InfosecTrain

Ready to ace Domain 1 of the CISA exam? This episode dives deep into the Information Systems Auditing Process, giving you the practical knowledge and tools you need to audit with precision and pass with confidence. From audit planning and risk-based auditing to evidence collection and reporting, we unpack the fundamentals every IS auditor must master. Whether you're pursuing CISA certification...

Curious about how DevSecOps is transforming in 2025? This episode explores the future of secure development, spotlighting the trends, tools, and innovations that are redefining how teams build and protect software. From AI-powered security automation to the rise of Zero Trust pipelines, we cover the must-know shifts shaping modern DevSecOps. Whether you're a developer, security engineer, or te...

Ready to hack like a pro? This advanced masterclass takes you deep into the world of professional penetration testing—where strategy, stealth, and skill come together. Learn how ethical hackers simulate real-world cyberattacks to expose system vulnerabilities before malicious actors do. We’ll cover cutting-edge techniques including recon, exploitation, privilege escalation, lateral movement, and p...

Identity governance is the backbone of enterprise security—and SailPoint is leading the charge. In this episode, we walk you through a hands-on demo of SailPoint’s powerful platform, showing how its automation, access controls, and policy engines streamline identity management in complex IT environments. Discover how organizations are implementing SailPoint to ensure compliance, minimize risk, and...

In today’s digital-first world, understanding IT risk is essential for building secure and compliant organizations. This episode dives deep into Domain 2 of the CRISC certification—IT Risk Assessment —giving you the knowledge to identify, evaluate, and respond to risks effectively. Explore core risk assessment methodologies, enterprise risk frameworks, and real-world IT risk scenarios. Learn how t...

Get hands-on with RSA Archer , one of the most powerful platforms in Governance, Risk, and Compliance (GRC) . In this session, we walk you through a practical demo of RSA Archer’s key modules—from risk management and audit workflows to policy automation and compliance tracking. Whether you're just starting in GRC or upskilling for the next role, this episode will help you understand how RSA Archer...

In today’s privacy-first world, organizations must build structured and scalable privacy programs to stay compliant and earn trust. This session dives into the Certified Information Privacy Manager (CIPM) framework, offering a practical, real-world approach to developing and managing privacy initiatives aligned with GDPR , CCPA , and global data protection laws. You’ll learn how to establish a pri...

Controlling who can access what — and when — is at the core of enterprise cybersecurity. In this session, we guide you through a step-by-step audit process for Logical Access Controls , essential for protecting sensitive systems and meeting global standards like ISO 27001 , NIST , and GDPR . Learn how to assess user access , role-based permissions , and privileged accounts (PAM) . We’ll also explo...

As Artificial Intelligence reshapes industries, organizations face a growing need to balance innovation with regulatory compliance . In this session, we break down the essentials of AI governance , exploring how businesses can manage risk while deploying ethical, secure, and compliant AI systems. You’ll learn how to align with frameworks like ISO 42001 , GDPR , and the NIST AI RMF , implement gove...

In today’s digital world, securing your websites and web applications is more critical than ever. In this session, we break down the foundations of web security , with a sharp focus on defending against SQL injections , XSS , and other modern cyber threats. You’ll learn how attackers exploit vulnerabilities in web applications and how to stop them using best practices like secure coding , paramete...

As artificial intelligence becomes more integrated into business operations, AI governance and risk management are no longer optional—they’re essential. In this session, we explore ISO 42001 , the first international standard for AI Management Systems (AIMS), and the vital role of the Lead Auditor (LA) in ensuring responsible AI implementation. You’ll learn how to audit AI systems for compliance,...

In this expert-led session, we take you inside the world of the Security Operations Center (SOC) — the command center of modern cybersecurity. Learn how SOCs monitor, detect, and respond to threats in real time using tools like SIEM , threat intelligence , and automated response systems . We cover essential SOC functions including incident response , proactive threat hunting , and compliance align...

In this session, we explore Domain 6 of the CISSP certification — Security Assessment & Testing — one of the most critical areas for identifying vulnerabilities, validating controls, and ensuring compliance. You’ll dive deep into testing methodologies such as penetration testing , vulnerability scanning , risk assessments , and continuous monitoring . We also cover static and dynamic analysis...

In this session, we walk you through the essentials of the CompTIA Security+ certification , a globally recognized entry point into the cybersecurity field. Whether you’re preparing for the SY0-701 exam or just beginning your security journey, this masterclass covers everything you need — from foundational concepts to practical exam strategies. We break down the core Security+ domains, including t...

In this session, we take a focused dive into Domain 2 of the CGRC (Certified in Governance, Risk, and Compliance) certification, centered on system scoping and boundary definition. You’ll learn how to identify system components, determine risk exposure, and define authorization boundaries in alignment with security frameworks like NIST RMF . This episode offers practical insights into evaluating s...

In this session, we explore how Artificial Intelligence is revolutionizing cybersecurity , making digital defenses more intelligent, automated, and proactive. From detecting threats in real time to automating incident response, AI is transforming how organizations protect against modern cyberattacks. You’ll learn how machine learning , behavior-based analytics , and AI-enhanced SIEM and EDR tools...

In this session, we break down the core principles of proactive threat hunting — a critical skill for identifying and stopping cyber threats before they cause damage. Learn how security teams use behavioral analysis , threat intelligence , and tools like SIEM and EDR to detect hidden threats and reduce dwell time. We cover the techniques and mindset required to hunt down threats lurking within sys...

In this session, we take a deep dive into Domain 2 of the CISA certification — focusing on IT governance and management. You’ll learn how to align IT strategies with business objectives, manage IT risks, implement controls, and support compliance with global standards. We walk through the critical concepts, best practices, and exam-focused strategies you need to confidently tackle this domain. Whe...

In this session, we explore the IAPP AI Governance Professional (AIGP) certification and its growing relevance in today’s AI-driven world. As artificial intelligence becomes deeply integrated into business and government, mastering AI governance, ethics, and compliance is essential for professionals across privacy, legal, and tech domains. You’ll learn the fundamentals of responsible AI, the impli...

In this session, we walk you through the complete roadmap to becoming a Data Protection Officer (DPO) in 2025. As data privacy grows in complexity and importance, organizations need professionals who can navigate global regulations and build trust through strong compliance practices. You’ll learn the essential skills , certifications , and career steps required to excel as a DPO — including GDPR k...

In this masterclass, we deliver a complete, step-by-step walkthrough of RSA Archer , the leading Governance, Risk, and Compliance (GRC) platform. From initial configuration and system setup to advanced modules for risk management, compliance, and incident response — this session covers everything you need to optimize your Archer deployment . Packed with practical tips, real-world examples, and exp...

In this free masterclass, we explore the future of artificial intelligence and why governance is essential to ensure its ethical, transparent, and sustainable development. As AI continues to advance rapidly, clear policies and responsible oversight are critical to balancing innovation with risk management. This session unpacks the need for AI governance frameworks , discusses the challenges of reg...

In this focused session, we share actionable strategies to help you ace the CISM exam — from structuring your study plan to mastering complex, scenario-based questions. You’ll learn how to break down all four key domains, manage your time effectively, and approach each question with confidence and clarity. Our expert also walks through real practice questions , explaining the logic behind each ans...

In this expert-led session, you'll get a complete roadmap to mastering the CISA exam with confidence. A seasoned CISA professional walks you through a proven study strategy — from building a personalized study plan to breaking down the exam’s structure and mastering all four domains. You’ll learn how to use practice questions effectively , manage your time during the exam, and approach each qu...

In this session, we explore the key differences between two critical ISO 27001 roles: the Lead Auditor (LA) and the Lead Implementer (LI) . If you're unsure which path to pursue, this episode offers clarity on the responsibilities, required skill sets, and long-term career opportunities tied to each certification. We break down how each role contributes to an organization's information security ma...