Episode 55 — A.8.3–8.4 — Information access restriction; Access to source code
A.8.3 requires restricting access to information and associated assets according to business need, classification, and risk. For the exam, connect policy to mechanism: role- or attribute-based models,...
14 Okt 202515min
Episode 54 — A.8.1–8.2 — User endpoint devices; Privileged access rights
A.8.1 consolidates expectations for user endpoint devices by requiring managed configurations, protection mechanisms, and governance proportional to data sensitivity and threat. For the exam, emphasiz...
14 Okt 202514min
Episode 53 — A.7.13–7.14 — Equipment maintenance; Secure disposal/re-use
A.7.13 mandates that equipment be maintained correctly to ensure availability, integrity, and safety, with maintenance scheduled, authorized, and recorded. For exam preparation, distinguish preventive...
14 Okt 202514min
Episode 52 — A.7.11–7.12 — Supporting utilities; Cabling security
A.7.11 addresses supporting utilities—power, water, HVAC, and communications—whose failure can render even perfectly secured systems unavailable or damaged. For the exam, focus on redundancy and monit...
14 Okt 202514min
Episode 51 — A.7.9–7.10 — Off-premises assets; Storage media
A.7.9 requires controls for assets used off-premises, recognizing that laptops, tablets, phones, developer kits, and even lab equipment are exposed to theft, loss, and uncontrolled networks when outsi...
14 Okt 202519min
Episode 50 — A.7.7–7.8 — Clear desk/screen; Equipment siting & protection
A.7.7 codifies clear desk and clear screen practices so that sensitive information is not exposed to casual observation or theft. For the exam, remember that this applies to printed materials, removab...
14 Okt 202511min
Episode 49 — A.7.5–7.6 — Environmental threats; Working in secure areas
A.7.5 addresses protection against environmental threats—natural, accidental, or man-made—that could disrupt facilities or damage information assets. For the exam, focus on risk-based safeguards such ...
14 Okt 202513min
Episode 48 — A.7.3–7.4 — Securing offices/rooms/facilities; Physical security monitoring
A.7.3 requires implementing protective measures for offices, rooms, and facilities proportionate to the assets they house. For the exam, emphasize practical safeguards: controlled keys and badge zones...
14 Okt 202513min
