Technology

Certified: The GIAC GCCC Audio Course

by Jason Edwards

Share this ranking Is this your show? Claim it

Listen on Apple Podcasts RSS feed

Chart positions today · United Kingdom

Not on the United Kingdom charts we track today.

If you like Certified: The GIAC GCCC Audio Course, try…

The Boards Guide to Corporate AI Governance

Also in Technology

Cybersecurity Where You Are (audio)

Also in Technology

WeCyberYou! Unlocked Podcast

Also in Technology

Cohesity Zero Downtime

Also in Technology

Digital Transformation Podcast

Also in Technology

Tech Talks Daily

Also in Technology

Latest episodes

Episode 12 — Design secure configuration baselines that are measurable, repeatable, and realistic

February 9, 2026 · 10 min

This episode focuses on configuration baselines as the foundation for hardening that can be verified, maintained, and defended under audit. You’ll define a baseline as a documented, approved set of secure settings for a specific asset…
Episode 11 — Prevent unapproved execution with allowlisting logic and tightly governed exceptions

February 9, 2026 · 10 min

This episode explains how application allowlisting reduces attack surface by controlling what is permitted to execute, not just what is blocked after detection. You’ll define allowlisting in practical terms, including path rules, publisher…
Episode 10 — Detect unauthorized software quickly using discovery signals, baselines, and change patterns

February 9, 2026 · 9 min

This episode focuses on detecting unauthorized software fast enough to reduce dwell time and prevent small issues from becoming incidents. You’ll learn what counts as unauthorized, including unapproved tools, risky remote access utilities…
Episode 9 — Establish software asset authority: approved lists, licensing realities, and control points

February 9, 2026 · 11 min

This episode explains how to establish software asset authority so “approved software” is a controlled concept, not a vague preference. You’ll define software asset authority as the policies, tools, and decision processes that determine…
Episode 8 — Validate enterprise asset inventory quality with drift checks and audit-ready evidence

February 9, 2026 · 11 min

This episode teaches you how to validate inventory quality rather than assuming an inventory tool is correct because it produces a list. You’ll define what “quality” means for asset data: completeness, accuracy, timeliness, uniqueness, and…

Show 7 more episodesShow fewer episodes

Episode 7 — Discover enterprise assets continuously using multiple sources and reconciliation discipline

February 9, 2026 · 10 min

This episode focuses on continuous asset discovery, emphasizing how multiple data sources reduce blind spots but introduce reconciliation challenges. You’ll learn why single-source inventory approaches fail at scale, and how to combine…
Episode 6 — Define enterprise asset scope: what counts, why it matters, who owns accuracy

February 9, 2026 · 10 min

This episode defines enterprise asset scope in a way that supports both exam questions and day-to-day security operations. You’ll clarify what “enterprise assets” include, such as endpoints, servers, cloud workloads, network devices, and…
Episode 5 — Operationalize CIS Controls governance: owners, metrics, reporting, and accountability

February 9, 2026 · 12 min

This episode turns CIS Controls from a reference document into a governed program that survives staff changes and competing priorities. You’ll define governance in practical terms: named owners, clear decision rights, and a repeatable…
Episode 4 — Map CIS Controls to major security standards and governance expectations

February 9, 2026 · 13 min

This episode connects CIS Controls v8 to the standards and governance expectations you’ll see referenced in GCCC-style thinking. You’ll learn why mapping matters, how organizations use crosswalks to avoid duplicate work, and what auditors…
Episode 3 — Understand CIS Controls v8 history, purpose, and how the model is organized

February 9, 2026 · 11 min

This episode explains CIS Controls v8 in a way that supports both exam recall and practical implementation discussions. You’ll cover why the Controls exist, how they evolved from earlier versions, and what “prioritized, safeguard-focused…
Episode 2 — Build an audio-first study plan: recall cycles, review rhythm, and exam-day flow

February 9, 2026 · 12 min

This episode builds an audio-first study plan designed for busy schedules while still meeting GCCC performance demands. You’ll learn how to structure short, repeatable recall cycles that force active retrieval, not passive listening, and…
Episode 1 — Decode the GCCC blueprint: domains, scoring, pacing, and what 71% demands

February 9, 2026 · 14 min

This episode focuses on interpreting the GCCC exam blueprint so you can study with precision instead of guesswork. You’ll break down how domains shape the question mix, what a passing score means in practical terms, and how pacing…

Full episode archive on Apple Podcasts →

About the show

GCCC is a control-first security course built for busy professionals who want practical mastery of the CIS Controls v8 and the real-world workflows that make them stick. You’ll learn how to inventory assets and software with confidence, harden configurations without breaking operations, manage vulnerabilities with proof-based closure, and turn logging into outcomes through centralized collection, correlation, and sustainable alerting. The course also covers malware defense as layered prevention plus rapid containment, data protection through classification, access boundaries, and safe retention, and recovery readiness with RPO/RTO planning, backup isolation, and restore testing. You’ll strengthen governance across identity and access management, change control, third-party risk, awareness programs that drive behavior change, incident response readiness and execution, and how to use testing results to improve controls over time. Every lesson stays exam-focused while keeping the emphasis on operational evidence, measurable effectiveness, and decision-making under pressure—so you’re not just memorizing terms, you’re learning how to run the controls in production with confidence.