Episode 31 — A.5.17–5.18 — Authentication information; Access rights
A.5.17 requires organizations to protect authentication information throughout its lifecycle, emphasizing creation, issuance, use, storage, and revocation. For exam purposes, distinguish between authe...
14 Loka 202515min
Episode 30 — A.5.15–5.16 — Access control; Identity management
A.5.15 requires that access to information and other associated assets be limited to authorized users, processes, or devices, in accordance with business and security requirements. For the exam, focus...
14 Loka 202514min
Episode 29 — A.5.13–5.14 — Labelling of information; Information transfer
A.5.13 builds on classification by requiring that information be labelled according to handling requirements. For the exam, understand that labels may be visual (document headers/footers, watermarks),...
14 Loka 202514min
Episode 28 — A.5.11–5.12 — Return of assets; Classification of information
A.5.11 mandates that employees, contractors, and third parties return all organizational assets upon termination or change of role. For the exam, highlight that “assets” include devices, credentials, ...
14 Loka 202515min
Episode 27 — A.5.9–5.10 — Asset inventory; Acceptable use
A.5.9 requires an accurate, current inventory of information and other associated assets, including hardware, software, data sets, cloud resources, identities, and services. For exam purposes, stress ...
14 Loka 202519min
Episode 26 — A.5.7–5.8 — Threat intelligence; Security in project management
A.5.7 introduces threat intelligence as a structured capability to collect, analyze, and share information about adversaries, techniques, vulnerabilities, and emerging risks that could affect the orga...
14 Loka 202515min
Episode 25 — A.5.5–5.6 — Contact with authorities; Special interest groups
A.5.5 requires organizations to establish and maintain appropriate contact with relevant authorities, such as regulators, law enforcement, and national or sector Computer Security Incident Response Te...
14 Loka 202516min
Episode 24 — A.5.3–5.4 — Segregation of duties; Management responsibilities
A.5.3 addresses segregation of duties (SoD), a foundational control that reduces fraud and error by distributing tasks and authorities among different people. For the exam, understand that SoD applies...
14 Loka 202513min
