Dr. Z's Podcasts

The NIST Cybersecurity Framework (CSF) 2.0 serves as a foundational guide for organizations of all sizes to manage and reduce cybersecurity risks through a standardized taxonomy of functions and outcomes. A central component of this manual is the use of Organizational Profiles , which allow entities to document their Current Profile of existing practices and define a Target Profile representing th...

This podcast investigates advanced methods for enhancing cybersecurity through the application of machine learning. The primary study details the creation of a neural network specifically designed to identify and categorize DDoS flooding attacks, such as SYN and UDP flooding, with high precision. By utilizing a 24-106-5 architecture, the researchers achieved an accuracy rate of over 95% in both si...

National Institute of Standards and Technology AI 100-2e2025, Adversarial Machine Learning , examines the security risks posed by malicious actors who intentionally manipulate machine learning systems and outlines strategies to strengthen their resilience. The report explains how adversarial attacks can occur during different phases of the AI lifecycle, including data poisoning during training, mo...

Organization for Economic Co-operation and Development Framework for Classifying AI Systems provides a structured method for categorizing AI systems based on their context, capabilities, and potential impact. Rather than ranking systems as simply “high” or “low” risk, the framework analyzes AI across multiple dimensions, including the system’s purpose, the data it uses, its degree of autonomy, the...

National Institute of Standards and Technology AI 100-5, A Plan for Global Engagement on AI Standards , outlines a strategic approach for advancing international collaboration in the development of AI standards. The publication emphasizes the importance of aligning technical standards, risk management practices, and governance frameworks across countries to promote innovation while safeguarding tr...

National Institute of Standards and Technology AI 100-3, The Language of Trustworthy AI , establishes a shared vocabulary to support consistent understanding and implementation of trustworthy artificial intelligence. The publication clarifies key concepts such as reliability, robustness, safety, security, resilience, privacy, fairness, accountability, transparency, and explainability, emphasizing...

National Institute of Standards and Technology Interagency Report 8367, Psychological Foundations of Explainability and Interpretability in AI , examines explainable AI through the lens of human cognition and decision-making. Rather than focusing solely on technical transparency, the report emphasizes how people understand, trust, and interact with AI systems. It explains that effective explanatio...

National Institute of Standards and Technology Interagency Report 8312, Four Principles of Explainable Artificial Intelligence , defines foundational guidance for designing AI systems that can be understood and trusted by users. The report outlines four core principles: AI systems should provide explanations for their outputs; those explanations should be meaningful and understandable to the inten...

This podcast outlines a structured approach to recognizing, measuring, and mitigating bias in artificial intelligence systems. The NIST publication distinguishes between statistical bias (systematic error in model outputs) and societal bias (inequities embedded in data and social systems), emphasizing that AI systems can both reflect and amplify existing disparities. It proposes a lifecycle-based...

This podcast explores the core elements of NIST AI 600-1, a framework designed to help organizations identify, measure, and manage the unique and often amplified risks associated with generative AI systems. It highlights twelve central risk areas, including confabulation, dangerous or violent content, data privacy concerns, environmental impact, harmful and systemic bias, human–AI configuration ch...

This podcast centers on the NIST AI Risk Management Framework (AI RMF) , a voluntary standard designed to increase the trustworthiness of artificial intelligence through four key functions: govern, map, measure, and manage . While the core NIST documents establish foundational principles for mitigating sociotechnical harms —including specific risks like confabulation and bias in generative AI—supp...

This podcast outlines the continuous monitoring phase of the Risk Management Framework (RMF), emphasizing the need for ongoing situational awareness in federal information systems. The provided text details how organizations must systematically track changes to technology, personnel, and operational environments to ensure that security and privacy controls remain effective over time. Key processes...

This podcast outlines essential strategies for professionals to manage technology and organizational risk through certifications and structured frameworks . One source highlights specific credentials for mastering vibe coding , CI/CD , and Agentic AI to prove technical proficiency to employers. The remaining sources detail the NIST Risk Management Framework (RMF) , a comprehensive seven-step proce...

The provided podcast outlines the Risk Management Framework (RMF) developed by NIST to help organizations secure information systems and manage privacy risks. These materials explain how to categorize systems , select and implement security controls , and perform rigorous assessments to ensure safeguards function correctly. Key publications like SP 800-37 and SP 800-53A establish a structured proc...

This podcast details the governance, selection, and application of security and privacy controls within the NIST Risk Management Framework . The documentation outlines the CGRC certification requirements, emphasizing continuous compliance, asset monitoring, and stakeholder communication throughout a system's life cycle. Central to these sources is the NIST SP 800-53 catalog, which provides a compr...

These sources detail the essential frameworks and training resources used to maintain robust cybersecurity and privacy standards within modern organizations. One document serves as a comprehensive catalog of technical controls , such as NIST SP 800-53 , which outlines specific requirements for access management, incident response, and system integrity . Complementing these technical guidelines, th...

These materials collectively outline the Risk Management Framework (RMF) and its critical role in securing federal information systems. The documentation, which includes ISC2 training guides and NIST special publications , focuses heavily on the initial stages of the RMF, specifically the categorization of information systems based on security objectives like confidentiality, integrity, and availa...

This instructor guide provides a foundational look at the Risk Management Framework (RMF) and the federal mandates that govern it. The material focuses on essential legislation like FISMA and the Privacy Act , while outlining how NIST standards and OMB circulars direct the protection of strategic information. To help candidates understand practical execution, the text details various organizationa...

The provided documents outline the National Institute of Standards and Technology (NIST) guidelines for managing security and privacy risks within federal information systems and private organizations. Central to these sources is Special Publication 800-53 , which provides an extensive catalog of security controls designed to protect the integrity, confidentiality, and availability of data. This f...

These sources examine the intricate relationship between individual freedom, technological disruption, and the legal frameworks that govern modern expression. One perspective focuses on the philosophical balance between personal liberty and the weight of moral responsibility, highlighting the importance of these values in maintaining a stable society. This theoretical foundation is challenged by t...

The CISSP exam focuses on risk management , requiring a managerial mindset to align security with business goals. Key concepts include Due Care (action) versus Due Diligence (research), the CIA triad , and the OSI model . Human life is always the top priority. This podcast focuses on passing the CISSP through proper thinking and approaches.

The CISSP exam focuses on risk management , requiring a managerial mindset to align security with business goals. Key concepts include Due Care (action) versus Due Diligence (research), the CIA triad , and the OSI model . Human life is always the top priority. This podcast focuses on how to think like a manager to master the CISSP.

The CISSP exam focuses on risk management , requiring a managerial mindset to align security with business goals. Key concepts include Due Care (action) versus Due Diligence (research), the CIA triad , and the OSI model . Human life is always the top priority. This podcast focuses on Domain 8, Secure SDLC, Database Models, and Malware.

The CISSP exam focuses on risk management , requiring a managerial mindset to align security with business goals. Key concepts include Due Care (action) versus Due Diligence (research), the CIA triad , and the OSI model . Human life is always the top priority. This podcast focuses on Domain 7, Security Operations, Human Safety, and the Rest.

The CISSP exam focuses on risk management , requiring a managerial mindset to align security with business goals. Key concepts include Due Care (action) versus Due Diligence (research), the CIA triad , and the OSI model . Human life is always the top priority. This podcast focuses on Domain 6, Security Assessment and Testing.