Listen to a podcast, please open Podcast Republic app. Available on Google Play Store and Apple App Store.
| Episode | Date |
|---|---|
|
Welcome to the NIST 800-53 Audio Course
|
Oct 20, 2025 |
|
Episode 147 — Spotlight: Physical Access Control (PE-3)
|
Oct 20, 2025 |
|
Episode 146 — Spotlight: Risk Management Strategy (PM-9)
|
Oct 20, 2025 |
|
Episode 145 — Spotlight: System Security and Privacy Plans (PL-2)
|
Oct 20, 2025 |
|
Episode 144 — Spotlight: Authority to Process Personally Identifiable Information (PT-2)
|
Oct 20, 2025 |
|
Episode 143 — Spotlight: Personnel Screening (PS-3)
|
Oct 20, 2025 |
|
Episode 142 — Spotlight: Media Sanitization (MP-6)
|
Oct 20, 2025 |
|
Episode 141 — Spotlight: Controlled Maintenance (MA-2)
|
Oct 20, 2025 |
|
Episode 140 — Spotlight: Awareness Training (AT-2)
|
Oct 20, 2025 |
|
Episode 139 — Spotlight: Supply Chain Risk Management Plan (SR-2)
|
Oct 20, 2025 |
|
Episode 138 — Spotlight: Component Authenticity (SR-11)
|
Oct 20, 2025 |
|
Episode 137 — Spotlight: Supplier Assessments (SR-6)
|
Oct 20, 2025 |
|
Episode 136 — Spotlight: Supply Chain Controls and Processes (SR-3)
|
Oct 20, 2025 |
|
Episode 135 — Spotlight: Authorization (CA-6)
|
Oct 20, 2025 |
|
Episode 134 — Spotlight: Continuous Monitoring (CA-7)
|
Oct 20, 2025 |
|
Episode 133 — Spotlight: Plan of Action and Milestones (CA-5)
|
Oct 20, 2025 |
|
Episode 132 — Spotlight: Control Assessments (CA-2)
|
Oct 20, 2025 |
|
Episode 131 — Spotlight: System Recovery and Reconstitution (CP-10)
|
Oct 20, 2025 |
|
Episode 130 — Spotlight: Contingency Plan Testing (CP-4)
|
Oct 20, 2025 |
|
Episode 129 — Spotlight: System Backup (CP-9)
|
Oct 20, 2025 |
|
Episode 128 — Spotlight: Contingency Plan (CP-2)
|
Oct 20, 2025 |
|
Episode 127 — Spotlight: Error Handling (SI-11)
|
Oct 20, 2025 |
|
Episode 126 — Spotlight: Spam Protection (SI-8)
|
Oct 20, 2025 |
|
Episode 125 — Spotlight: Malicious Code Protection (SI-3)
|
Oct 20, 2025 |
|
Episode 124 — Spotlight: Information Input Validation (SI-10)
|
Oct 20, 2025 |
|
Episode 123 — Spotlight: Software, Firmware, and Information Integrity (SI-7)
|
Oct 20, 2025 |
|
Episode 122 — Spotlight: System Monitoring (SI-4)
|
Oct 20, 2025 |
|
Episode 121 — Spotlight: Flaw Remediation (SI-2)
|
Oct 20, 2025 |
|
Episode 120 — Spotlight: Denial-of-Service Protection (SC-5)
|
Oct 20, 2025 |
|
Episode 119 — Spotlight: Public Key Infrastructure Certificates (SC-17)
|
Oct 20, 2025 |
|
Episode 118 — Spotlight: Session Authenticity (SC-23)
|
Oct 20, 2025 |
|
Episode 117 — Spotlight: Protection of Information at Rest (SC-28)
|
Oct 20, 2025 |
|
Episode 116 — Spotlight: Cryptographic Protection (SC-13)
|
Oct 20, 2025 |
|
Episode 115 — Spotlight: Cryptographic Key Establishment and Management (SC-12)
|
Oct 20, 2025 |
|
Episode 114 — Spotlight: Transmission Confidentiality and Integrity (SC-8)
|
Oct 20, 2025 |
|
Episode 113 — Spotlight: Boundary Protection (SC-7)
|
Oct 20, 2025 |
|
Episode 112 — Spotlight: Unsupported System Components (SA-22)
|
Oct 20, 2025 |
|
Episode 111 — Spotlight: External System Services (SA-9)
|
Oct 20, 2025 |
|
Episode 110 — Spotlight: Developer Testing and Evaluation (SA-11)
|
Oct 20, 2025 |
|
Episode 109 — Spotlight: Security and Privacy Engineering Principles (SA-8)
|
Oct 20, 2025 |
|
Episode 108 — Spotlight: Criticality Analysis (RA-9)
|
Oct 20, 2025 |
|
Episode 107 — Spotlight: Security Categorization (RA-2)
|
Oct 20, 2025 |
|
Episode 106 — Spotlight: Vulnerability Monitoring and Scanning (RA-5)
|
Oct 20, 2025 |
|
Episode 105 — Spotlight: Risk Assessment (RA-3)
|
Oct 20, 2025 |
|
Episode 104 — Spotlight: Information Spillage Response (IR-9)
|
Oct 20, 2025 |
|
Episode 103 — Spotlight: Incident Response Plan (IR-8)
|
Oct 20, 2025 |
|
Episode 102 — Spotlight: Incident Reporting (IR-6)
|
Oct 20, 2025 |
|
Episode 101 — Spotlight: Incident Handling (IR-4)
|
Oct 20, 2025 |
|
Episode 100 — Spotlight: Least Functionality (CM-7)
|
Oct 20, 2025 |
|
Episode 98 — Spotlight: Configuration Change Control (CM-3)
|
Oct 20, 2025 |
|
Episode 97 — Spotlight: Baseline Configuration (CM-2)
|
Oct 20, 2025 |
|
Episode 96 — Spotlight: Audit Record Retention (AU-11)
|
Oct 20, 2025 |
|
Episode 95 — Spotlight: Protection of Audit Information (AU-9)
|
Oct 20, 2025 |
|
Episode 94 — Spotlight: Audit Record Review, Analysis, and Reporting (AU-6)
|
Oct 20, 2025 |
|
Episode 93 — Spotlight: Event Logging (AU-2)
|
Oct 20, 2025 |
|
Episode 92 — Spotlight: Identifier Management (IA-4)
|
Oct 20, 2025 |
|
Episode 91 — Spotlight: Non-Organizational User Authentication (IA-8)
|
Oct 20, 2025 |
|
Episode 90 — Spotlight: Authenticator Management (IA-5)
|
Oct 20, 2025 |
|
Episode 89 — Spotlight: Identification and Authentication (Organizational Users) (IA-2)
|
Oct 20, 2025 |
|
Episode 88 — Spotlight: Least Privilege (AC-6)
|
Oct 20, 2025 |
|
Episode 87 — Spotlight: Separation of Duties (AC-5)
|
Oct 20, 2025 |
|
Episode 86 — Spotlight: Access Enforcement (AC-3)
|
Oct 20, 2025 |
|
Episode 85 — Spotlight: Account Management (AC-2)
|
Oct 20, 2025 |
|
Episode 84 — Personally Identifiable Information Processing and Transparency — Part Three: Evidence, notices, and pitfalls
|
Oct 20, 2025 |
|
Episode 83 — Personally Identifiable Information Processing and Transparency — Part Two: Processing, minimization, and consent patterns
|
Oct 20, 2025 |
|
Episode 82 — Personally Identifiable Information Processing and Transparency — Part One: Purpose, scope, and responsibilities
|
Oct 20, 2025 |
|
Episode 81 — Personnel Security — Part Three: Evidence, sanctions, and pitfalls
|
Oct 20, 2025 |
|
Episode 80 — Personnel Security — Part Two: Screening, agreements, and access lifecycle
|
Oct 20, 2025 |
|
Episode 79 — Personnel Security — Part One: Purpose, scope, and roles
|
Oct 20, 2025 |
|
Episode 78 — Program Management — Part Three: Evidence, metrics, and pitfalls
|
Oct 20, 2025 |
|
Episode 77 — Program Management — Part Two: Governance rhythms and portfolios
|
Oct 20, 2025 |
|
Episode 76 — Program Management — Part One: Strategy, roles, and alignment
|
Oct 20, 2025 |
|
Episode 75 — Planning — Part Three: Evidence and common pitfalls
|
Oct 20, 2025 |
|
Episode 74 — Planning — Part Two: Plan structure, updates, and integration
|
Oct 20, 2025 |
|
Episode 73 — Planning — Part One: Purpose, scope, and artifacts
|
Oct 20, 2025 |
|
Episode 72 — Physical and Environmental Protection — Part Three: Evidence, logs, and pitfalls
|
Oct 20, 2025 |
|
Episode 71 — Physical and Environmental Protection — Part Two: Access control and monitoring patterns
|
Oct 20, 2025 |
|
Episode 70 — Physical and Environmental Protection — Part One: Purpose, scope, and boundaries
|
Oct 20, 2025 |
|
Episode 69 — Media Protection — Part Three: Evidence, chain of custody, and pitfalls
|
Oct 20, 2025 |
|
Episode 68 — Media Protection — Part Two: Storage, transport, and destruction patterns
|
Oct 20, 2025 |
|
Episode 67 — Media Protection — Part One: Purpose, scope, and handling basics
|
Oct 20, 2025 |
|
Episode 66 — Maintenance — Part Three: Evidence, approvals, and pitfalls
|
Oct 20, 2025 |
|
Episode 65 — Maintenance — Part Two: Local and remote maintenance patterns
|
Oct 20, 2025 |
|
Episode 64 — Maintenance — Part One: Purpose, scope, and guardrails
|
Oct 20, 2025 |
|
Episode 63 — Awareness and Training — Part Three: Evidence, coverage, and pitfalls
|
Oct 20, 2025 |
|
Episode 62 — Awareness and Training — Part Two: Implementation patterns and delivery
|
Oct 20, 2025 |
|
Episode 61 — Awareness and Training — Part One: Purpose, scope, and audiences
|
Oct 20, 2025 |
|
Episode 60 — Supply Chain Risk Management — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 59 — Supply Chain Risk Management — Part Three: Evidence, approvals, and pitfalls
|
Oct 20, 2025 |
|
Episode 58 — Supply Chain Risk Management — Part Two: Supplier controls and assurance patterns
|
Oct 20, 2025 |
|
Episode 57 — Supply Chain Risk Management — Part One: Purpose, scope, and outcomes
|
Oct 20, 2025 |
|
Episode 56 — Assessment, Authorization, and Monitoring — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 55 — Assessment, Authorization, and Monitoring — Part Three: Evidence, POA&M, and pitfalls
|
Oct 20, 2025 |
|
Episode 54 — Assessment, Authorization, and Monitoring — Part Two: Assessment practices and monitoring
|
Oct 20, 2025 |
|
Episode 53 — Assessment, Authorization, and Monitoring — Part One: Purpose, scope, and outcomes
|
Oct 20, 2025 |
|
Episode 52 — System and Services Acquisition — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 51 — System and Services Acquisition — Part Three: Evidence, contract hooks, and pitfalls
|
Oct 20, 2025 |
|
Episode 50 — System and Services Acquisition — Part Two: Security engineering and supplier controls
|
Oct 20, 2025 |
|
Episode 49 — System and Services Acquisition — Part One: Purpose, scope, and sourcing options
|
Oct 20, 2025 |
|
Episode 48 — Contingency Planning — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 47 — Contingency Planning — Part Three: Evidence, tests, and pitfalls
|
Oct 20, 2025 |
|
Episode 46 — Contingency Planning — Part Two: Backup, alternate sites, and continuity patterns
|
Oct 20, 2025 |
|
Episode 45 — Contingency Planning — Part One: Plans, roles, and objectives
|
Oct 20, 2025 |
|
Episode 44 — System and Communications Protection — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 43 — System and Communications Protection — Part Three: Evidence, coverage, and pitfalls
|
Oct 20, 2025 |
|
Episode 42 — System and Communications Protection — Part Two: Cryptography and session protections
|
Oct 20, 2025 |
|
Episode 41 — System and Communications Protection — Part One: Segmentation and boundary thinking
|
Oct 20, 2025 |
|
Episode 40 — System and Information Integrity — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 39 — System and Information Integrity — Part Three: Evidence, signals, and pitfalls
|
Oct 20, 2025 |
|
Episode 38 — System and Information Integrity — Part Two: Flaw remediation and protection patterns
|
Oct 20, 2025 |
|
Episode 37 — System and Information Integrity — Part One: Purpose, scope, and outcomes
|
Oct 20, 2025 |
|
Episode 36 — Risk Assessment — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 35 — Risk Assessment — Part Three: Evidence, registers, and pitfalls
|
Oct 20, 2025 |
|
Episode 34 — Risk Assessment — Part Two: Assessment practices and prioritization
|
Oct 20, 2025 |
|
Episode 33 — Risk Assessment — Part One: Categorization, context, and threats
|
Oct 20, 2025 |
|
Episode 32 — Incident Response — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 31 — Incident Response — Part Three: Evidence, timing, and pitfalls
|
Oct 20, 2025 |
|
Episode 30 — Incident Response — Part Two: Implementation patterns and roles
|
Oct 20, 2025 |
|
Episode 29 — Incident Response — Part One: Purpose, scope, and maturity markers
|
Oct 20, 2025 |
|
Episode 28 — Configuration Management — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 27 — Configuration Management — Part Three: Evidence, sampling, and pitfalls
|
Oct 20, 2025 |
|
Episode 26 — Configuration Management — Part Two: Build patterns and approvals that scale
|
Oct 20, 2025 |
|
Episode 25 — Configuration Management — Part One: Baselines, change control, and integrity
|
Oct 20, 2025 |
|
Episode 24 — Audit and Accountability — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 23 — Audit and Accountability — Part Three: Evidence, coverage checks, and pitfalls
|
Oct 20, 2025 |
|
Episode 22 — Audit and Accountability — Part Two: Collection, transport, and retention patterns
|
Oct 20, 2025 |
|
Episode 21 — Audit and Accountability — Part One: Logging purpose, scope, and event taxonomy
|
Oct 20, 2025 |
|
Episode 20 — Identification and Authentication — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 19 — Identification and Authentication — Part Three: Evidence across the credential lifecycle
|
Oct 20, 2025 |
|
Episode 18 — Identification and Authentication — Part Two: Implementation patterns and enrollment
|
Oct 20, 2025 |
|
Episode 17 — Identification and Authentication — Part One: Authentication goals and threats
|
Oct 20, 2025 |
|
Episode 16 — Access Control — Part Four: Advanced topics and metrics
|
Oct 20, 2025 |
|
Episode 15 — Access Control — Part Three: Evidence, reviews, and pitfalls
|
Oct 20, 2025 |
|
Episode 14 — Access Control — Part Two: Implementation patterns and guardrails
|
Oct 20, 2025 |
|
Episode 13 — Access Control — Part One: Principles, risks, and outcomes
|
Oct 20, 2025 |
|
Episode 12 — Always-Ready Rhythm — Updates, reviews, and renewals
|
Oct 20, 2025 |
|
Episode 11 — Documentation Quality — Narratives that survive scrutiny
|
Oct 20, 2025 |
|
Episode 10 — Tailoring Workflow — From assumption to parameter
|
Oct 20, 2025 |
|
Episode 9 — Metrics — Choosing numbers that drive action
|
Oct 20, 2025 |
|
Episode 8 — Continuous Monitoring — Cadence, triggers, and tiles
|
Oct 20, 2025 |
|
Episode 7 — Sampling — Populations, periods, and selection logic
|
Oct 20, 2025 |
|
Episode 6 — Evidence — Definitions, sufficiency, and traceability
|
Oct 20, 2025 |
|
Episode 5 — Roles and Artifacts — SSP, SAP, SAR, and POA&M that agree
|
Oct 20, 2025 |
|
Episode 4 — Parameters and ODPs — Making controls fit your system
|
Oct 20, 2025 |
|
Episode 3 — Scoping and Inheritance — Boundaries, providers, and proofs
|
Oct 20, 2025 |
|
Episode 2 — Baselines and Overlays — Tailoring you can defend
|
Oct 20, 2025 |
|
Episode 1 — Foundations — Why NIST 800-53 still anchors real programs
|
Oct 20, 2025 |