Episode 63 — A.8.19–8.20 — Software installation on operational systems; Network security
A.8.19 restricts software installation on operational systems to prevent drift, reduce attack surface, and maintain license and support compliance. For the exam, distinguish between development/test f...
14 Okt 202513min
Episode 62 — A.8.17–8.18 — Clock synchronization; Privileged utility programs
A.8.17 mandates synchronized time across systems so that events recorded in different places can be reliably correlated. For the exam, stress why this matters: investigations, non-repudiation, and reg...
14 Okt 202521min
Episode 61 — A.8.15–8.16 — Logging; Monitoring activities
A.8.15 requires that logging be planned, consistent, and comprehensive enough to reconstruct significant actions affecting information security. For the exam, connect logging scope to risk and classif...
14 Okt 202513min
Episode 60 — A.8.13–8.14 — Information backup; Redundancy of processing facilities
A.8.13 requires organizations to back up information, software, and system images at intervals aligned to business needs, with protection, testing, and documentation sufficient to restore operations r...
14 Okt 202514min
Episode 59 — A.8.11–8.12 — Data masking; Data leakage prevention
A.8.11 formalizes data masking so that sensitive fields are obfuscated or tokenized in contexts where full values are not required, such as analytics, testing, support tooling, or user interfaces. For...
14 Okt 202514min
Episode 58 — A.8.9–8.10 — Configuration management; Information deletion
A.8.9 requires establishing secure configuration baselines and maintaining them through change discipline, making it a frequent exam target for questions about drift control and evidence. Candidates s...
14 Okt 202512min
Episode 57 — A.8.7–8.8 — Anti-malware; Technical vulnerability management
A.8.7 mandates protection against malware across endpoints, servers, email, and web gateways, recognizing that modern threats blend commodity payloads with living-off-the-land techniques. For the exam...
14 Okt 202513min
Episode 56 — A.8.5–8.6 — Secure authentication; Capacity management
A.8.5 requires secure authentication mechanisms that match the sensitivity of systems and data, making this control central to exam questions about assurance levels, factor strength, and attack resist...
14 Okt 202513min
