Episode 47 — A.7.1–7.2 — Perimeters; Physical entry
A.7.1 requires defining physical security perimeters that protect areas containing critical information assets and supporting infrastructure. For the exam, note the layered defense model: public zones...
14 Loka 202513min
Episode 46 — A.6.7–6.8 — Remote working; Event reporting
A.6.7 establishes requirements for managing security in remote working arrangements, recognizing that homes, hotels, and public locations introduce different risks than controlled offices. For the exa...
14 Loka 202514min
Episode 45 — A.6.5–6.6 — Responsibilities after termination/change; NDAs
A.6.5 ensures that information security responsibilities remain clear when employment terminates or roles change. For the exam, emphasize time-bound deprovisioning of access, recovery of assets, revoc...
14 Loka 202513min
Episode 44 — A.6.3–6.4 — Awareness, education & training; Disciplinary process
A.6.3 establishes the obligation to provide awareness, education, and training so that all personnel understand security policies, their responsibilities, and how to act in common scenarios. For the e...
14 Loka 202513min
Episode 43 — A.6.1–6.2 — Screening; Terms & conditions of employment
A.6.1 requires appropriate background screening of candidates, contractors, and third-party users in accordance with relevant laws, regulations, and ethics, proportionate to risk and role sensitivity....
14 Loka 202515min
Episode 42 — A.5 Integration Capstone — Pitfalls, auditor patterns, mappings
This capstone episode synthesizes Annex A.5’s governance and organizational controls, highlighting how misalignments commonly appear in audits and how to map requirements to other frameworks. For the ...
14 Loka 202513min
Episode 41 — A.5.37 — Documented operating procedures
A.5.37 requires organizations to establish, document, and maintain operating procedures that guide consistent, controlled execution of security-relevant tasks. For the exam, remember that “documented”...
14 Loka 202514min
Episode 40 — A.5.35–5.36 — Independent review; Compliance with policies/rules/standards
A.5.35 requires independent reviews of information security to verify that management arrangements and controls remain suitable and effective. “Independent” means objective and free from conflicts—oft...
14 Loka 202513min
