All Episodes
Displaying 221 - 240 of 340 in total
Episode 221: Developing and Executing Security Awareness Programs (Domain 5)
Security awareness programs don’t happen by accident—they’re built with intent, tested with feedback, and refined over time. In this final episode of the series, we wa...
Welcome to the SEC+ Audio Course
Dive into a fast, no-fluff overview of what this podcast delivers, who it’s for, and how each episode helps you level up with practical, real-world takeaways. In this ...
SY0-801 at a Glance: What Changed from Security+ 701 (Intro)
This episode introduces the SY0-801 version of Security+ by explaining how the exam direction moves beyond traditional baseline security topics into modern cloud opera...
How to Study with an Audio-First Security+ Plan (Intro)
This episode explains how to use an audio-first study plan to build recall, reinforce weak areas, and connect exam objectives to practical security scenarios. For Secu...
Defense in Depth: Layering Controls So One Failure Doesn’t Sink You (1.1)
This episode explains defense in depth as the practice of using multiple overlapping controls so a single failure does not expose the entire organization. For the exam...
CIA and AAA: The Core Security Models (1.1)
This episode covers two foundational security models that appear throughout Security+: CIA and AAA. Confidentiality protects information from unauthorized access, inte...
Non-Repudiation, Least Privilege, and Trust Decisions (1.1)
This episode explains non-repudiation, least privilege, and trust decisions as core principles behind secure design and accountability. Non-repudiation means there is ...
Zero Trust Principles: Never Trust, Always Verify (1.1)
This episode introduces Zero Trust as a security model based on continuous verification, least privilege, and the assumption that compromise may already exist inside o...
Control Categories and Control Types (1.1)
This episode explains how security controls are grouped by category and by function, which is a common Security+ exam pattern. Technical controls use systems or tools,...
Change Management: Why Security Breaks During Normal Updates (1.2)
This episode explains why normal system changes can create security problems even when no attacker is involved. For Security+ preparation, change management should be ...
CABs, Approvals, Ownership, and Stakeholders (1.2)
This episode covers the people and approval structures that help manage change risk, including change advisory boards, change owners, technical approvers, business sta...
Impact Analysis, Test Results, and Maintenance Windows (1.2)
This episode explains how impact analysis, testing, and maintenance windows reduce the security and operational risk of production changes. Impact analysis identifies ...
Backout Plans vs. Fail Forward: Recovering from Bad Changes (1.2)
This episode explains two common recovery strategies used when a change causes problems: backing out and failing forward. A backout plan returns the environment to a k...
Technical and Documentation Impacts of Change (1.2)
This episode covers the technical and documentation effects that often follow a change, especially when security controls, access rules, or system dependencies are mod...
PKI Foundations: Public Keys, Private Keys, and Trust (1.3)
This episode introduces public key infrastructure as a trust system that supports encryption, authentication, digital signatures, and secure communication. Public keys...
Certificates and Certificate Authorities (1.3)
This episode explains what digital certificates prove and how certificate authorities help establish trust between systems, users, applications, and websites. A certif...
Revocation and Validation: CRLs, OCSP, and Trust Problems (1.3)
This episode explains why certificates sometimes must be revoked before their normal expiration date and how systems check whether a certificate should still be truste...
CSRs, Wildcards, Root of Trust, and Key Escrow (1.3)
This episode covers certificate signing requests, wildcard certificates, root of trust concepts, and key escrow. A certificate signing request is generated when an org...
Symmetric vs. Asymmetric Encryption (1.3)
This episode compares symmetric and asymmetric encryption by focusing on how each method is used in practical security designs. Symmetric encryption uses the same secr...
Encryption Levels: Disk, File, Volume, Database, and Record (1.3)
This episode explains where encryption can be applied and what each level protects. Full-disk encryption protects an entire drive when a device is powered off or stole...