CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 313: CISSP Practice Questions and AI Agents As The New Insider Risk

·32 min·2 clips

Wendy Whitmore warns that AI agents could become Palo Alto's biggest insider threat in 2026.

Sean Gerber begins with the usual welcome and sets the tone for a steady CISSP training session. He frames the year ahead as a serious push for people who want to get the certification done. From there, he brings in a recent cybersecurity article from The Register and uses it as a bridge into exam practice. The setup is conversational, but the purpose is clearly instructional. He keeps steering the listener toward how a security manager should think, not just how a technician might react. The first major topic is alert handling and what to do when the queue gets too heavy. He walks through the role of SOAR in supporting alert correlation and the wider monitoring stack. He treats that pairing as part of operational design, not just a buzzword answer. He then works through answer choices that deal with alert thresholds, tiered alerting, and how much gets routed to analysts. The discussion shows why simply raising thresholds is not always the clean fix. He pushes on the risk of missing useful signals if the bar gets pushed too high. He also challenges the idea that only high-severity events should ever be touched by analysts. Medium and low alerts still matter because they can turn into early warning signs. He brings in the practical problem of volume, pointing out that 10,000 alerts a day changes the shape of the job fast. That leads him to talk about review cadence. He leans toward high severity getting immediate attention and the rest being reviewed on a regular schedule. He does not let the schedule drift into something vague or wishful. He stresses that SLAs matter so lower-priority review does not keep getting postponed. He also notes that teams need to understand actual bandwidth before they set those expectations. The answer discussion keeps returning to specialization, context switching, and cognitive load. He treats those as real management problems, not side issues. Across the segment, he keeps translating the security question into an organizational one. What matters is not just whether the control exists, but whether the team can sustain it. The episode closes by folding the study session back into long-term career guidance. He presents the CISSP as part of a broader path, not the finish line. The overall rhythm is practical, a little repetitive in a useful way, and aimed at people who want to think like security leaders while they study.

As heard by us

Practical CISSP practice that keeps circling back to how security work actually gets managed.

This CISSP question session pairs exam prep with a practical look at alert fatigue, SOAR, and the pressure of keeping security operations from drowning in alerts.

Read the full review in PlayNext →

Why you'd press play

You want CISSP question practice that sounds like a manager thinking through alert overload.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program