Technology

Certified: The GIAC GCLD Audio Course

by Jason Edwards

Share this ranking Is this your show? Claim it

Listen on Apple Podcasts RSS feed

Chart positions today · Ireland

Not on the Ireland charts we track today.

If you like Certified: The GIAC GCLD Audio Course, try…

Ctrl+Alt+Azure

Also in Technology

Talos Takes

Also in Technology

Cloud Security Podcast

Also in Technology

ISACA Podcast

Also in Technology

Cohesity Zero Downtime

Also in Technology

The OPSEC Podcast: Privacy & Security for Life in the Digital Age

Also in Technology

Latest episodes

Episode 12 — Design multi-account strategy that reduces blast radius and simplifies governance

February 10, 2026 · 13 min

This episode focuses on why multi-account designs are a core cloud defense pattern and how they support exam scenarios involving segmentation, governance, and risk reduction. You’ll define blast radius in cloud terms and see how separating…
Episode 11 — Master cloud account fundamentals: tenants, subscriptions, projects, and billing boundaries

February 10, 2026 · 14 min

This episode explains how cloud account structures define ownership, isolation, and accountability, which frequently appears in GCLD questions about governance design. You’ll distinguish tenants from subscriptions or projects and connect…
Episode 10 — Recover safely after cloud compromise with controlled rebuilds and trust restoration

February 10, 2026 · 12 min

This episode focuses on recovery as a structured process that restores trust, not just service uptime, which is a key theme in cloud defense and exam scenarios. You’ll define safe recovery practices such as controlled rebuilds, validated…
Episode 9 — Preserve cloud evidence correctly so investigations remain reliable and defensible

February 10, 2026 · 9 min

This episode explains how to preserve evidence in cloud environments so your investigation remains trustworthy and your conclusions can withstand scrutiny. You’ll define evidence sources in cloud terms, including identity logs…
Episode 8 — Contain cloud intrusions fast using isolation, credential resets, and scoped actions

February 10, 2026 · 10 min

This episode covers containment tactics that work in cloud without causing unnecessary outages or spreading the blast radius. You’ll define containment as limiting attacker ability to act, then apply that idea using isolation controls…

Show 7 more episodesShow fewer episodes

Episode 7 — Recognize privilege escalation patterns unique to cloud identity and policy systems

February 10, 2026 · 10 min

This episode explains how cloud privilege escalation often happens through identity, policy, and role assumptions rather than local exploitation. You’ll learn core concepts like permissions boundaries, role chaining, delegated…
Episode 6 — Track common initial access paths attackers use in public cloud environments

February 10, 2026 · 11 min

This episode focuses on the entry points attackers prefer in cloud, which directly supports exam questions about exposure reduction and incident hypotheses. You’ll define initial access in cloud terms, including stolen credentials…
Episode 5 — Identify high-probability cloud attacker goals, incentives, and target choices

February 10, 2026 · 10 min

This episode breaks down why cloud environments are targeted and what attackers most often try to achieve once they enter. You’ll map common goals—data theft, service disruption, cryptomining, persistence, and privilege expansion—to the…
Episode 4 — Apply threat-informed defense by matching controls to real cloud adversaries

February 10, 2026 · 11 min

This episode teaches how to prioritize defenses based on how cloud attackers actually operate, which is central to designing effective control stacks and answering scenario-driven exam items. You’ll connect adversary behaviors to control…
Episode 3 — Understand shared responsibility clearly across IaaS, PaaS, and SaaS realities

February 10, 2026 · 11 min

This episode explains shared responsibility in a way that supports exam questions and real incident accountability. You’ll define what the provider secures versus what you must secure, then apply that model across IaaS, PaaS, and SaaS…
Episode 2 — Build a spoken study plan that sticks for busy cloud defenders

February 10, 2026 · 14 min

This episode focuses on turning exam objectives into a realistic plan you can execute alongside a full workload. You’ll learn how to convert broad domains into weekly outcomes, how to sequence topics so foundations support advanced…
Episode 1 — Decode the GCLD exam format, rules, scoring, and timing calmly

February 10, 2026 · 13 min

This episode breaks down what to expect on the GCLD exam so you can spend your effort on mastery instead of guesswork. You’ll clarify how question styles, timing pressure, and scoring mechanics shape test strategy, including why pacing…

Full episode archive on Apple Podcasts →

About the show

This course teaches you how to secure cloud environments the way real incidents unfold: misconfigurations, over-permissioned identities, weak network boundaries, and data exposure paths that are easy to miss until it’s too late. You’ll build a practical, defensible security posture across compute, containers, storage, and managed services by using hardened baselines, policy enforcement, continuous validation, and clear ownership. Along the way, you’ll learn how to reduce attack surface with immutable deployment patterns, least privilege workload identities, safe sharing defaults, and recovery-focused controls like versioning and lifecycle rules. You’ll also strengthen detection and response by choosing high-signal monitoring that reveals attacker movement, correlating identity abuse across logins, tokens, and privilege changes, and tuning alerts so responders focus on what actually matters. The course includes actionable playbooks for investigating cloud alerts, preventing data leakage with blocking controls and step-up authentication for risky actions, and preparing audit-ready evidence that aligns logs, configurations, access reviews, and exceptions. The result is a cloud security approach that is operational, repeatable, and built for teams who need measurable risk reduction—not just best-practice slogans.