CCT 352: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY

About this episode

The episode discusses the impact of third-party breaches on security programs and emphasizes the importance of data security controls and compliance requirements.

Send us Fan Mail Your security program can be airtight and still get wrecked by someone else’s breach. We open with a Wired-style reality check: third-party app ecosystems and data brokers collecting location analytics at massive scale, then getting hacked or resold in ways your users never expected. If your organisation issues mobile devices, this is where security awareness, MDM controls, and clear “don’t allow tracking unless required” guidance stops being a nice-to-have and starts becomin...

People in this episode

Host: Shon Gerber

Topics covered

• data security controls
• compliance requirements
• third-party app ecosystems
• data brokers
• mobile device management
• security awareness

Keywords

• CISSP
• data security
• compliance
• third-party breaches
• mobile devices
• security awareness
• MDM controls

Mentioned in this episode

Organizations: Wired

More episodes of CISSP Cyber Training Podcast - CISSP Training Program

• CCT 356: Supply Chain Attacks Are Exploding in 2026 — Here's What the NCSC Wants You to Do · June 8, 2026 · 42 min
• CCT 355: Zapier Breach Lessons For Cloud Security and Setting Up TPRM Program in 15 Minutes · June 4, 2026 · 24 min
• CCT 354: Data Security Controls and Compliance Requirements for the CISSP (Domain 2.3) - REPLAY · June 1, 2026 · 37 min
• CCT 353: AI Agent Governance Essentials - CISSP Practice Questions · May 28, 2026 · 28 min
• CCT351: BitLocker Bypass Reality Check (YellowKey) and CISSP Practice Questions · May 21, 2026 · 24 min
• CCT 350: Investigation Types Made Simple - CISSP Training (Replay) · May 18, 2026 · 45 min