InfosecTrain

What happens when DevSecOps meets artificial intelligence? You're looking at the future of secure, intelligent, and lightning-fast software development. In this episode, we unpack how AI is transforming DevSecOps pipelines—making threat detection smarter, compliance automatic, and security scans faster than ever. Whether you're a developer, security pro, or tech leader, this conversation i...

Want to ace your ISO 27001 Lead Implementer interview? This episode gives you the expert techniques, real-world examples, and strategic answers you need to stand out in front of hiring managers. We break down the most common interview questions and how to approach them with confidence. From ISMS implementation and risk assessments to Annex A control application, internal audits, and documentation...

Ready to pass the ISSAP like a pro? This episode is your go-to resource for mastering the Information Systems Security Architecture Professional (ISSAP) certification. We’ll cover the most frequently asked exam questions, key concepts, and real-world strategies that align with enterprise security architecture roles. From designing secure systems to understanding governance frameworks, you'll learn...

As AI and cloud technologies converge to power the next wave of digital transformation, securing data privacy and integrity becomes mission-critical. This episode explores the delicate balance between innovation and protection—uncovering how AI and cloud can coexist without putting sensitive data at risk. We’ll break down the key privacy risks, regulatory compliance hurdles, and proven security fr...

Ready to ace Domain 1 of the CISA exam? This episode dives deep into the Information Systems Auditing Process, giving you the practical knowledge and tools you need to audit with precision and pass with confidence. From audit planning and risk-based auditing to evidence collection and reporting, we unpack the fundamentals every IS auditor must master. Whether you're pursuing CISA certification...

Curious about how DevSecOps is transforming in 2025? This episode explores the future of secure development, spotlighting the trends, tools, and innovations that are redefining how teams build and protect software. From AI-powered security automation to the rise of Zero Trust pipelines, we cover the must-know shifts shaping modern DevSecOps. Whether you're a developer, security engineer, or te...

Ready to hack like a pro? This advanced masterclass takes you deep into the world of professional penetration testing—where strategy, stealth, and skill come together. Learn how ethical hackers simulate real-world cyberattacks to expose system vulnerabilities before malicious actors do. We’ll cover cutting-edge techniques including recon, exploitation, privilege escalation, lateral movement, and p...

Identity governance is the backbone of enterprise security—and SailPoint is leading the charge. In this episode, we walk you through a hands-on demo of SailPoint’s powerful platform, showing how its automation, access controls, and policy engines streamline identity management in complex IT environments. Discover how organizations are implementing SailPoint to ensure compliance, minimize risk, and...

In today’s digital-first world, understanding IT risk is essential for building secure and compliant organizations. This episode dives deep into Domain 2 of the CRISC certification—IT Risk Assessment —giving you the knowledge to identify, evaluate, and respond to risks effectively. Explore core risk assessment methodologies, enterprise risk frameworks, and real-world IT risk scenarios. Learn how t...

Get hands-on with RSA Archer , one of the most powerful platforms in Governance, Risk, and Compliance (GRC) . In this session, we walk you through a practical demo of RSA Archer’s key modules—from risk management and audit workflows to policy automation and compliance tracking. Whether you're just starting in GRC or upskilling for the next role, this episode will help you understand how RSA Archer...

In today’s privacy-first world, organizations must build structured and scalable privacy programs to stay compliant and earn trust. This session dives into the Certified Information Privacy Manager (CIPM) framework, offering a practical, real-world approach to developing and managing privacy initiatives aligned with GDPR , CCPA , and global data protection laws. You’ll learn how to establish a pri...

Controlling who can access what — and when — is at the core of enterprise cybersecurity. In this session, we guide you through a step-by-step audit process for Logical Access Controls , essential for protecting sensitive systems and meeting global standards like ISO 27001 , NIST , and GDPR . Learn how to assess user access , role-based permissions , and privileged accounts (PAM) . We’ll also explo...

As Artificial Intelligence reshapes industries, organizations face a growing need to balance innovation with regulatory compliance . In this session, we break down the essentials of AI governance , exploring how businesses can manage risk while deploying ethical, secure, and compliant AI systems. You’ll learn how to align with frameworks like ISO 42001 , GDPR , and the NIST AI RMF , implement gove...

In today’s digital world, securing your websites and web applications is more critical than ever. In this session, we break down the foundations of web security , with a sharp focus on defending against SQL injections , XSS , and other modern cyber threats. You’ll learn how attackers exploit vulnerabilities in web applications and how to stop them using best practices like secure coding , paramete...

As artificial intelligence becomes more integrated into business operations, AI governance and risk management are no longer optional—they’re essential. In this session, we explore ISO 42001 , the first international standard for AI Management Systems (AIMS), and the vital role of the Lead Auditor (LA) in ensuring responsible AI implementation. You’ll learn how to audit AI systems for compliance,...

In this expert-led session, we take you inside the world of the Security Operations Center (SOC) — the command center of modern cybersecurity. Learn how SOCs monitor, detect, and respond to threats in real time using tools like SIEM , threat intelligence , and automated response systems . We cover essential SOC functions including incident response , proactive threat hunting , and compliance align...

In this session, we explore Domain 6 of the CISSP certification — Security Assessment & Testing — one of the most critical areas for identifying vulnerabilities, validating controls, and ensuring compliance. You’ll dive deep into testing methodologies such as penetration testing , vulnerability scanning , risk assessments , and continuous monitoring . We also cover static and dynamic analysis...

In this session, we walk you through the essentials of the CompTIA Security+ certification , a globally recognized entry point into the cybersecurity field. Whether you’re preparing for the SY0-701 exam or just beginning your security journey, this masterclass covers everything you need — from foundational concepts to practical exam strategies. We break down the core Security+ domains, including t...

In this session, we take a focused dive into Domain 2 of the CGRC (Certified in Governance, Risk, and Compliance) certification, centered on system scoping and boundary definition. You’ll learn how to identify system components, determine risk exposure, and define authorization boundaries in alignment with security frameworks like NIST RMF . This episode offers practical insights into evaluating s...

In this session, we explore how Artificial Intelligence is revolutionizing cybersecurity , making digital defenses more intelligent, automated, and proactive. From detecting threats in real time to automating incident response, AI is transforming how organizations protect against modern cyberattacks. You’ll learn how machine learning , behavior-based analytics , and AI-enhanced SIEM and EDR tools...

In this session, we break down the core principles of proactive threat hunting — a critical skill for identifying and stopping cyber threats before they cause damage. Learn how security teams use behavioral analysis , threat intelligence , and tools like SIEM and EDR to detect hidden threats and reduce dwell time. We cover the techniques and mindset required to hunt down threats lurking within sys...

In this session, we take a deep dive into Domain 2 of the CISA certification — focusing on IT governance and management. You’ll learn how to align IT strategies with business objectives, manage IT risks, implement controls, and support compliance with global standards. We walk through the critical concepts, best practices, and exam-focused strategies you need to confidently tackle this domain. Whe...

In this session, we explore the IAPP AI Governance Professional (AIGP) certification and its growing relevance in today’s AI-driven world. As artificial intelligence becomes deeply integrated into business and government, mastering AI governance, ethics, and compliance is essential for professionals across privacy, legal, and tech domains. You’ll learn the fundamentals of responsible AI, the impli...

In this session, we walk you through the complete roadmap to becoming a Data Protection Officer (DPO) in 2025. As data privacy grows in complexity and importance, organizations need professionals who can navigate global regulations and build trust through strong compliance practices. You’ll learn the essential skills , certifications , and career steps required to excel as a DPO — including GDPR k...

In this masterclass, we deliver a complete, step-by-step walkthrough of RSA Archer , the leading Governance, Risk, and Compliance (GRC) platform. From initial configuration and system setup to advanced modules for risk management, compliance, and incident response — this session covers everything you need to optimize your Archer deployment . Packed with practical tips, real-world examples, and exp...