CISSP Cyber Training Podcast - CISSP Training Program
CISSP Cyber Training Podcast - CISSP Training Program
Shon Gerber, vCISO, CISSP, Cybersecurity Consultant and Entrepreneur
CCT 352: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY
40 minutes Posted May 25, 2026 at 11:00 am.
Welcome And What We Cover
Data Brokers And Location Tracking Risks
Domain 2.3 And Senior Mindset
Information Owners Versus Asset Owners
Asset Management And Lifecycle Tracking
Configuration Management And Rollbacks
Virtual Assets And Snapshot Risk
Cloud Tagging And Shared Responsibility
Hardware And Software Inventory Reality
Intangible Assets And Data Classification
Resources Consulting And Closing
0:00
40:19
Download MP3
Show notes
Send us Fan Mail Your security program can be airtight and still get wrecked by someone else’s breach. We open with a Wired-style reality check: third-party app ecosystems and data brokers collecting location analytics at massive scale, then getting hacked or resold in ways your users never expected. If your organisation issues mobile devices, this is where security awareness, MDM controls, and clear “don’t allow tracking unless required” guidance stops being a nice-to-have and starts becomin...