluate the hardware, software, network, and data assets that support critical business processes. You’ll also learn how to audit system dependencies and asset configuration controls, all mapped to Domain 4 objectives. Ready to start your journey with confidence? L
Episode 47: IT Asset Management
IT asset management is more than keeping an inventory—it’s about control, accountability, and lifecycle oversight. In this episode, you’ll learn how to audit asset acquisition, tagging, usage, and disposal. We also explore how asset management intersects with compliance and risk, making it a key topic for your CISA exam prep. Ready to start your journey with confidence? Learn more at Bare
Episode 48: Job Scheduling and Production Process Automation
This episode covers how auditors evaluate job scheduling systems, batch processing, and automated task workflows. You’ll learn how to assess controls for error handling, reprocessing, and change approval—all of which are frequently tested in Domain 4 scenarios involving IT operations and reliability. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 49: System Interfaces
When systems talk to each other, auditors must ensure that the communication is controlled and secure. This episode explores interface types (manual and automated), error checking, data reconciliation, and exception handling. You’ll gain clarity on how to audit inter-system interactions—knowledge that’s essential for Domain 4. Ready to start your journey with confidence? Learn more at Bar
Episode 50: Shadow IT and End-User Computing
Shadow IT introduces risk outside the view of central IT. In this episode, you will learn how to identify and audit unauthorized tools, spreadsheets, applications, and systems created by business units. We also cover end-user computing controls, policies, and monitoring, which are increasingly tested in Domain 4 scenarios. Ready to start your journey with confidence? Learn more at BareMet
Episode 51: Systems Availability and Capacity Management
Auditors must verify that IT systems are designed and managed to meet performance demands. This episode explores how to evaluate availability strategies, capacity planning, monitoring tools, and escalation processes. Learn how these elements support operational resilience and how they appear in Domain 4 exam questions. Ready to start your journey with confidence? Learn more at BareMetalCy
Episode 52: Incident Management Best Practices
When things go wrong, incident management ensures that services are restored quickly and effectively. This episode explains how to audit detection procedures, escalation paths, incident logs, and resolution workflows. You will learn how incident response aligns with audit standards and how these topics are framed in the CISA exam. Ready to start your journey with confidence? Learn more at
Episode 53: Problem Management and Root Cause Analysis
Problem management focuses on eliminating the underlying causes of incidents. In this episode, you will learn how to audit problem detection, investigation, root cause analysis, and resolution tracking. We also cover the importance of documentation and trend analysis, which are key areas for Domain 4 exam preparation. Ready to start your journey with confidence? Learn more at BareMetalCyb
Episode 54: Change Management Processes
Effective change management minimizes disruption and maintains control over the IT environment. This episode walks you through change request procedures, approval workflows, emergency change handling, and audit trail verification. Mastering these elements is essential for answering CISA questions on change governance. Ready to start your journey with confidence? Learn more at BareMetalCyb
Episode 55: Configuration and Patch Management Processes
Configuration and patch controls are essential for system stability and security. In this episode, you will learn how to audit configuration baselines, patch deployment processes, exception handling, and rollback procedures. These controls are highly relevant for questions involving system hardening and change assurance. Ready to start your journey with confidence? Learn more at BareMetal
Episode 56: Operational Log Management
Logs provide critical evidence for detecting incidents and monitoring system health. This episode explains how to audit log collection, retention, analysis, and alerting mechanisms. You will also learn how auditors evaluate whether logs support accountability, forensics, and compliance with organizational policies. Ready to start your journey with confidence? Learn more at BareMetalCyber.
Episode 57: IT Service Level Management
Service level agreements define performance expectations between IT and the business. In this episode, you will learn how to audit SLA creation, monitoring, breach handling, and vendor service reporting. These concepts are tested frequently in Domain 4, especially in questions that examine governance and performance alignment. Ready to start your journey with confidence? Learn more at Bar
Episode 58: Database Management Practices
Databases are central to most IT operations, and auditors must ensure they are managed securely and efficiently. This episode covers access controls, backup procedures, configuration changes, and performance optimization. You will gain insight into how to audit database environments using the lens of confidentiality, integrity, and availability. Ready to start your journey with confidence
Episode 59: Overview of Business Resilience
Business resilience ensures that critical operations can continue through disruption. This episode introduces the core concepts of business continuity, disaster recovery, redundancy, and failover. You will learn how to evaluate resilience strategies and how they relate to the audit objectives covered in Domain 4 and beyond. Ready to start your journey with confidence? Learn more at BareMe
Episode 60: Conducting a Business Impact Analysis (BIA)
The business impact analysis is a foundational activity in resilience planning. In this episode, you will learn how to audit BIA processes, assess documentation of critical functions, and evaluate recovery time and recovery point objectives. CISA candidates must understand how to validate BIA results and tie them to continuity plans. Ready to start your journey with confidence? Learn more
Episode 61: System and Operational Resilience
Operational resilience is about sustaining essential services under stress. This episode explains how auditors evaluate systems for fault tolerance, high availability, and continuous operation. You will learn how to assess risk mitigation strategies, redundancy planning, and the effectiveness of proactive monitoring. These areas are core to Domain 4 exam questions. Ready to start your jou
Episode 62: Data Backup, Storage, and Restoration Practices
Backup and restoration processes are critical for protecting data integrity and ensuring continuity. In this episode, you will learn how to evaluate backup frequency, storage media security, offsite storage protocols, and restoration testing. Understanding these controls is essential for CISA exam topics related to recovery readiness and operational risk. Ready to start your journey with
Episode 63: Developing and Maintaining a Business Continuity Plan
Business continuity planning ensures the organization can operate during and after disruptions. This episode explains how auditors evaluate continuity plan development, critical process identification, training, and documentation. You will also learn how plans are tested and updated to remain effective under real-world conditions. Ready to start your journey with confidence? Learn more at
Episode 64: Disaster Recovery Planning Fundamentals
Disaster recovery focuses on restoring IT systems after an outage or catastrophic event. In this episode, you will learn how to audit DR plans, assess backup infrastructure, evaluate recovery site readiness, and verify testing procedures. DR planning is a key area of the CISA exam, especially for questions on system availability and continuity. Ready to start your journey with confidence?
Episode 65: Overview of Domain 5 – Protection of Information Assets
Domain 5 is all about securing information against unauthorized access, alteration, or loss. This episode provides a strategic overview of confidentiality, integrity, and availability principles and introduces the areas covered by this domain. You will see how security audits connect with governance, operations, and compliance. Ready to start your journey with confidence? Learn more at Ba
Episode 66: Information Asset Security Frameworks, Standards, and Guidelines
Security frameworks provide the structure for implementing effective controls. In this episode, you will learn how to evaluate ISO 27001, NIST, COBIT, and organizational guidelines. You will also explore how auditors assess alignment with policies and determine whether information protection is governed effectively. Ready to start your journey with confidence? Learn more at BareMetalCyber
Episode 67: Physical and Environmental Controls
Physical security is a foundational element of protecting information systems. This episode covers perimeter defenses, badge access, fire suppression, climate control, and secure equipment disposal. You will learn how to evaluate the effectiveness of these controls and how questions about physical risks show up on the CISA exam. Ready to start your journey with confidence? Learn more at B
Episode 68: Identity and Access Management (IAM)
Access control is a critical concept tested throughout the CISA exam. In this episode, you will learn how to audit identity provisioning, authentication mechanisms, access reviews, and privilege management. Understanding IAM controls will help you confidently address scenarios involving security, compliance, and fraud prevention. Ready to start your journey with confidence? Learn more at
Episode 69: Network and Endpoint Security
Network and endpoint security controls are essential for protecting IT infrastructure. This episode explains how to audit firewalls, intrusion detection systems, antivirus software, and patching procedures. You will also learn how to assess monitoring practices and system hardening strategies for Domain 5. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 70: Data Loss Prevention
Data loss prevention (DLP) tools and policies help prevent unauthorized exposure of sensitive information. In this episode, you will learn how to evaluate DLP strategy, endpoint protections, outbound filtering, and audit logging. This is a highly tested topic that connects information protection with compliance and incident response. Ready to start your journey with confidence? Learn more
Episode 71: Data Encryption Methods and Controls
Encryption is one of the most powerful tools for protecting sensitive data. This episode explains how to audit encryption in transit and at rest, evaluate key management practices, and assess alignment with organizational policies and legal requirements. These concepts are essential for Domain 5 and appear frequently in security-related CISA exam questions. Ready to start your journey wit
Episode 72: Public Key Infrastructure (PKI)
Public Key Infrastructure supports digital trust by enabling secure authentication and communication. In this episode, you will learn how to audit PKI components, such as certificate authorities, digital signatures, and key lifecycles. Understanding how PKI works and how to evaluate its controls is vital for passing Domain 5. Ready to start your journey with confidence? Learn more at Bare
Episode 73: Cloud and Virtualized Environments
Cloud and virtual systems require unique controls and audit approaches. This episode focuses on how to evaluate cloud security, shared responsibility models, virtual machine management, and containerization. You will also explore how to assess compliance and data protection within cloud-based infrastructures. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 74: Mobile, Wireless, and IoT Device Security
Endpoint diversity brings complexity to audits. In this episode, you will learn how to evaluate controls for mobile devices, wireless networks, and Internet of Things technologies. Topics include encryption, mobile device management, authentication, and endpoint hardening, all of which are relevant to CISA Domain 5. Ready to start your journey with confidence? Learn more at BareMetalCyber
Episode 75: Security Awareness Training and Programs
Human error is a top cause of security breaches. This episode covers how to evaluate security awareness training programs, including content quality, delivery methods, tracking, and feedback mechanisms. You will also learn how to link training effectiveness with audit findings and policy compliance. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 76: Information System Attack Methods and Techniques
To audit effectively, you must understand how systems are attacked. This episode introduces common techniques such as phishing, malware, denial of service, and SQL injection. You will learn how to assess organizational preparedness and how this knowledge applies to audit procedures and CISA scenario questions. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 77: Security Testing Tools and Techniques
Security testing reveals weaknesses before attackers can exploit them. This episode explains how to audit vulnerability scanning, penetration testing, static code analysis, and system hardening. You will also learn how to interpret test results and validate remediation, which are common elements in Domain 5 questions. Ready to start your journey with confidence? Learn more at BareMetalCyb
Episode 78: Security Monitoring Tools and Techniques
Ongoing monitoring is vital for detecting and responding to threats. In this episode, you will explore how to evaluate log management, SIEM systems, network monitoring tools, and intrusion detection. Auditors must assess coverage, alerting capabilities, and response documentation to support Domain 5 objectives. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 79: Security Incident Response Management
Incident response is a structured process that minimizes damage and recovers operations. This episode covers detection, escalation, containment, recovery, and reporting. You will learn how to evaluate incident handling procedures, assess team readiness, and align response plans with audit requirements. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Episode 80: Evidence Collection and Digital Forensics
Auditors may need to evaluate how evidence is preserved and used in investigations. This episode introduces forensic readiness, chain of custody, data integrity controls, and tool validation. You will also explore how forensic practices align with legal requirements and audit objectives in Domain 5. Ready to start your journey with confidence? Learn more at BareMetalCyber.com.
Recommended
100 With The Hunter's
10-41: A UCSO Podcast
108.3 WGKSRADIO DEEP HOUSE PARTY
10 at a Time
10Fold Founders
10% Happier with Dan Harris
10-Minute Contrarian
10 Minutes Korean - Learn Korean & English Naturally
10 Minutes with Jesus
10 Minute Teacher Podcast with Cool Cat Teacher
10 minutos con Jesús
10th Floor Podcasts
