Podcast
InfosecTrain
Hosted by InfosecTrain · EN
InfosecTrain is one of the finest Security and Technology Training and Consulting organization, focusing on a range of IT Security Trainings and Information Security Services. InfosecTrain was established in the year 2016 by a team of experienced and enthusiastic professionals, who have more than 15 years of industry experience. We provide professional training, certification & consulting services related to all areas of Information Technology and Cyber Security.
Website: https://www.infosectrain.com
58episodes
Episodes
Newest firstAll episodes
The Shift to AI Governance What’s Next After CISA, CISM, CRISC, CDPSE & CGEIT
2w ago00:49:44Tap to summarizeThe future of cybersecurity, risk, audit, and governance is rapidly evolving - and AI Governance is emerging as one of the most in-demand disciplines for professionals looking to stay ahead. In this elite episode of InfosecTrain TechTalks: Real World Decoded, host Krish sits down with Chris DeMale, Vice President at ISACA, to explore how artificial intelligence is rewriting the professional landscape and opening massive new avenues for risk, privacy, and compliance experts.The "course titled" AI Governance and Risk Management Training acts as the perfect structural transition for veterans aiming to upscale their credentials. As enterprises accelerate their deployment of machine learning systems, the demand for trusted advisors who can independently audit and secure these models has skyrocketed. We dive deep into the widening AI skills gap, look at the emergence of specialized ISACA AI credentials, and map out the exact career roadmap needed to remain indispensable in an automated world.📘 What You’ll Learn:The AI Governance Mandate: Why oversight of automated models has shifted from an IT experiment to a critical, board-level corporate necessity.The Traditional Credential Pivot: How established practitioners holding CISA, CISM, CRISC, CDPSE, and CGEIT certifications can leverage their backgrounds in AI.The New Compliance Horizon: Analyzing how machine learning structures are completely reshaping traditional data auditing, privacy laws, and control validation frameworks.Decoding New Credentials: An inside look at the purpose and professional value of emerging AI focus tracks under global oversight bodies.Future-Proofing Your Career: Developing the core operational competencies required to architect and lead an enterprise-grade AI risk strategy.🎧 Essential listening for GRC leaders, data protection officers, IT auditors, and cybersecurity managers prepared to lead the next evolution of technology governance.Watch the full episode on YouTube: https://www.youtube.com/watch?v=kx7mIp_yG34
Transcribe →
Enterprise Security Architecture: Building Trust Through CISSP-ISSAP Design
3w ago00:43:16Tap to summarizeTrust is not built by technology alone - it is architected through resilience, security, and strategic design. In today's complex threat landscape, organizations need more than basic security controls; they need resilient environments that enable continuity, trust, and business growth. In this masterclass episode, InfosecTrain explores how the CISSP-ISSAP mindset helps security architects design enterprise environments that withstand evolving threats while remaining aligned with core business objectives.The "course titled" CISSP-ISSAP (Information Systems Security Architecture Professional) Training is the gold standard for professionals aiming to elevate their design expertise. We break down the essential components of building a secure enterprise, from establishing a robust root of trust to ensuring your hybrid cloud infrastructure can scale without compromising integrity. Learn how to transform abstract security requirements into a concrete, resilient architecture.📘 What You’ll Learn:Identity as the Perimeter: Rethinking access controls and authorization in a decentralized, modern work environment.The Business-to-Architecture Bridge: Proven strategies for aligning high-level organizational goals with low-level technical design.Securing Hybrid Cloud Scale: Managing security risk across distributed environments and complex migration paths.Enterprise Root of Trust: Implementing foundational security that ensures integrity from the hardware layer up to the application level.Architecture Validation: How to test and verify that your design is not just secure on paper, but effective in practice.🎧 Essential listening for security architects, CISSP professionals, and cybersecurity leaders looking to master the art of design-led security.Watch Video here: https://www.youtube.com/watch?v=sMAO1X8NGig
Transcribe →
Securing Production AI: Architecture, Threats, and Enterprise Governance
3w ago01:32:42Tap to summarizeBuilding AI is easy. Building secure, reliable, and production-ready AI is where the real challenge begins. As artificial intelligence rapidly transitions from experimental sandbox projects to mission-critical business applications, the attack surface expands exponentially. In this engineering masterclass, InfosecTrain moves past the theoretical hype to dive deep into the practical mechanics of deploying and hardening AI infrastructure within enterprise environments.The "course titled" Certified AI Security Professional Training is a vital resource for teams tasked with defending non-deterministic systems. We break down the core architectural components of production AI pipelines, analyzing the distinct vulnerabilities that traditional Application Security (AppSec) frameworks overlook. Learn how to implement robust threat modeling, integrate protective guardrails across your data pipelines, and establish governance controls that foster innovation without exposing your enterprise to catastrophic risk.📘 What You’ll Learn:Production AI Architecture: Analyzing the fundamental pipeline stages from data ingestion and model training to deployment and API endpoint hosting.The Unique AI Attack Surface: Understanding how adversarial manipulation targets machine learning models through data poisoning, model inversion, and prompt injection.AI Threat Modeling & Risk Management: Transitioning traditional STRIDE threat modeling into the world of machine learning using frameworks like MITRE ATLAS.Operational & Compliance Governance: Establishing clear auditing lines, model verification processes, and risk management strategies aligned with modern compliance standards.Hardening Best Practices: Implementing real-world defenses including input sanitization, inference rate-limiting, and continuous automated model-drift monitoring.🎧 Essential listening for AI engineers, AppSec specialists, security architects, and GRC professionals building the secure foundations of corporate automation.Watch the full episode on YouTube: https://www.youtube.com/watch?v=O9dSWk90CII
Transcribe →
The CISO Mindset: Balancing Business Goals with Cyber Defense
3w ago00:43:40Tap to summarizeA great CISO doesn't just manage security - they align security with business success. In the modern enterprise, the role of a Chief Information Security Officer (CISO) has transcended purely technical oversight to become a critical business leadership function. In this masterclass, InfosecTrain breaks down the essential executive toolkit required to manage complex risk, satisfy regulatory demands, and lead cross-functional teams while maintaining a resilient security posture.The "course titled" CISO Certification Training is designed for professionals preparing to sit in the C-suite, teaching you how to bridge the communication gap between technical teams and board-level stakeholders. We explore the high-stakes world of executive decision-making, covering how to prioritize security investments, quantify cyber risk in financial terms, and build a program that enables business growth rather than restricting it.📘 What You’ll Learn:The CISO Architecture: Defining the core responsibilities of modern security leadership and moving from technical expert to strategic advisor.Risk-Driven Governance: How to build and manage an enterprise security program that aligns with, and supports, key business objectives.Executive Communication: Mastering the art of translating technical vulnerabilities and audit findings into a language that boards and stakeholders understand.Resilience & Response: Establishing a governance framework that ensures continuity, compliance, and rapid recovery during crisis scenarios.The Leadership Roadmap: Identifying the soft skills and strategic acumen required to command a department, manage budgets, and foster a security-first culture.🎧 Essential listening for security managers, GRC professionals, and aspiring leaders ready to step into the CISO role.Watch the full episode on YouTube: https://www.youtube.com/watch?v=GLSXpz7QOsg
Transcribe →
Passing the CISM Exam: Your First-Attempt Strategy Blueprint
3w ago00:41:04Tap to summarizeThe CISM exam doesn't test what you know - it tests how you think as a security leader. For cybersecurity professionals moving up the corporate ladder, earning ISACA's Certified Information Security Manager (CISM) designation is the ultimate validation of your strategic authority. In this definitive preparation masterclass, InfosecTrain maps out the exact blueprint, chronological study timeline, and mental frameworks required to conquer the exam on your very first try.The "course titled" CISM Certification Training is built specifically to transition your brain from tactical troubleshooting to high-level enterprise risk governance. We break down how to stop answering questions like a technical engineer and start evaluating multi-domain corporate dilemmas from a business-first perspective. Learn how to accurately prioritize resources, interpret complex situational prompts, and decode ISACA's specific exam architecture under real test conditions.📘 What You’ll Learn:The CISM Structural Blueprint: Navigating the weightings, core focuses, and expectations of the four main governance domains.The Management Mindset Shift: Training your brain to choose the option that enables the business securely, rather than just implementing a localized lockdown.A High-Impact Study Roadmap: Constructing an efficient preparation timeline that focuses on your weak areas without causing study burnout.The Traps That Cost Points: Identifying the classic "technical distractor" answers designed to trick hands-on specialists into losing easy points.Test-Day Execution Tactics: Advanced elimination strategies, pacing systems, and confidence-building habits for the live exam interface.🎧 Essential listening for cybersecurity managers, GRC professionals, IT auditors, and aspiring enterprise leaders ready to pass their CISM exam with total confidence.Watch the full episode on YouTube: https://www.youtube.com/watch?v=JHWMo-jh2DA
Transcribe →
The ISO 42001 Roadmap: Building a World-Class AI Management System
3w ago00:43:57Tap to summarizeAI governance doesn't happen by accident - it requires a structured strategy, clear accountability, and effective execution. As the world's first international standard for AI Management Systems (AIMS), ISO/IEC 42001 is becoming the global gold standard for responsible innovation. In this expert masterclass, InfosecTrain provides a comprehensive walkthrough of the implementation journey, taking you from initial strategy to full-scale operational execution.The "course titled" ISO 42001 Lead Implementer Training is specifically designed to help organizations bridge the gap between AI experimentation and enterprise-grade governance. We break down the lifecycle of building an AIMS, from performing a critical gap analysis to integrating AI-specific controls into your existing business and compliance frameworks. Learn how to manage the unique risks associated with machine learning while maintaining the agility required for 2026's fast-moving technological landscape.📘 What You’ll Learn:AIMS Foundations: Understanding the core requirements of ISO/IEC 42001 and why it is the essential framework for AI-driven organizations.The Gap Analysis Phase: How to objectively assess your current AI maturity and identify the missing links in your governance structure.AI Risk Management: A deep dive into identifying, assessing, and mitigating risks that are unique to artificial intelligence, such as model bias and data poisoning.Strategic System Integration: Practical methods for embedding AI controls into your existing ISO 27001 or SOC 2 compliance processes.The Implementation Lifecycle: A step-by-step roadmap for moving from high-level policy to day-to-day operational accountability.🎧 Essential listening for GRC professionals, AI leaders, compliance managers, and anyone aiming to become a certified ISO 42001 Lead Implementer.Watch the full episode on YouTube: https://www.youtube.com/watch?v=Lx3cA9Fw_ec
Transcribe →
AI Risk in Finance: Controlling What You Can't Predict
3w ago00:38:55Tap to summarizeWelcome to the world of AI Risk in Financial Services, where the challenges are not just technical - they’re regulatory, operational, reputational, and business critical. In this episode of InfosecTrain TechTalks: Real World Decoded, host Anas Hamid sits down with Ekta Goyal, an Enterprise Risk Management Expert for the APAC region, to explore how modern financial institutions manage the unpredictability of artificial intelligence when traditional control models no longer fit.The "course titled" AI Governance and Risk Management Training is a critical asset for professionals navigating this shifting landscape. We pull back the curtain on the real-world governance gaps that standard checklists ignore, analyzing the direct compliance implications for financial institutions. Learn how to move past static risk frameworks and implement dynamic enterprise controls and decision-making structures built specifically for non-deterministic AI models.📘 What You’ll Learn:The Financial AI Challenge: Understanding the structural operational and reputational risks introduced when deploying machine learning models in banking and fintech.Hidden Governance Gaps: Pinpointing the systemic vulnerabilities that traditional IT auditing models fail to catch when assessing complex algorithms.Regulatory Compliance Realities: Navigating the strict global compliance landscapes and risk mandates governing automated financial decisions.Predictive Control Frameworks: Practical strategies for risk teams to build guardrails around models that adapt, drift, and change over time.Enterprise Risk Strategy: How executive leadership can build actionable decision frameworks that balance AI innovation with fiscal safety.🎧 Essential listening for professionals working in Risk, GRC, Compliance, Financial Services, AI Governance, or Cybersecurity.Watch Video here: https://www.youtube.com/watch?v=oKV45p_5jrY
Transcribe →
The AI Cybersecurity Roadmap: Navigating the Future Ecosystem
4w ago01:29:49Tap to summarizeAI security is no longer one role - it’s an entire ecosystem of future careers. As artificial intelligence fundamentally reshapes the corporate landscape, the required skillsets for defenders and ethical hackers are evolving rapidly. In this forward-looking masterclass episode, InfosecTrain maps out the comprehensive matrix of capabilities defining cybersecurity careers, from architectural engineering to specialized offensive red teaming.The "course titled" Certified AI Security Professional Training provides the perfect structural blueprint for professionals who want to transition from traditional defense to an AI-first security posture. We move beyond simple theory to analyze the exact skills needed to design, attack, and defend complex machine learning infrastructures, ensuring your security career remains bulletproof against the automated developments of tomorrow.📘 What You’ll Learn:Understand AI Foundations: Gaining the baseline knowledge required for AI engineers and security analysts to evaluate system components.Design & Build Securely: Shifting your architectural design perspective to establish trust boundaries for models, deep learning networks, and large language model workflows. Govern & Manage Risk: Exploring how security managers, compliance officers, and executive leaders can deploy risk-driven governance models.Attack & Pentest AI Infrastructure: Mastering the offensive strategies used by red teams and pentesters to expose prompt injections, data poisoning, and model evasion vulnerabilities. Defend & Monitor (Blue Team View): Implementing advanced security operations center workflows, observability pipelines, and SIEM integrations to catch model drift and adversarial manipulation.🎧 Essential listening for security engineers, analysts, compliance specialists, and red teamers ready to lead the next generation of digital defense.Watch Video here: https://www.youtube.com/watch?v=unbQa1RZBe4
Transcribe →
GRC Audit Masterclass: Navigating Real-World Risk Scenarios
4w ago00:39:07Tap to summarizeGRC audits aren’t about checklists - they’re about finding risk before it becomes failure. In this practical, scenario-based masterclass, InfosecTrain takes you directly into the inner workings of corporate Governance, Risk, and Compliance assessments. We move past abstract theories to show exactly how seasoned auditors plan evaluations, collect verifiable evidence, and validate controls across complex enterprise infrastructures.The "course titled" Certified GRC Auditor Training is the ultimate path for professionals who want to master the entire audit lifecycle from initial scoping to final reporting. We dive deep into real-world operational scenarios, breaking down the precise methodologies used to identify hidden compliance gaps, document nonconformities, and formulate strategic corrective actions that drive genuine organizational resilience.📘 What You’ll Learn:The Full Audit Lifecycle: Mapping out a comprehensive GRC assessment framework from initial planning to final reporting.Evidence and Validation: Advanced techniques for moving past surface-level checklists to gather irrefutable control evidence.Dissecting Real Scenarios: A practical look at real-world case studies highlighting corporate governance failures and risk blind spots.Managing Nonconformities: How to professionally articulate audit observations, findings, and noncompliance to stakeholders.Driving Corrective Action: Designing sustainable, risk-aligned mitigation strategies that satisfy regulators and protect business assets.🎧 Essential listening for IT auditors, compliance managers, risk professionals, and GRC leaders who want to master the art of defensive assurance.Watch the full episode on YouTube: https://www.youtube.com/watch?v=PVUyklbSxsg
Transcribe →
Mastering ISO 27701:2025: Navigating Privacy Information Management Systems
4w ago00:49:16Tap to summarizePrivacy compliance is not just documentation - it’s evidence, controls, and audit readiness. As global data protection laws tighten across the 2026 corporate landscape, the newly updated ISO/IEC 27701:2025 standard serves as the ultimate benchmark for creating a resilient Privacy Information Management System (PIMS). In this comprehensive masterclass episode, InfosecTrain explores how abstract privacy controls translate directly into concrete audit findings and actionable governance.The "course titled" ISO 27701 Lead Auditor Training provides the perfect blueprint for professionals aiming to blend traditional information security with dedicated data privacy engineering. We dissect the structural relationship between ISO 27701:2025 and ISO 27001:2022, breaking down the full audit lifecycle from initial planning to reporting. Learn how to independently evaluate data controller and processor requirements, conduct thorough root-cause analyses on nonconformities, and implement corrective actions that withstand regulatory inspection.📘 What You’ll Learn:The PIMS Mandate: Why ISO 27701:2025 is shaping the future of global enterprise privacy audits and corporate accountability.The Structural Marriage: How the PIMS extension seamlessly integrates with an existing ISO 27001 Information Security Management System (ISMS).Audit Lifecycle Mastery: A step-by-step look at planning, executing, and reporting within a specialized privacy framework.Managing Nonconformities: Practical strategies for handling audit findings, uncovering root causes, and designing ironclad corrective actions.The Auditor's View: Developing a real-world privacy audit approach that prioritizes verifiable data protection evidence over simple checklists.🎧 Essential listening for auditors, Data Protection Officers (DPOs), privacy practitioners, and compliance teams looking to master international privacy frameworks.Watch the full episode on YouTube: https://www.youtube.com/watch?v=xKhwS4ufhMU
Transcribe →