Видео

Great 😃👍💯😸👌

Good Video. Thanks Prabh.

Good video.Thank's Prabh .

Clear and accurate information about vendor management

I am into the video around 15 minutes, and I feel the structure and lab and method that the discussion is going on is obsolete now. The structure and labs everything has changed now. Offsec is now more focusing on AD environment exploitation and also only 3 individual machines are required to be exploited, with 10 points as bonus for lab tasks to be atleast 80% completed. I think @Prabh should bring in someone who has recently cleared the OSCP with the current structure and help the newbie understand from the present perspective and get proper guidance.

Best

I passed the exam using your input and I would like to thank you for your time and efforts and I hope you can do more videos for the CISSP as I have the exam soon :)

Please koi bta day k yeh course PT k lye sahi ha ya nahi

Good One.Thank's Prabh.

Hi Atul & Prabh, I am looking to pursue my career into risk management and more of GRC role, also holding ISO 31000 risk management certification and ISO 27001 Lead Auditor ISMS. Are there any workshop conducted where i can nominate myself to be part of any assignment or project you run to get hands on. Please let me know. I have 13 yrs of experience in IT Service Management but would want to switch to risk management now as part of career progression

Is risk assessment carried out before or after audit. Please could someone answer?

informative mann..

Where is the second part bro

you are doing wonderful job Prab! . you have a special talent to convey things which directly transfer ( low latency , high speed ) things to our brains :) . Awesome! . Infini band ! infini respect!

Detailed easy explanation buddy. I got to know the things which I should work on and get jobs easily. Previously I used to think there are no jobs and stuff so much competition. But now understood jobs are there. We don't have required skillset that HR will call us.

Thank you for explaining. And more importantly, thank you for sharing use cases, tools, and supporting frameworks like the NIST SP 800-53-R5. This can work well for creating remediation guidelines.

Dear Prabh, I found that you have given lot of effort in explaining Risk Management Right from identifying Enterprise Risk till evaluation, analysis and presentation of risk. Your presentation helps in demystifying risk management. Thanks a lot for the detail explanation. I hope just like me everyone finds this equally helpful.

hello prabh Nair. my name is sandra Babalola, please can i get your email so i can send you a private mail. thank you.

please make part3

अपका बहुत बहुत धन्यवाद।कृपया और मार्गदर्शन प्रार्थनीय है।🙏💐

Great session 👏 the validation part was interesting, and I would love to hear more about it.

@Prabh Nair, amazing video,, it helped me to understand. thanks!

Question 24 I'm confused by. It seems to me the answer is "do the same thing you did before but with a 'robust' approach to key and secret management" which doesn't define what that approach is. Is it customary to have questions that ask things like "what must be your priority if your organizations wants to mitigate risks associated with key management?" And the answer is "Approach key management strongly?" Or "Approach key management robustly?" That seems bizarre to me for the questions on the exam to be this way.

Prabh sir , Im an army men wish to retire on next year, im working on this domain since 2009. But i dont have any certifications , pls do help me & guid me.

Thank you!! I passed my CC exam this morning :)

Thanks for the details and information. Is there an article or paper containing the contents of this video so I can cite statements in a scientific paper?

Who is responsible for patching OS in IAAS, please? AWS says it is their responsibility, read/saw somewhere that CCSP perspective it is customer responsibility. Do you have any resource for shared responsibility for CCSP exam please?

I think the hierarchy is...rules/principle>standard>policy>procedure

Very thorough, thanks a lot!

This was such a good learning. Thanks!

Thank you so much Prabh 👏 words alone cannot express my gratitude ❤

It's very wonderful podcast

Really helpful. I was preparing for an interview and it was really handy. Would be helpful, if you explain all the OWASP Top 10 vulnerabilities.

Thank you Prabh for this insightful video. I have a question. Is risk carried out independently or as part of Audit following the gap identified during audit?

For now, this video is the best I have seen on GRC.

i wish he creates similar videos for current syllabus

Sir isnt Anonymization better than pseudonymization. Because Anonymization is considered the strongest form of data protection under the GDPR because anonymized data is no longer considered personal data and is therefore not subject to GDPR requirements ? Kindly let me know why Pseudonymization ?

Great insight on GDPR Implementation. Thanks a lot.

Hey malayali...

It is free or we neex to pay for certificate

Amazing 😍😍

Great video! Although I don’t necessarily agree with the last answer. Two issues, most threats originate via email or on an endpoint. Most organizations run this capability on their firewalls today yet attackers easily penetrate the FW with ransomware attacks daily. The best option would be endpoint protection if you have to choose 1. Most attacks are E/W, what good is the perimeter firewall? Second best would be email server protection but the question does not mention email as a primary threat vector.

Great video

I passed the CC exam today on 1st attempt by the grace of God, these videos are priceless. Thank you so much❤. Many blessings!

Is IT AUDIT at risk due to automation? Please reply.

Awesome Work!!The Question at 1:42:00 , the answer Prabh calls out is for B-Beta but the marked answer on the screen says A-Alpha. Can you please clarify.

Thanks lot. I am working on setting up ISO 27k for my organisation. Can we pls have another 1 or 2 sessions in more detailed as Sir was mentioning.

Great content as always, Thanks Prabh.

Thank you :), Waiting for part 2!

is it worth doing CRISC or CGRC ? if someone want to focus on enterprise risk and implementation