CCT 288: CISSP Rapid Review (Domain 6)

CISSP Cyber Training Podcast - CISSP Training Program

Send us a text

Check us out at: https://www.cisspcybertraining.com/

Get access to 360 FREE CISSP Questions: https://www.cisspcybertraining.com/offers/dzHKVcDB/checkout

Get access to my FREE CISSP Self-Study Essentials Videos: https://www.cisspcybertraining.com/offers/KzBKKouv

https://www.jeffersonfisher.com/

A spike in ransomware on the factory floor isn’t just a headline; it’s a stress test for how we design, segment, and measure our defenses. We open with the realities of manufacturing risk—legacy OT, flat networks, and high stakes for uptime—then translate that urgency into a practical walkthrough of CISSP Domain 6: the assessments, testing, and metrics that actually prove security works. Along the way, we share a surprising leadership edge from a trial lawyer’s communication book that helps you argue less, align faster, and get executive buy‑in when the first vuln report lights up like a Christmas tree.
We break down internal vs external audits and when each makes sense, plus a smart cadence for third‑party and supply chain reviews that acknowledges your perimeter now includes APIs and vendor tunnels. From vulnerability scans and scoped penetration tests to SIEM‑driven log reviews and synthetic transactions, we map out a toolkit that catches issues before users do. We go deeper on secure code reviews, unit/integration testing, and interface testing for APIs, because the quiet paths between services are often where real risk hides.
Then we shift to the machinery of proof: breach and attack simulation for continuous validation, compliance checks to spot drift, and the metrics that matter—MTTD, MTTR, patch rates, vuln density, mean time to report. We lay out how to run account reviews, verify backups you can trust, and exercise DR/BC so recovery is muscle memory. Finally, we tackle remediation prioritization, exception handling with compensating controls, and ethical disclosure that minimizes harm while nudging vendors to act. If you’re preparing for the CISSP or elevating your program, you’ll leave with a clearer map and concrete next steps.
If this helped, follow the show, share it with a teammate, and drop a review—what’s one control or metric you’re upgrading this quarter?

Gain exclusive access to 360 FREE CISSP Practice Questions delivered directly to your inbox! Sign up at FreeCISSPQuestions.com and receive 30 expertly crafted practice questions every 15 days for the next 6 months—completely free! Don’t miss this valuable opportunity to strengthen your CISSP exam preparation and boost your chances of certification success. Join now and start your journey toward CISSP mastery today!

Fejezetek

1. Welcome & Today’s Roadmap (00:00:00)

2. Ransomware Hits Manufacturing Hard (00:01:13)

3. Why OT, IT, And IoT Collide (00:05:21)

4. Practical Factory Defense Moves (00:08:56)

5. Book Takeaway: Communicate To Lead (00:11:52)

6. Domain 6 Overview And Weighting (00:18:26)

7. Internal, External, And Third‑Party Audits (00:21:36)

8. Vulnerability Scans And Pen Tests (00:26:47)

9. Logs, SIMs, And Synthetic Transactions (00:32:43)

10. Secure Code Reviews And Testing (00:38:10)

11. Misuse Cases, Coverage, And Interfaces (00:43:45)

12. BAS And Compliance Checks (00:49:23)