CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 306: CISSP Domain 1.5: Understanding Legal, Regulatory, and Compliance Requirements

·52 min·3 clips

The Computer Fraud and Abuse Act, CFAA, is the first major piece of cybercrime legislation.

Sean Gerber opens the show with his standard welcome and study-focused setup. He says the goal is to help listeners pass the CISSP exam and deepen their cybersecurity knowledge. He then shifts into the week’s cyber news before moving into 1.5. The topic for the day is legal and regulatory issues tied to information security. He explains that these issues matter both for exam preparation and for the work of protecting an organization. He uses the transition from news into training to keep the lesson grounded. A CISO-and-COO partnership story becomes a way to think about protecting operational excellence. From there, he turns to intellectual property and why it matters in security. He describes IP as part of what a business creates and protects. He gives a coffee bar prototype as a concrete example of something a person designed and built. That example is used to show how ideas, concepts, and creative work can become valuable assets. He then broadens the point to larger cases, including rocket landing systems, code, and formulas. He explains that intellectual property can include copyrights, trademarks, patents, and trade secrets. He notes that these rights vary by owner and by country. He also points out that the length and strength of protection are not the same everywhere. He references his own experience working in the IP space and says the United States had protections that lasted about 20 years, while other countries did not offer the same duration. He keeps the tone conversational and practical throughout. He talks through the subject the way a mentor would explain it to someone trying to pass the CISSP and make better decisions at work. The episode stays centered on why the legal side of security affects business value, ownership, and risk. It treats these issues as part of the job, not an isolated legal box to check. The lesson is meant to help listeners understand what they are protecting, who owns it, and how the rules change depending on where the business operates.

As heard by us

A clear CISSP law lesson that turns legal and IP basics into something concrete.

This CISSP lesson stays on legal and regulatory issues in information security and keeps the material grounded in exam prep. It moves into intellectual property and licensing, then uses a coffee-bar prototype to make the idea of IP easier to picture.

Read the full review in PlayNext →

Why you'd press play

You want CISSP 1.5 legal and regulatory basics explained with a real-world business angle.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program