Certified: The ISC(2) ISSMP Audio Course

This episode teaches how to obtain authorized risk waivers with proper approval and traceable records, because ISSMP scenarios frequently hinge on who can accept risk, what evidence must exist, and how to ensure waivers do not become invisible risk d... more

This episode explains how to document compliance exceptions with the controls, workarounds, and risk context needed to remain defensible, because ISSMP often tests whether you understand that exceptions must be governed, time-bounded, and evidence-su... more

This episode teaches how to monitor and validate remediation actions until risk is truly reduced, which ISSMP emphasizes because remediation is not complete when a ticket is closed, but when control performance and evidence prove the weakness is no l... more

This episode explains how to evaluate and validate audit findings and then build responses that address root causes, because ISSMP questions often test whether you can move beyond superficial fixes and produce remediation that actually reduces risk a... more

This episode teaches how to coordinate audit activities and maintain evidence readiness year-round, because ISSMP expects leaders to run compliance as a continuous program capability rather than a seasonal event. You will learn how to organize eviden... more

This episode explains how to plan and schedule internal and external audit activities with minimal disruption, which matters for ISSMP because audit success depends on evidence readiness, stakeholder coordination, and disciplined scope management, no... more

This episode focuses on defining and monitoring compliance metrics that survive audit scrutiny, because ISSMP expects leaders to distinguish activity counts from evidence-backed indicators of control operation and conformance. You will learn how to s... more

This episode teaches how to implement a compliance framework into daily operations without creating “paper security,” which ISSMP tests because leaders must ensure controls are real, measurable, and consistently executed rather than documented and ig... more