Audiobooks Available For Presale!
I’m very excited about this: the first audiobook version of my work is now available for presale!
It will eventually be available through all popular audiobook vendors. Enjoy!
I’m very excited about this: the first audiobook version of my work is now available for presale!
It will eventually be available through all popular audiobook vendors. Enjoy!
It’s my pleasure to announce my first Udemy course, available to the public, based on my book, “How To Pass Your INFOSEC Exam: A guide to passing the SSCP, CISSP, CCSP, CISA, CISM, Security+, and CCSK.” This course includes two sections: Security Basics, and Cryptography, totalling three hours of content. I intend to publish additional courses, with sections covering all the material in the book, in the future.
I’m very interested to hear feedback and suggestions; I hope you like it, and find the material beneficial for earning your certification!
https://www.udemy.com/course/how-to-pass-your-infosec-exam/?referralCode=CEB07D31DF60C7FB5113
Erica racing
Erica getting attention from a horse
Erica on the show!
The book Patti mentioned: http://www.wateringcanpress.com/html/supersmartcyberguide.html
The JROTC program Patti mentioned: https://mcjrotc.net/innovation-camp
Markel, the company where Patti is the CISO: https://www.markel.com/
One of my former students, Mark Landes, shared this with me today. Mark reminds us of the purpose and use of practice questions: not to learn the material, but to prepare for how to deal with questions about the topics. Thanks, Mark, and congratulations!
”Hi Ben. I was in the CCSP boot camp with ISC2 conference last November. Just wanted to let you know I passed the certification exam in December and got the confirmation of award in late January. Your class and books (study guide and practice exams) were a great help. There were not a lot of direct ‘book questions’ from either, but rather a lot of questions applying the cloud models and technologies the books taught. The practice of answering all those sample questions really helped prepare from a psychological perspective. Thanks again!”
I was extremely honored to appear on a Tech Talk session moderated by my friend and colleague Prashant Mohan, hosted by INFOSEC Train. The audience was great, and it was Prashant’s first time as a moderator! I had a blast. You can check out the recording here:
Links mentioned in the show:
CapinTech: https://capintech.com/
CapinCrouse: https://www.capincrouse.com/
I was very proud to have been interviewed for the cover story in the latest issue of the Information Security Professional magazine. Many thanks to writer Astrid Harders and editor Anne Saita!
The Cloud Security Alliance (CSA) just published Version 4 of the Cloud Controls Matrix (CCM). If you are involved with securing a cloud environment, I cannot recommend this tool highly enough; it works for any type of organization, in any kind of cloud deployment. Best of all, it’s my favorite price: free.
Go download it here: https://cloudsecurityalliance.org/artifacts/cloud-controls-matrix-v4
Vinge’s original paper on the subject: https://edoras.sdsu.edu/~vinge/misc/singularity.html
Just published the official Second Edition of my book, "How To Pass Your INFOSEC Exam: A Guide To Passing The SSCP, CISSP, CCSP, CISA, CISM, Security+, and CCSK" with revisions, updates, and corrections to the original.
The ebook is available here: https://www.amazon.com/.../ref=dbs_a_def_rwt_bibl_vppi_i3
The paperback is available here: https://www.amazon.com/dp/B08T7HNPK7?ref_=pe_3052080_397514860
Many, many thanks to Robin Cabe, who formatted it, and Rachel Ribando-Gros (https://ribandogros.webnode.com/) for the kickass new cover. You two are the BEST!
ISC2 is finally going to experiment with offering online testing. It’s the last major INFOSEC certification body to do so, and it’s taken a long time to get to this point. I applaud this evolution, and am pleased that underserved communities will finally be able to leap the barrier to entry that physical testing required. (I’m also glad that online testing will reduce pollution necessitated by travel.)
Well done, ISC2!
https://www.isc2.org/News-and-Events/Press-Room/Posts/2021/01/11/ISC2-To-Offer-Online-Exam-Proctoring-for-CISSP-and-Other-Cybersecurity-Certifications
As promised, the link to the new book: CCSK Practice Tests by Ben Malisow
New year, new book!
If you're studying for the CCSK, I just published over 300 practice questions covering all topic areas of that exam. It might also be a useful resource for CCSP studies, too, as many of the questions will be applicable for that test.
Many thanks to Mohamed Malki for technical review and editing, the inimitable Rachel Ribando-Gros, for being the best go-to graphics pro (with the most patience!), and Robin Cabe for layout and formatting. Y'all are wonderful, and I can't thank you enough.
Enjoy!
https://www.amazon.com/dp/B08RR9KTZZ?ref_=pe_3052080_397514860
Our first ever return guest, Prashant Mohan, joins us in celebrating nerd hero Alan Turing in our movie review of The Imitation Game (Morten Tyldum, 2014).
Read MoreJoin us in exploring a new way to control your personal privacy online in a conversation with the CEO of Safing, Raphael Fiedler. You know it’s going to be a great episode when their website header is “Fight surveillance because you love Freedom.”
Raphael’s company, Safing: https://safing.io/
Raphael’s podcast: https://safing.io/podcast/
THIS is how professional responsibility is done. This is how to craft an apology. This is leadership.
”Dear ISACA Community,
The integrity, high professional standards and smooth delivery of our certification exams are essential to maintaining the trust we’ve earned with ISACA’s professional communities. Last month we stumbled with the smooth delivery promise, and I am writing to our full member community to apologize. We must do better.
As some of you know, we experienced some unexpected issues when our certification exam vendor PSI performed a system upgrade. About 17% of our exam takers in November and the first few days of December were impacted. Earlier this afternoon, I reached out to those individuals to personally apologize and to offer them a complimentary exam retake if they did not receive a passing score.
We have also heard that our customer experience center response times to questions from the affected candidates has been slower than it should be. We are taking immediate steps to improve this, starting with a dedicated email address that affected candidates can use so their messages are marked as top priority. We have also added additional staff resources to the customer experience team.
During times of change and turbulence, individuals make an important choice to invest in themselves, and our certifications are “go to” education opportunities for IT professionals to advance their careers. Exam candidates invest time, money and dreams into our tests, and they deserve a trusted and smooth experience. I want you all to know that I take direct responsibility for these issues regardless of where the experience fell short. My team and I are committed to turning this experience around and helping candidates have a more successful exam day and a more positive experience with ISACA. In fact, beginning in early 2021, we are introducing 24/7 customer support so ISACA members and exam candidates no longer have to wait for help based on their time zone.
In addition, we are holding PSI accountable for their part in this issue. From the moment we began receiving information about this issue, we started regular meetings with the PSI leadership team, and they have assured us the technology issues are resolved. However, we plan to increase the communication to ensure this does not happen again.
Thank you for your trust in ISACA and our globally recognized credentials. We are committed to giving you and all of our members, customers and certification candidates the support you need and being a valued partner on your career and learning journeys.
Best regards,
David
David Samuelson
ISACA CEO”
I don’t think I’ve ever been more proud to be an ISACA member.