Certified: The CompTIA Security+ Audio Course

Once vulnerabilities are identified, the next challenge is determining which ones require immediate action—and that’s where vulnerability analysis and prioritization come in. In this episode, we explore how to confirm whether a vulnerability is real (not a false positive), determine its potential impact, and assess exploitability in the context of your specific environment. Not every high-severity...

Auditing is how security teams verify that controls are working, policies are being followed, and no one is operating outside expected behavior—and in this episode, we explore both system and process auditing in depth. System audits focus on configurations, permissions, and change logs—ensuring that operating systems, devices, and applications remain in a secure, known state. Process audits, on th...

Continuing our exploration of how vulnerabilities are identified, this episode focuses on external and community-driven methods, including penetration testing, bug bounty programs, responsible disclosure, and open-source intelligence (OSINT). Penetration testing simulates real-world attack scenarios—often with limited knowledge—to uncover exploitable weaknesses that automated scanners might miss,...

Finding vulnerabilities before attackers do is a core function of modern cybersecurity, and this episode explores the technical methods used to identify them early and accurately. We begin with vulnerability scanning—automated tools that assess systems for known weaknesses, configuration flaws, and missing patches, often using regularly updated databases and scoring systems like CVSS. We also disc...

Data retention policies define what data must be kept, for how long, and under what security controls—and when they’re done right, they strike a balance between legal obligations, operational needs, and security. In this episode, we explore how organizations develop and enforce data retention practices that comply with regulations like GDPR, HIPAA, or PCI-DSS while also avoiding unnecessary data h...

When assets reach the end of their lifecycle, they don’t just disappear—they become potential liabilities if not securely decommissioned. In this episode, we explore the processes and tools used for secure asset disposal, including data sanitization, cryptographic wiping, degaussing, and physical destruction. We also discuss how improperly retired systems—like old servers, network devices, or hard...

Security begins with visibility, and that means knowing what devices, systems, and software exist within your environment at all times. In this episode, we dive into asset monitoring and tracking, emphasizing the importance of real-time discovery tools, agent-based scanning, and centralized asset inventories that support security monitoring, patch management, and incident response. We also explore...

To manage risk effectively, organizations must know what they own, who is responsible for it, and how critical it is—this is the basis of asset assignment, ownership, and classification. In this episode, we discuss the importance of tagging and tracking assets, designating accountable owners, and classifying systems and data based on sensitivity and function. Ownership enforces accountability: eve...

Security doesn’t start when a system is installed—it begins during the procurement process. In this episode, we examine how secure acquisition strategies reduce long-term risk by vetting vendors, establishing supply chain transparency, and embedding cybersecurity requirements in contracts and service-level agreements (SLAs). We discuss how organizations should assess the security posture of suppli...

Isolation and monitoring form a defensive pairing that not only limits the spread of threats but enables rapid detection and response. In this episode, we discuss isolation technologies like sandboxing, virtualization, and containerization, which allow untrusted or risky code to run without impacting the host system. We then move into monitoring practices at both the host and network levels, empha...

Applications are often the most exposed layer of an organization’s attack surface, and defending them requires both proactive development practices and reactive protection mechanisms. In this episode, we review essential application security concepts including input validation, secure cookie handling, and session management to prevent injection attacks, cross-site scripting (XSS), and session hija...

As wireless threats become more sophisticated, organizations must move beyond basic security measures and implement advanced techniques to protect access points and users. In this episode, we cover the use of WPA3 for stronger encryption and resistance to brute-force attacks, along with 802.1X authentication backed by RADIUS servers for identity-based access control. We explore the use of digital...

Mobile devices connect through a variety of channels—cellular networks, Wi-Fi, and Bluetooth—each with its own risks and requirements for secure operation. In this episode, we examine the vulnerabilities introduced by unsecured public Wi-Fi, rogue access points, and Bluetooth pairing, and how attackers can exploit these to conduct man-in-the-middle (MitM) attacks, spoofing, or data interception. W...

Mobile devices have become indispensable for productivity, but they also introduce unique security challenges due to their portability, connectivity, and often personal ownership. In this episode, we explore how mobile device management (MDM) platforms enable organizations to enforce policies on corporate-owned and bring-your-own-device (BYOD) endpoints alike, controlling app installation, encrypt...

Wireless networks offer convenience, but they also expand the attack surface by broadcasting connectivity beyond physical boundaries, making them inherently riskier than wired alternatives. In this episode, we focus on securing wireless environments beginning with proper access point placement, signal strength tuning, and site surveys that help prevent signal bleed and rogue AP exposure. We also c...

Embedded systems and IoT devices often operate in environments where security is either underprioritized or extremely difficult to implement, making them prime targets for persistent threats. In this episode, we dive into the unique challenges of hardening these devices, including limited processing power, minimal user interfaces, and inconsistent update mechanisms. Many come with hardcoded creden...

Continuing our discussion on hardening, this episode shifts focus to cloud infrastructure, servers, and industrial systems—each of which requires a tailored approach based on operational roles, architecture, and threat exposure. For cloud systems, hardening includes enforcing role-based access control, disabling unused services, encrypting storage, and monitoring resource usage across accounts and...

Hardening is the practice of stripping down systems to only what they need to function securely, and this episode focuses on doing just that for mobile devices, workstations, switches, and routers. These devices often serve as entry points for attackers, especially when defaults are left in place, unnecessary services are running, or updates are neglected. We cover basic but essential steps such a...

Establishing a secure baseline is one of the most fundamental—and often overlooked—steps in managing system security. In this episode, we explain how baselines define the minimum acceptable security configuration for a given system, including settings for password policies, logging, services, ports, user rights, and installed software. These baselines serve as both a reference point for compliance...

If Domains One through Three are about understanding the principles and design of cybersecurity, then Domain Four is about the actual day-to-day work that keeps systems secure. This is where cybersecurity gets real. Welcome to Security Operations. Domain Four is the largest domain on the Security Plus exam. It makes up 28 percent of the test—that’s nearly one-third of the total questions. That alo...

Without reliable power, even the most secure systems are at risk of failure—and in many environments, loss of power is both a security and safety issue. In this episode, we explore how power resilience contributes to business continuity, starting with uninterruptible power supplies (UPS) that bridge short outages and allow graceful shutdowns. We cover the role of backup generators for longer-term...

Backups are only half of the story—the other half is how effectively you can recover from them. In this episode, we focus on data recovery techniques that turn dormant backups into operational systems, covering strategies such as replication, journaling, point-in-time recovery, and bare-metal restoration. We define and differentiate between Recovery Time Objective (RTO)—how quickly you need to be...

Continuing our discussion on backups, this episode explores encryption, snapshots, and backup lifecycle management—three critical components of a secure, efficient, and resilient backup system. Encrypting backups is essential to protect sensitive data in the event of theft or unauthorized access to storage media, whether local or cloud-based. We explain how key management, access controls, and enc...

Backups form the last line of defense when everything else fails, and a good strategy turns potential disaster into a recoverable event. In this episode, we discuss core backup principles and best practices, including the 3-2-1 rule—keep three copies of your data, on two different media types, with one stored offsite. We cover the strengths and trade-offs between full, differential, and incrementa...

Preparation is only as good as its ability to withstand the unexpected, and resilience testing is how you find out whether your systems, processes, and people are truly ready. In this episode, we explore the value of comprehensive testing methods such as tabletop exercises, simulated failovers, load tests, and real-world attack scenarios. Tabletop exercises walk teams through incident response ste...