CISSP Cyber Training Podcast - CISSP Training Program · Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur

CCT 315: Cybercrime Inc and Practice CISSP Questions (Domain 1.8)

·32 min·2 clips

Cybercrime groups now run with departments, KPIs, R&D, and customer support.

Sean Gerber opens the show with a warm greeting and a quick setup for CISSP Question Thursday. He says the focus is Domain 1.8, then turns to a CSO Magazine article about cybercrime being more organized than the defenders. That gives him a way to connect threat activity to CISSP thinking. The first part of the episode lands as a reminder that attackers can act like a business. He then moves into a practice question built around an acquisition. In the scenario, employees start work before background checks are completed. Sean slows down and explains why that timing matters. The issue is not just an operational headache. The bigger concern is what kind of access those people may already have gained. He walks through the answer choices and explains why some of them sound right but do not go far enough. He keeps pulling the listener back to what leadership needs to hear. The main answer centers on trusted positions, possible undisclosed criminal histories, conflicts of interest, falsified credentials, and insider risk. He treats that as the key message for executive leadership. He also acknowledges the messy reality of mergers and acquisitions. In his telling, those situations are often squishy and hard to control cleanly. That makes the lesson more useful, not less. He keeps the tone conversational and direct. The episode then moves into his closing remarks about upcoming content and the broader CISSP training work he is building. He mentions his other site and the free question bank available for listeners. He ends by encouraging people to keep studying and stay with the program. The whole episode stays focused on turning a test question into a management-level security judgment.

As heard by us

A CISSP question drill that turns merger-era background-check lapses into clear executive risk.

This one turns CISSP Domain 1.8 into a practical look at organized cybercrime and the risk that appears when background checks happen after people are already hired.

Read the full review in PlayNext →

Why you'd press play

Turn merger screening into a CISSP Domain 1.8 risk call.

Read the full recommendation in PlayNext →

Listen to the show on

Apple Podcasts Spotify

Play clips from this episode More from CISSP Cyber Training Podcast - CISSP Training Program