CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 314: AI Threats And Identify, Analyze, and Prioritize Business Continuity (CISSP Domain 1.8) - Part 1

·25 min·1 clip

Data poisoning, model poisoning, tool poisoning—three layers of AI attacks.

AI risk opens the door. Sean starts with an article on threats to AI systems and infrastructure, then uses it to move into CISSP domain one. The main lesson is business continuity, specifically how to identify, analyze, and prioritize what the organization needs to keep running when things go sideways. Accountability shows up early. BCM needs owners, roles, and governance, or it becomes another document nobody wants to touch when the pressure is on. Scope is the first big decision. Sean walks through business units, locations, processes, technologies, vendors, SaaS providers, and MSPs as pieces that need to be considered before anyone can say what the plan covers. Covering everything at once sounds bold, but he pushes against that instinct. Critical systems, outside providers, and wide enterprise scope all create different planning demands, and trying to eat the whole thing at once can make the work messy fast. Criticality drives the order of operations. Decide what matters most, then build the continuity effort around that. Assumptions and constraints get plenty of time too. Funding, staffing, recovery capability, and regulatory requirements decide what the organization can actually do when disruption hits. Cost is part of the lesson, not an afterthought. Sean keeps coming back to the plain business question: what does it take to fix things, and who is going to do the work? Regulation can make the answer heavier. Some requirements may force a physical location or a similar capability, which adds complexity and cost. His advice is to start small and build. Short disruptions and long outages need different thinking, especially when malware or ransomware is involved. The close stays course-focused: this is part one, CISSP deep-dive questions come Thursday, and part two continues next Monday.

As heard by us

A practical CISSP review of business continuity scope before disruption turns planning into crisis.

Sean Gerber treats CISSP Domain 1 as a working security-management problem, moving from AI systems and infrastructure risk into the quieter discipline of keeping an organization running.

Read the full review in PlayNext →

Why you'd press play

You will leave with a clearer way to scope business continuity planning without trying to eat the whole elephant at once.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program