Search & Discovery 2.0
Search the complete Bare Metal Cyber knowledge system with identifier-aware ranking, framework filters, topic discovery, and direct paths into books, podcasts, and Academy learning.
Search results
Securing a system starts with built-in operating system tools, and this episode walks you through three key Windows security features. First is Windows Defender, which provides real-time protection against malware, network attacks, and unwanted software changes.…
In this episode, we cover password best practices as outlined in the CompTIA IT Fundamentals (ITF+) certification exam. You’ll learn about creating strong passwords using length, complexity, and unpredictability, as well as how to avoid common mistakes like password reuse.…
While cyber defenses are critical, physical security is just as important. In this episode, we explain how physical access controls protect infrastructure from unauthorized tampering, theft, or sabotage.…
In this episode, we tackle the biggest early challenge: how to study for the Security+ exam effectively. We'll guide you through building a realistic, sustainable study plan that adapts to your personal schedule and learning style.…
Listen to Promoting a Risk-Aware Culture through Security Awareness Training in the ISACA CRISC audio course.
Payment environments that capture or process PINs rely on a separate family of standards with precise hardware and handling rules, and the exam expects you to know what those standards cover and how they intersect with PCI DSS.…
Supervisory Control and Data Acquisition (SCADA) systems and embedded devices operate some of the most critical infrastructure in the world—from energy grids to transportation systems.…
You don’t need to be a developer to influence secure code—but you do need to understand what secure coding looks like.…
Effective security governance depends on clear documentation and measurable performance. This episode explains the structure and function of security documentation—including policies, standards, guidelines, and procedures—as well as how to manage these documents over time.…
Third-party relationships extend your attack surface and regulatory obligations, and the CSSLP exam expects you to treat supplier security as an integral part of the software lifecycle.…
This episode covers the best practices for managing software, from verifying licensing compliance to ensuring secure sourcing and regular updates.…
Listen to Spaced Retrieval Review: Email and Credential Attacks Rapid Recognition Practice in the GIAC GCIL audio course.
Most state privacy laws include explicit security requirements. This episode reviews common obligations such as implementing reasonable safeguards, risk-based controls, encryption, and access restrictions.…
This episode discusses the importance of accurate timekeeping for authentication, logging, and system coordination in cloud environments.…
In this episode, we dive into AWS Trusted Advisor, an AWS service designed to help you optimize your AWS infrastructure, improve security, and reduce costs.…
Listen to Understand PKI in Practice: Certificates, Chains, Validation, and Revocation Reality in the GIAC GSEC audio course.
Domain 4 marks a transition from availability and performance into security—protecting the integrity and confidentiality of the network.…
In this episode, we dive into the second pillar of the AWS Well-Architected Framework: security. Security is a critical aspect of any cloud architecture, and AWS provides a wide range of tools and services to help you secure your data and applications.…
AI security governance establishes accountable decisions, controls, evidence, and oversight across the AI lifecycle without treating AI as either ordinary software or an unknowable special case.
Application security governance connects engineering work to risk ownership, secure design expectations, delivery controls, exceptions, evidence, and operational accountability.
CI/CD pipeline security protects source, build services, runners, credentials, dependencies, artifacts, approvals, and deployment paths used to deliver software.
Cloud data-plane security protects the operations that read, write, process, transmit, and delete workload and business data after cloud resources have been configured.
Cloud session and token security governs issuance, scope, lifetime, storage, revocation, audience, refresh, and monitoring for interactive and workload access.
Container image security protects the build, storage, distribution, approval, and use of container images.
