Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur
344 episodes listed below
PRESS PLAY
Join Shon Gerber on his weekly CISSP Cyber Training podcast, where his extensive 23-year background in cybersecurity shines through. With a rich history spanning corporate sectors, government roles, and academic positions, Shon imparts the essential insights and advice necessary to conquer the CISSP exam. His expertise is not just theoretical; as a CISSP credential holder since 2009, Shon translates his deep understanding into actionable training. Each episode is packed with invaluable security strategies and tips that you can implement right away, giving you an edge in the cybersecurity realm. Tune in and take the reins of your cybersecurity journey—let’s ride...
Based on 6 episodes we listened to · September 2026
Sean Gerber makes CISSP concepts memorable by connecting exam language to concrete security controls, failure scenarios, and operational decisions.
Sean Gerber turns CISSP domains into practical security lessons, usually pairing a current cyber incident with a structured walk through exam material.
A coffee-bar prototype becomes an IP lesson, and your CISSP notes get a memorable detour.
Press play if you want
Short reviews from the PlayNext desk, based on the episodes we processed.
A practical Domain 5 review that keeps the CISSP answer logic close at hand.
This CISSP Cyber Training episode turns Domain 5 into a compact review of access-control basics, beginning with a report that about three quarters of security leaders acknowledge gaps in hardware knowledge, then moving into exam-style questions.
A focused CISSP practice episode on ransomware framing, SFTP over SSH, and certificate trust.
A destructive ransomware angle sets the tone before Sean Gerber shifts into Domain 4.1.2 practice. He frames modern ransomware as less narrowly focused on stealing data and more capable of damaging corporations outright, then moves into the kind of protocol reasoning CISSP…
A CISSP study session that turns vulnerability disclosure into a measured ethics decision.
This CISSP Cyber Training Podcast episode frames vulnerability disclosure as an ethics problem with real pressure behind it. A security consultant finds a critical flaw in a widely used vendor product, sees the risk of a significant data breach, and has to respond when the…
A practical Domain 7.6 review that connects scan choices to the disruption they can cause.
Domain 7.6 gets a useful workout in this Christmas-set CISSP session, where testing options are framed less as textbook labels than as operational choices with real consequences.
A practical CISSP review of business continuity scope before disruption turns planning into crisis.
Sean Gerber treats CISSP Domain 1 as a working security-management problem, moving from AI systems and infrastructure risk into the quieter discipline of keeping an organization running.
CISSP prep with a clear income angle and practical GRC and cloud detail.
The episode treats CISSP as a path toward higher income and more useful work, then keeps that promise by staying close to practical material. It gives useful attention to GRC dashboards for boards of directors, continuous evidence collection that can ease audit fatigue, and…
CISSP training that links exam prep with five high-income skills and practical GRC and cloud work.
Sean Gerber presents CISSP as one piece of a wider cybersecurity toolkit, then turns to five high-income skills that sit alongside it. The most useful sections stay close to daily practice: real-time dashboards for boards of directors, clearer risk reporting for leadership,…
Practical CISSP practice that keeps circling back to how security work actually gets managed.
This CISSP question session pairs exam prep with a practical look at alert fatigue, SOAR, and the pressure of keeping security operations from drowning in alerts.
Deeply researched narrative dives into hacking history and cyber-law cases, hosted by Ran Levi.
Reported narratives on hackers, spyware, and data crimes from Dina Temple-Raston.
Dave, Joe, and Maria break down phishing kits, deepfakes, and social-engineering scams weekly.
IAPP's Jedidiah Bracy interviews the regulators and lawyers writing privacy and AI law.
A daily cybersecurity briefing hosted by Dave Bittner, pairing breaking incidents with a guest interview.
Sean Gerber opens with a warning about discontinued edge devices, then moves into the defensive controls that matter for Domain 7.7.
Sean Gerber opens CISSP Cyber Training Podcast episode CCT 333 with a Wired Magazine story about Dark Sword, a tool researchers at Google, iVerify, and Lookout tied to infected websites that can compromise iOS devices when someone simply visits a site.
Domain 3.5 gets the focus.
AI is the center of the lesson, and Sean Gerber keeps the career advice direct.
Sean Gerber uses CISSP Question Thursday to work through 15 Domain 1 questions tied to security policies and procedures, including encryption at rest and in transit, SSO, least privilege, zero trust, and NDAs.
Monday starts with AI threats.
Five higher-income skills are the target.
Sean Gerber uses CISSP Domain 6.4 to connect vulnerability reporting, trend analysis, internal scans, and external scans to everyday security work.
Sean Gerber opens the CISSP Cyber Training Podcast with a React to Shell warning, saying the exploit is active against React, Next.js 15.x and 16.x app router deployments, and related frameworks such as Vite, Waku, and Parcel.
Sean Gerber uses an InfoSec Security Magazine article to argue that about 80% of IT and security decision makers have major gaps in hardware and firmware knowledge, including 53% who share BIOS passwords.
Sean Gerber uses an article about Anthropic’s Claude Code Security to argue that AI tools will change code vulnerability detection by reasoning about logic and data flows, not just scanning for signatures.
Sean Gerber frames CISSP Domain 2.5 around end-of-life, end-of-support, and asset retention for physical devices, virtual machines, microservices, and data stores.
Sean Gerber uses CCT 323 to work through CISSP-style vulnerability management questions, including false positives, compensating controls, disclosure timing, and risk communication.
Sean Gerber opens with a cybercrime article and uses it to frame a CISSP Question Thursday on Domain 1.8.
Sean Gerber opens by greeting listeners and setting up Domain 8.4.
Sean Gerber opens with his usual weekly training rhythm, then pivots into CISSP 1.5, focusing on legal and regulatory issues in information security.
This episode covers AI governance, risk, and compliance (GRC), starting with a real-world cyber attack on Stryker to illustrate endpoint security risks, then diving into the urgent need for AI governance frameworks given low adoption rates and high regulatory fines.
Sean Gerber opens with CISSP Monday and frames the day around Domain 7.1, Understanding and Complying with Investigations.
Most security teams are just turning on AI and hoping it works — the SANS survey numbers prove it.
Sean Gerber opens with his weekly CISSP question format and frames the session as a study push for people working toward the exam.
Sean Gerber uses an InfoSecurity magazine article about Scripted Sparrow to show how millions of business email compromise messages can target accounts payable and finance teams.
Sean Gerber of CISSP Cyber Training walks through a CSO Magazine article on how AI adoption is reshaping cyber insurance premiums—raising scrutiny for companies deploying unvetted AI while also potentially lowering premiums through automated threat detection—then works through five CISSP Domain 1 practice questions covering discretionary access controls, the CIA triad, due care vs.
Sean Gerber opens CISSP Cyber Training with a domain 3 question set and a short article about an Indian government probe into CCTV espionage linked to Pakistan.
Sean opens with holiday-season banter and a cybersecurity news item, then gets into access control.
Sean Gerber opens with a CSO Magazine article and then moves into part two of Domain 1.8.
Sean Gerber discusses CISSP exam questions and a news article about deepfake nudes in schools, emphasizing the role of cybersecurity professionals in community safety.
This episode discusses insider risk and standard security procedures, framed within CISSP exam preparation and career advice.
This episode discusses CISSP exam topics and a news article about LinkedIn scanning browser extensions.
This episode is a rapid review of CISSP Domain 2 and preview of Domain 3, providing key concepts and study tips to help listeners pass the CISSP exam.
Host Sean Gerber introduces a two-part rapid review of CISSP Domain 1 content to help listeners prepare for the exam.