Certified: The ISC(2) CC Audio Course

This episode explains IPv4 and IPv6 addressing in practical terms, helping you recognize what you are looking at in exam questions and understand how addressing influences security and troubleshooting. You will learn basic IPv4 structure, private versus public ranges at a high level, and the purpose of subnetting concepts without turning the discussion into math-heavy drills. We will then introduc...

This episode teaches networking fundamentals through the OSI and TCP/IP models, focusing on how layered communication helps you reason about where security controls operate and where attacks occur, which is CC-relevant knowledge. You will learn what each layer is responsible for and how data moves from an application down to the network and back, along with the practical meaning of encapsulation....

This episode covers role-based access control (RBAC) and prepares you to apply it in exam questions that ask how to manage access at scale without creating chaos. You will learn how RBAC assigns permissions to roles based on job functions, then assigns users to roles, making access easier to administer and review than individual, user-by-user permissions. We will discuss how good role design reduc...

This episode explains mandatory access control (MAC), a model where a central authority defines access rules and users cannot override them, which is frequently tested through comparisons with DAC and RBAC. You will learn how MAC uses labels, classifications, and clear rules to control information flow, and why it is common in environments that require strict confidentiality protections. We will d...

This episode focuses on discretionary access control (DAC), a model where resource owners decide who gets access and what level of permission is granted, and it helps you answer CC questions that compare access control approaches. You will learn how DAC commonly appears in operating systems through file and folder permissions, access control lists, and user-managed sharing settings. We will discus...

This episode explains segregation of duties (SoD) and why it is a powerful administrative control for preventing fraud, reducing insider threat risk, and catching errors before they become incidents, all of which are exam-relevant at the foundational level. You will learn how SoD works by splitting critical tasks across multiple roles so no single person can complete a high-impact action end-to-en...

This episode covers least privilege as the principle of giving users and systems only the access they need to perform required tasks, and it prepares you for CC questions that ask how to reduce exposure without harming productivity. You will learn how least privilege applies to users, service accounts, applications, and administrative tools, and why over-permissioning creates large blast radius wh...

This episode teaches you how organizations separate authorized personnel from unauthorized personnel, which is essential for both physical and logical security and appears in CC objectives through access control concepts. You will learn how identity verification works in practice using badges, check-in procedures, visitor logs, escorts, and restricted area rules, and why “knowing someone” is not a...

This episode focuses on physical security monitoring and how detection mechanisms support deterrence, response, and investigation, which the CC exam expects you to understand at a practical level. You will learn how guards, cameras, alarms, motion sensors, and access logs provide signals that an organization can use to verify events and respond quickly to suspicious activity. We will discuss the d...

This episode explains physical access controls and how they reduce risk by limiting who can enter facilities and restricted areas, a foundational topic for the CC exam. You will learn how badges, keys, locks, turnstiles, mantraps, and controlled entry points work together to prevent unauthorized access, support accountability, and create useful audit trails. We will discuss how environmental desig...

This episode walks through the major components of incident response, showing how preparation, detection, containment, eradication, and recovery fit together as a repeatable lifecycle. You will learn what preparation includes in practical terms, such as clear roles, access to tools, logging readiness, and playbooks that reduce decision time. We will discuss detection as the process of turning sign...

This episode explains why incident response is important, emphasizing the time-sensitive nature of attacks and the need for disciplined decisions when pressure is high. You will learn how delays increase attacker dwell time, expand impact, and complicate recovery, while rushed actions can destroy evidence, trigger broader outages, or lead to incorrect conclusions. We will discuss the role of evide...

This episode introduces incident response as the structured approach for handling security events so the organization can limit damage, preserve evidence, and recover operations efficiently. You will learn how incident response differs from general troubleshooting by focusing on security objectives such as containment, eradication, and preventing recurrence. We will define key terms like incident,...

This episode covers the building blocks of a workable disaster recovery capability, including backups, replication, failover planning, documented runbooks, and validation steps that confirm systems are truly restored. You will learn how different backup types and storage choices influence recovery speed and reliability, and why integrity checks are critical before trusting restored data. We will d...

This episode explains why disaster recovery planning is essential, focusing on how RTO and RPO translate into real business tradeoffs and investment decisions that security professionals must understand. You will learn that shorter recovery times and smaller data loss windows usually require higher cost, more complexity, and more disciplined operations, which is why organizations must define reali...

This episode introduces disaster recovery as the focused effort to restore IT systems and data after an outage or major disruption, and it clarifies how disaster recovery differs from broader business continuity. You will learn how disaster recovery emphasizes technical restoration activities such as rebuilding servers, restoring backups, failing over to alternate infrastructure, and confirming se...

This episode breaks down the core components of a business continuity program and prepares you to answer CC questions that ask what a continuity plan must include to be effective. You will learn the role of business impact analysis, dependency mapping, continuity strategies, and clear ownership so actions are not delayed during a crisis. We will discuss how plans define responsibilities, communica...

This episode explains why business continuity matters, focusing on the real costs of downtime and the broader impacts that reach beyond IT into revenue, safety, legal exposure, and reputation. You will learn how continuity planning protects stakeholder trust by ensuring the organization can keep promises to customers, partners, and employees during disruptions. We will discuss how continuity prior...

This episode introduces business continuity as the discipline of keeping essential business functions operating during disruptive events, which is foundational knowledge for the CC exam. You will learn how continuity planning focuses on the mission, the people, and the processes—not just the technology—and how organizations decide what must continue versus what can pause. We will cover key ideas s...

This episode explains how laws and regulations influence security requirements, and it prepares you for CC questions that test your ability to recognize compliance drivers without needing to memorize specific statutes. You will learn the practical difference between legal requirements, regulatory requirements, contractual obligations, and internal policy, and how each can create mandatory controls...

This episode focuses on governance as the structure that makes security consistent, measurable, and aligned with business goals, which is a recurring theme in the CC objectives. You will learn how policies set high-level intent, standards define mandatory requirements, and procedures describe the step-by-step actions people follow to implement controls reliably. We will discuss why governance fail...

This episode explains how the ISC2 Code of Ethics guides professional behavior, and why the CC exam expects you to recognize ethical responsibilities as part of being trusted with systems and data. You will learn the intent of ethical principles such as protecting society, acting honorably, providing diligent service, and advancing the profession, then connect those ideas to realistic workplace de...

This episode covers physical controls, which protect facilities, equipment, and people from unauthorized access, theft, and environmental hazards, a topic the CC exam expects you to understand at a foundational level. You will learn how barriers, locks, fences, lighting, visitor procedures, and secured areas work together as layers, and why a single control rarely solves a physical risk by itself....

This episode explains administrative controls, which are the governance and process mechanisms that shape behavior and reduce risk, and they are critical for CC because they connect security to people and organizational decision-making. You will learn how policies, procedures, standards, training, background checks, and change management reduce vulnerabilities created by human error and inconsiste...

This episode focuses on technical controls and how they are used to reduce risk in practical, testable ways that show up in the CC objectives. You will learn how controls such as encryption, access control, firewalls, endpoint protection, and logging are selected to address specific threats and vulnerabilities, rather than being applied as a random checklist. We will discuss preventive, detective,...