Episode 70 — A.8.33–8.34 — Test information; Protecting systems during audit testing
A.8.33 governs test information—data and artifacts used to verify functionality and security—so that confidentiality, integrity, and legality are preserved. For the exam, distinguish data sources and ...
14 Okt 202513min
Episode 69 — A.8.31–8.32 — Separation of dev/test/prod; Change management
A.8.31 enforces separation between development, test, and production to prevent inadvertent changes, data leakage, and unauthorized access. For the exam, stress environment isolation, distinct identit...
14 Okt 202511min
Episode 68 — A.8.29–8.30 — Security testing in development & acceptance; Outsourced development
A.8.29 requires structured security testing throughout development and acceptance, proving that controls operate as intended before release. For the exam, differentiate testing modalities and purposes...
14 Okt 202513min
Episode 67 — A.8.27–8.28 — Secure system architecture & engineering; Secure coding
A.8.27 focuses on secure system architecture and engineering, requiring designs that partition trust, minimize attack surface, and enforce least privilege at every layer. For the exam, emphasize archi...
14 Okt 202514min
Episode 66 — A.8.25–8.26 — Secure development lifecycle; Application security requirements
A.8.25 requires a secure development lifecycle (SDLC) that embeds security from concept to retirement, not as a late-stage gate. For the exam, describe SDLC phases with explicit security tasks: threat...
14 Okt 202514min
Episode 65 — A.8.23–8.24 — Web filtering; Use of cryptography
A.8.23 establishes web filtering to manage risk from browsing and outbound HTTP/S traffic, acknowledging that the browser is a primary threat vector. For the exam, emphasize policy-aligned controls th...
14 Okt 202515min
Episode 64 — A.8.21–8.22 — Security of network services; Segregation of networks
A.8.21 requires that network services—whether internal or provided by third parties—be specified and secured to meet business and security requirements. For the exam, think beyond raw connectivity: se...
14 Okt 202513min
