CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 307: Practice CISSP Questions - Security Policies and Procedures

·20 min·1 clip

Sean says zero trust is hard because legacy environments make the model much more complex to deploy.

1. CISSP Cyber Training Podcast - CISSP Training Program centers on CCT 307: Practice CISSP Questions - Security Policies and Procedures. 2. Sean Gerber hosts the episode and frames it as CISSP Question Thursday tied to Domain 1 and 1.9. 3. The episode exists to review CISSP practice questions while connecting policy controls to real security work. 4. Sean opens with an article about the UK hosting an international cyber skills conference and a Global Cybersecurity Skills Recommendations Report. 5. The report says UK job shortfalls fell from 11,000 in 2023 to 3,500 in 2024. 6. Sean says 44% of UK businesses still do not have the fundamental skills to protect themselves from a cyber attack. 7. He argues that one cyber incident can be catastrophic for a business with small margins. 8. He recommends pro bono work and nonprofit support as a way for cybersecurity professionals to build experience. 9. He also describes young people he mentors, including a young man from church who he says is smart and suited for cybersecurity. 10. Sean explains that CISSP Cyber Training courseware is available at CISSPCyberTraining.com and that purchases support a nonprofit tied to adoptive families. 11. On encryption, he says strong encryption at rest and in transit is the best method for preventing unauthorized access to sensitive cloud data. 12. On role-based access control, he identifies overlapping roles and credential creep as a common weakness. 13. On policy compliance, he says security awareness training is the best way to make employees aware of and comply with security policies. 14. On single sign-on, he says the disadvantage is reduced security because one access point can expose multiple systems. 15. On privileged accounts, he repeats that least privilege limits the blast radius of a compromise. 16. On cloud IAM, he says the notable disadvantage is increased cost from ongoing service fees and additional charges. 17. On zero trust, he says increased complexity is the challenge and warns that legacy environments make deployment harder. 18. Sean's style is direct, exam-focused, and conversational, with frequent side comments, corrections, and practical examples. 19. CISSP candidates and junior security professionals would get the most value from this episode. 20. Listeners wanting polished editing or non-exam content may skip it.

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program