検索キーワード： 著者 "Jason Edwards" すべてのカテゴリー

Welcome to Certified: The ISACA AAISM Audio Course. If you’re responsible for security, risk, assurance, or governance and AI is now part of your environment, you’re in the right place. This course is designed to help you prepare for the ISACA AAISM certification with clear explanations and practical framing, so the topics feel manageable instead of abstract. Each episode stays focused on the concepts the exam tests, while still connecting them to real situations you might face when reviewing AI use cases, third-party AI services, or internal model development. Expect straightforward ...

Welcome to Certified: The ISACA AAIR Audio Course. If you’re here, you’re probably seeing AI show up everywhere: in products, in internal tools, in vendor roadmaps, and in executive conversations that expect quick answers. I built this course for people who need to evaluate AI systems responsibly, even when they don’t have time to become machine learning specialists. Across these episodes, we’ll translate AI concepts into assurance language you can use: governance, controls, evidence, risk, and accountability. You’ll learn how to ask better questions, how to recognize weak assurances...

Welcome to Certified: The ISACA GSOM Audio Course. I’m here to help you build the kind of security operations management mindset that works in the real world, where priorities shift, alerts pile up, and executives want answers in plain language. Across this course, you can expect practical explanations, clear definitions, and guidance that connects day-to-day operations to business risk. We’ll talk about how security teams are structured, how work gets triaged and tracked, how incidents are managed without chaos, and how to report progress in a way leaders trust. Everything is taught with ...

Welcome to Certified: The ISACA GISF Audio Course. I built this course for people who want a clear, practical path into cybersecurity fundamentals—whether you’re moving into a security role, supporting security from IT or operations, or trying to build a reliable baseline before you specialize. Here’s what you can expect: short, focused lessons that connect concepts to real environments, plain-language explanations that still respect the technical detail, and a steady progression that helps you understand not just what something is, but why it matters. We’ll cover threats, risk, ...

Welcome to Certified: The ISACA GCIL Audio Course. I’m Dr Jason Edwards, and I built this series for people who need governance leadership skills that hold up under real pressure—tight timelines, conflicting priorities, and stakeholders who want answers today. Across these lessons, you’ll hear a clear, practical walkthrough of what governance leadership means, how it differs from management, and how to apply it in organizations where technology, risk, and business goals collide. Expect short, focused episodes with straightforward explanations, common-sense examples, and language you can ...

This course teaches you how to secure cloud environments the way real incidents unfold: misconfigurations, over-permissioned identities, weak network boundaries, and data exposure paths that are easy to miss until it’s too late. You’ll build a practical, defensible security posture across compute, containers, storage, and managed services by using hardened baselines, policy enforcement, continuous validation, and clear ownership. Along the way, you’ll learn how to reduce attack surface with immutable deployment patterns, least privilege workload identities, safe sharing defaults, and ...

The podcast delivers practical cloud security guidance for professionals who have to ship real systems on real timelines. Episodes focus on the moves that prevent costly incidents: reducing accidental exposure, tightening identity and permissions, hardening serverless triggers, securing managed platforms, and building durable defaults that survive updates and team changes. The approach is technical and operational, with clear explanations that translate directly into repeatable patterns. Each topic is designed to help you think like both a defender and an architect: what attackers exploit ...

This audio-first cybersecurity course is built for busy professionals who need security that works in real environments, not just on slides. You’ll learn how to design monitoring, logging, SIEM, and SOAR operations that produce usable visibility, reduce noise, and support fast, defensible response. Along the way, you’ll connect technical controls to practical program execution: ownership, SLAs, governance, decision rights, and evidence that holds up during incidents and audits. You’ll also strengthen your ability to explain risk in business terms and prioritize work using context like ...

GCCC is a control-first security course built for busy professionals who want practical mastery of the CIS Controls v8 and the real-world workflows that make them stick. You’ll learn how to inventory assets and software with confidence, harden configurations without breaking operations, manage vulnerabilities with proof-based closure, and turn logging into outcomes through centralized collection, correlation, and sustainable alerting. The course also covers malware defense as layered prevention plus rapid containment, data protection through classification, access boundaries, and safe ...

This course is designed to teach you how real-world threat intelligence actually works, from first signal to final decision. It focuses on turning raw technical data into clear, defensible intelligence that security teams and leaders can trust. Rather than memorizing isolated frameworks or chasing alerts, you learn how to think analytically, challenge assumptions, and build conclusions that hold up under pressure. The emphasis throughout is on clarity, rigor, and practical application in modern security environments. You will learn how to model intrusions, track adversary behavior over time, ...

This audio-first security strategy course helps you turn security intent into measurable execution. You will learn how to assess current capabilities against mission outcomes and real risk, identify gaps and root causes, and prioritize improvements with clear business rationale. The course shows you how to translate technical work into outcomes leaders care about, like reliability, resilience, and reduced incident impact, then sequence initiatives so they land with minimal friction across teams. You will also learn how to build a strategic roadmap that blends quick wins with foundational ...

This DataX DY0-001 PrepCast is an exam-focused, audio-first course designed to train analytical judgment rather than rote memorization, guiding you through the full scope of the CompTIA DataX exam exactly the way the test expects you to think. The course builds from statistical and mathematical foundations into exploratory analysis, feature design, modeling, machine learning, and business integration, with each episode reinforcing how to interpret scenarios, recognize constraints, select defensible methods, and avoid common traps such as leakage, metric misuse, and misaligned objectives. ...

Step inside the FedRAMP world with an audio course built for real people, not policy wonks. In clear, story-driven language, each short episode unpacks the steps, roles, and secrets behind earning and keeping a federal cloud authorization. You’ll hear how the pieces fit together—documents, assessments, evidence, and continuous monitoring—without ever touching a slide or staring at a diagram. It’s designed for anyone who wants to get it: cloud providers chasing their first ATO, assessors sharpening their review skills, or agency staff looking to understand how it all connects. You’ll ...

This audio course builds practical, exam-ready fluency for the Payment Card Industry Professional certification by teaching you how to reason the way PCI questions are written and how real assessments are performed. Across the series you’ll learn core definitions that drive every decision—what constitutes cardholder data and sensitive authentication data, how roles differ between merchants and service providers, and where PCI DSS sits among companion standards like P2PE, SSF, PIN, PTS, and card production requirements. Episodes translate those concepts into a working toolkit: map payment ...

This **NIST Special Publication 800-53 Audio Course** is a complete, audio-first learning series designed to make one of the most comprehensive cybersecurity standards both clear and approachable. Through structured, plain-language narration, each episode walks you through the controls, objectives, and principles that form the foundation of modern federal and enterprise security programs. You’ll learn how NIST 800-53 defines safeguards across access control, incident response, risk assessment, system integrity, and continuous monitoring—building both exam readiness and real-world ...

The **CIS Critical Security Controls Audio Course** is a comprehensive, audio-first training series that guides listeners through all eighteen **CIS Controls**, transforming one of the world’s most respected cybersecurity frameworks into clear, actionable learning. Designed for professionals, students, and auditors alike, this series explains each control in practical, plain language—focusing on how to implement, assess, and sustain them in real environments. With eighty-three structured episodes, the course walks you step by step through the safeguards that define effective cybersecurity,...

The HITRUST Audio Course is a complete, audio-first guide to mastering the HITRUST i1 and r2 frameworks—two of the most widely recognized models for integrated risk and compliance management. Designed for both newcomers and seasoned professionals, this course translates complex assurance requirements into clear, plain-language lessons you can absorb on the go. Each episode walks through the structure and intent of the HITRUST frameworks, explaining how controls, maturity levels, and evidence requirements come together to create a unified, auditable security program. Listeners gain practical ...

The ISO/IEC 27001 Framework is the internationally recognized standard for establishing, implementing, maintaining, and continually improving an Information Security Management System (ISMS). It provides a systematic approach to managing sensitive information through risk management, governance, and control implementation. At its core, ISO 27001 helps organizations protect the confidentiality, integrity, and availability of data—whether stored, processed, or transmitted—by aligning security practices with business objectives and regulatory requirements. The framework is built around a ...

The **SOC 2 Compliance Audio Course** is your comprehensive, audio-first guide to understanding and implementing the Service Organization Control (SOC) 2 framework from the ground up. Designed for cybersecurity professionals, auditors, and business leaders, this course breaks down the American Institute of Certified Public Accountants (AICPA) Trust Services Criteria into clear, practical lessons that connect compliance theory with daily operational reality. Each episode explores essential concepts such as governance, risk assessment, security controls, and audit preparation—helping you ...

The Google Cloud Digital Leader Audio Course is your complete, audio-first guide to mastering the foundational business, strategy, and technology concepts behind Google Cloud. Designed for learners at all levels, this course breaks down every domain of the official exam into clear, practical lessons you can absorb anytime, anywhere. Each episode explores key topics such as digital transformation, cloud infrastructure, data analytics, artificial intelligence, security, and sustainability—connecting technical ideas with business value to help you think like a cloud leader. Whether you’re new...