Certified: The GIAC GCCC Audio Course

This episode focuses on detecting unauthorized software fast enough to reduce dwell time and prevent small issues from becoming incidents. You’ll learn what counts as unauthorized, including unapproved tools, risky remote access utilities, pirated software, and unexpected admin tools that often signal compromise. We’ll cover discovery signals such as endpoint inventory deltas, EDR telemetry, appli...

This episode explains how to establish software asset authority so “approved software” is a controlled concept, not a vague preference. You’ll define software asset authority as the policies, tools, and decision processes that determine what is allowed, who approves it, and how changes are tracked across environments. We’ll connect this to exam expectations around governance and control enforcemen...

This episode teaches you how to validate inventory quality rather than assuming an inventory tool is correct because it produces a list. You’ll define what “quality” means for asset data: completeness, accuracy, timeliness, uniqueness, and traceable ownership, all of which influence downstream controls like scanning, patching, and incident response. We’ll cover drift checks that compare expected v...

This episode focuses on continuous asset discovery, emphasizing how multiple data sources reduce blind spots but introduce reconciliation challenges. You’ll learn why single-source inventory approaches fail at scale, and how to combine signals from DHCP, DNS, directory services, endpoint management tools, cloud control planes, and network monitoring to improve completeness. We’ll define reconcilia...

This episode defines enterprise asset scope in a way that supports both exam questions and day-to-day security operations. You’ll clarify what “enterprise assets” include, such as endpoints, servers, cloud workloads, network devices, and managed services, and why scope errors cause control failures downstream. We’ll explain how asset scope ties directly to coverage-based questions, like whether vu...

This episode turns CIS Controls from a reference document into a governed program that survives staff changes and competing priorities. You’ll define governance in practical terms: named owners, clear decision rights, and a repeatable cadence for measuring progress and handling exceptions. We’ll cover how to assign ownership so it matches where work actually happens, how to build metrics that show...

This episode connects CIS Controls v8 to the standards and governance expectations you’ll see referenced in GCCC-style thinking. You’ll learn why mapping matters, how organizations use crosswalks to avoid duplicate work, and what auditors and risk leaders expect when they ask, “Show me how your controls align to frameworks.” We’ll discuss how CIS Controls can support programs aligned to common sta...

This episode explains CIS Controls v8 in a way that supports both exam recall and practical implementation discussions. You’ll cover why the Controls exist, how they evolved from earlier versions, and what “prioritized, safeguard-focused guidance” means when an organization needs defensible security improvements. We’ll walk through the structure of the model, including Controls, Safeguards, and ho...

This episode builds an audio-first study plan designed for busy schedules while still meeting GCCC performance demands. You’ll learn how to structure short, repeatable recall cycles that force active retrieval, not passive listening, and how to set a weekly review rhythm that prevents forgetting from compounding. We’ll define what “good repetition” looks like using spaced review, mixed practice ac...

This episode focuses on interpreting the GCCC exam blueprint so you can study with precision instead of guesswork. You’ll break down how domains shape the question mix, what a passing score means in practical terms, and how pacing decisions affect outcomes when time pressure builds. We’ll translate “71%” into a performance target by discussing consistency across domains, avoiding preventable misse...