CCT 346: Testing Disaster Recovery Plans and Why BEC Still Works Despite MFA (CISSP Domain 7)

About this episode

The episode discusses the effectiveness of business email compromise in secure environments and the challenges of testing disaster recovery plans.

Send us Fan Mail MFA feels like the finish line until you watch a company wire tens of millions of dollars to an attacker without a single password being stolen. We dig into why business email compromise (BEC) still works even in “secure” environments, because the real target is the decision point: trust, timing, urgency, and authority. When attackers can spoof executives or use deepfake voice and video, the authentication layer often never gets challenged in a meaningful way. We break...

People in this episode

Host: Shon Gerber

Topics covered

• Disaster Recovery Plans
• Business Email Compromise
• Multi-Factor Authentication
• Cybersecurity
• Trust and Authority

Keywords

• CISSP
• Disaster Recovery
• Business Email Compromise
• MFA
• Cybersecurity
• Trust
• Authentication

Mentioned in this episode

Organizations: MFA, BEC, Cybersecurity

More episodes of CISSP Cyber Training Podcast - CISSP Training Program

• CCT 356: Supply Chain Attacks Are Exploding in 2026 — Here's What the NCSC Wants You to Do · June 8, 2026 · 42 min
• CCT 355: Zapier Breach Lessons For Cloud Security and Setting Up TPRM Program in 15 Minutes · June 4, 2026 · 24 min
• CCT 354: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · June 1, 2026 · 37 min
• CCT 353: AI Agent Governance Essentials - CISSP Practice Questions · May 28, 2026 · 28 min
• CCT 352: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · May 25, 2026 · 40 min
• CCT351: BitLocker Bypass Reality Check (YellowKey) and CISSP Practice Questions · May 21, 2026 · 24 min