PMI PMP Practice
Practice project leadership and delivery decisions across People, Process, and Business Environment using the official July 2026 PMP content outline.
Search & Discovery 2.0
Search the complete Bare Metal Cyber knowledge system with identifier-aware ranking, framework filters, topic discovery, and direct paths into books, podcasts, and Academy learning.
Search results
Practice project leadership and delivery decisions across People, Process, and Business Environment using the official July 2026 PMP content outline.
Practice agile decisions across mindset, leadership, product, and delivery using the official March 2026 PMI-ACP examination content outline.
Practice project-risk decisions across strategy and planning, identification, analysis, response, monitoring, and closure.
Put operational security concepts into practice through everyday access, monitoring, recovery, and protection decisions.
The acquisition process provides an important vehicle for protecting the supply chain. There are many useful tools and techniques available, including obscuring the end use of a system or system component, using blind purchases, requiring tamperevident packaging, or using trusted or controlled distribution. The results from a supply chain risk assessment can inform the strategies, tools, and methods that are most app
Apply GV.RR-04 to achieve this CSF 2.0 outcome: Cybersecurity is included in human resources practices.
In this episode of Dot One, we explore the critical process of incident response—how organizations detect, manage, and mitigate cyber incidents to minimize damage. From ransomware attacks to data breaches, no organization is immune to cyber threats. We break down the incident response lifecycle, including preparation, detection, containment, eradication, and recovery, ensuring that businesses can respond swiftly…
Backups form the last line of defense when everything else fails, and a good strategy turns potential disaster into a recoverable event.…
Continuing our discussion on backups, this episode explores encryption, snapshots, and backup lifecycle management—three critical components of a secure, efficient, and resilient backup system.…
Listen to Connect Authentication Authorization Accounting Non Repudiation and Privacy in Practice in the ISC2 Certified in Cybersecurity (CC) audio course.
Data retention policies define what data must be kept, for how long, and under what security controls—and when they’re done right, they strike a balance between legal obligations, operational needs, and security.…
Listen to Least Privilege in Practice: Reducing Risk Without Slowing Work to a Crawl in the ISC2 Certified in Cybersecurity (CC) audio course.
This episode examines risk frameworks for AI security, focusing on the NIST AI Risk Management Framework and ISO/IEC 42001. These frameworks provide structured approaches to identify, assess, mitigate, and monitor AI-specific risks across technical and organizational domains.…
Listen to Threat Modeling Frameworks in Practice: ATT&CK, CAPEC, STRIDE, Kill Chain, OWASP in the CompTIA SecurityX audio course.
Proactive security means finding and fixing weaknesses before attackers do, and vulnerability scanning is the tool that makes that possible at scale.…
This opening episode introduces the Certified Cloud Security Professional (CCSP) certification and explains why it has become the global benchmark for cloud security expertise.…
Supply chain security has become one of the most urgent issues in cloud and IT. This episode explores how software provenance, Software Bills of Materials (SBOMs), and code-signing ensure integrity in what organizations deploy.…
Play cybersecurity challenges, focused quizzes, missions, and certification practice.
The cloud landscape is constantly evolving, and regulations are racing to keep pace. This final episode explores emerging rules governing artificial intelligence, digital sovereignty, and sector-specific requirements in areas like healthcare, finance, and critical infrastructure.…
Most organizations rely on third-party AI systems and services, creating exposure to risks outside their direct control. This episode introduces procurement and vendor risk management as critical components of responsible AI.…
Safe browsing is a critical topic in the CompTIA IT Fundamentals (ITF+) certification exam, and this episode shows you how to verify website certificates, identify secure connections, and recognize invalid or suspicious certificates.…
Cloud adoption almost always involves third parties, and their risk becomes your risk. This episode explains how due diligence, contract clauses, and continuous monitoring are used to manage vendor relationships.…
This episode introduces Domain 1 of the Network Plus exam, which focuses on networking fundamentals. It explains that this domain lays the groundwork for nearly every other topic you will encounter, covering the core models, architectures, and technologies that make networks function.…
Welcome to the AWS Certified Cloud Practitioner (CCP) PrepCast! In this episode, we'll lay the groundwork for your certification journey by explaining the value of the AWS CCP and what you can expect from the exam.…