YouTube Channel (Re)Launch

By


It has been a journey with multiple ups and downs for me. I started this blog 5 years ago, (time flies! you know) and around some time in 2018, I decided on a YouTube Channel. I uploaded some videos and it received a very tepid response. I uploaded a few more videos and waited and I still did not see much change. However, at that time, I committed a big mistake. I stopped and in a way, I quit. That is a lesson for everyone out there. Don’t quit. It takes time, but be there and work on it. Improve yourself and you will see one day that all the hard work you have done will surely result in something worthwhile.


I have been working on some personal projects for quite some time now and a lot of them are ready to be launched or I should say in some cases relaunched. Well, the YouTube Channel definitely falls under the second category. 


What is this Channel about?


This channel is about understanding security concepts in a simple manner. This deals with various domains of CISSP / SSCP and the various industry standard frameworks. All this material is available on the Internet today, however, this will be a one-stop shop for all your security knowledge.


The top YouTube Channels on information/cyber security are all focused on malware/penetration testing/red teaming/blue teaming etc. My channel does not cover these aspects. It deals with security basics to IAM, cryptography to SDLC, and common criteria to the CPTED approach. The idea is to equip a security professional with knowledge so that he/she can enter the cybersecurity field with confidence.


When we hear about cybersecurity, the first term that comes to our minds is a hacker. However, cybersecurity is as deep as the ocean and as wide as the equator. So come and explore the various nuances of cybersecurity with me and let's learn and grow together in this field.


So what’s new this time? 


Consider this fact, if you are watching an educational video, your “span of attention” is around 7-15min. This has further reduced over time in the age of TikTok. So while long videos may be good for entertainment, it’s nano/micro-videos that would register in your mind and have the maximum impact.


Another interesting fact that I found in my research was, that a student learns a single concept in a much better manner rather than when bombarded with multiple concepts at once. A video that covers multiple topics in one go is hardly going to be useful from a retention span perspective.


Armed with these research facts, I decided to create videos that help you gain the maximum from the time you invest in watching. 


Here are a few aspects of the new Channel.


  1. Extensive coverage of a single concept or related concepts in a video.

  2. Nano Videos spanning a maximum of 8-10 mins.

  3. Topics are broken into various episodes.

  4. New videos every week ( Initially 1 video per week).

  5. Limited Series on Complex Cybersecurity topics ( coming next year).

  6. Simplified Explanation with diagrams.

  7. Coverage of all domains of SSCP/CISSP/CISA/CISM etc.

  8. Exam Tips in every video.


Five new episodes will be available from 5th October 2022 with one video per week going live. I have also created a new page - YouTube Channel where the details of upcoming episodes will be published shortly along with the details of the live ones. 


I look forward to your support/ suggestions/ feedback and comments to further improve the content and help you in your journey in learning and mastering cybersecurity. One thing that I can promise this time is that I would not quit.


Happy Learning and Lots of success!

Comments

Post a Comment

You may also like to read...

Identification, Authentication, Authorization, and Accountability

By
Image
The 4 steps to complete access management are identification, authentication, authorization, and accountability. Many confuse or consider that identification and authentication are the same, while some forget or give the least importance to auditing. These are four distinct concepts and must be understood as such. Identification Whenever you log in to most of the websites, you submit a username. In case you create an account, you are asked to choose a username which identifies you. This username which you provide during login is “Identification”. It is simply a way of claiming your identity. From an information security point of view, identification describes a method where you claim whom you are. If you notice, you share your username with anyone. Your email id is a form of identification and you share this identification with everyone to receive emails. This means that identification is a public form of information. Authentication So now you have entered you
Continue Reading...

Access Control Models - DAC, MAC, RBAC , Rule Based & ABAC

By
Image
Identity and Access Management is an extremely vital part of information security. An access control model is a framework which helps to manage the identity and the access management in the organization. There are 5 main types of access control models: discretionary, rule-based, role-based, attribute-based and mandatory access control model. Every model uses different methods to control how subjects access objects. While one may focus on rules, the other focus on roles of the subject. As a security professional, we must know all about these different access control models. While one company may choose to implement one of these models depending on their culture, there is no rule book which says that you cannot implement multiple models in your organization. These models are built into the core or the kernel of the different operating systems and possibly their supporting applications. Every operating system has a security kernel that enforces a reference monitor concept, whi
Continue Reading...

How to Pass SSCP Exam in the First Attempt

By
Image
Systems Security Certified Practitioner (SSCP) exam is offered by (ISC)2 . When I prepared for this exam, there was hardly any material for preparation or blog posts to help me understand the experience of this exam. In this blog post, I will try to explain to you how to study for this exam and the experience of this exam.  Before I begin, let me congratulate on your journey to becoming an SSCP. Although this certification may not be highly recognized as the CISSP certification, still it shows your employer and the world that you are really interested to pursue your career in this field. You become a practitioner in this field. What is SSCP? You would like to read CISSP vs SSCP in case you want to have a comparison between the exams. SSCP is a 3-hour long examination having 125 questions. You are required to score a minimum of 700 out of 1000. 25 questions are not graded as they are research oriented questions. It is important to note that since these questions are
Continue Reading...

Understanding Security Modes - Dedicated , System high, Compartmented , Multilevel

By
Image
Imagine a system that processes information. This information is classified in nature. When we say, its classified, it means that the information has been labeled according to the data classification scheme finalized by the organization. This scheme can be company specific, such as public, internal and confidential or military/government specific such as Confidential, Top Secret, Secret, Public. As a general user or a security professional, you would want that proper controls to be implemented and the system to be secure that processes such information. Imagine a scenario where such a malicious user tries to access this information. What clearance must this person have? Will he/she have access to all classified levels? Hey!!, stop imagining. Let’s discuss something else now. Hold on, I know, I had asked you to imagine the scenario above. But answers to all your questions would follow, so keep on reading further. We need to learn and understand a few terms before we are ready
Continue Reading...

Cloud Computing - The Logical Model

By
Image
At a high level, both cloud and traditional computing adhere to a logical model that helps identify different layers based on functionality.  The four layers are : Infrastructure: The core components of a computing system: compute, network, and storage.The foundation that everything else is built on. The moving parts. Metastructure: The protocols and mechanisms that provide the interface between the infrastructure layer and the other layers. The glue that ties the technologies and enables management and configuration. Infostructure: The data and information. Content in a database, file storage, etc. Applistructure: The applications deployed in the cloud and the underlying application services used to build them. For example, Platform as a Service features like message queues, artificial intelligence analysis, or notification services. The security at different levels is mapped to the different layers. The application security is managed at the applistructure layer while the data sec
Continue Reading...