educationMar 4, 202621:53pending
Course 26 - Assessing and Mitigating Security Risks | Episode 4: A Guide to Mitigation and Security Controls
About this episode
In this lesson, you’ll learn about:
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
- Core mitigation strategies and layered security controls used to defend modern network infrastructures against evolving threats.
- Asset inventory and continuous discovery, including identifying authorized and unauthorized devices and software using DHCP and DNS logs.
- Secure configuration management, ensuring hardware, software, and virtual systems comply with defined security baselines using tools like Desired State Configuration (DSC).
- Vulnerability management practices, including automated scanning, prioritization, and timely remediation of identified weaknesses.
- Privileged access protection, securing administrative accounts against credential theft, brute-force attacks, and privilege escalation.
- Monitoring and malware defense mechanisms, leveraging detailed audit logs and continuously updated anti-malware solutions to detect and block advanced threats.
- Application security and SDLC integration, embedding security controls into the software development life cycle to reduce design and coding flaws.
- Network security controls, including port and protocol management, boundary defenses (DMZs), and securing wireless networks with enterprise-grade protections.
- Data recovery and resilience planning, backing up critical data and configurations, encrypting offsite storage, and preparing for operational continuity.
- Penetration testing methodologies, including red, blue, and purple team exercises to evaluate and strengthen an organization’s defensive posture.
You can listen and download our episodes for free on more than 10 different platforms:
https://linktr.ee/cybercode_academy
Get every episode summarized
Each time CyberCode Academy publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from CyberCode Academy
Course 42 - Mobile Malware Analysis Fundamentals | Episode 12: Dynamic Analysis...
CyberCode Academy
Sep 8, 202628:08completed
Course 42 - Mobile Malware Analysis Fundamentals | Episode 11: Dynamic Analysis...
CyberCode Academy
Sep 7, 202624:15queued
Course 42 - Mobile Malware Analysis Fundamentals | Episode 10: The Essentials of...
CyberCode Academy
Sep 6, 202623:12queued
Course 42 - Mobile Malware Analysis Fundamentals | Episode 9: Mastering Basic St...
CyberCode Academy
Sep 5, 202621:16completed