Episode notes
Are you preparing for CISSP 2026 and wondering how AI security, AI governance, responsible AI, privacy, and model attacks can be tested in the exam?In this video, we break down important CISSP-style AI questions in a practical and exam-focused way. Instead of memorizing definitions, you will learn how to think like a CISSP candidate when facing scenario-based questions on AI systems, governance, risk management, security controls, privacy, and third-party AI platforms.AI is no longer just a technology topic. For CISSP candidates, AI connects directly with Security and Risk Management, Asset…
Podcast
Prabh Nair
Prabh Nair · Tech & Science · English
Prabh Nair is a cybersecurity podcaster covering cyber risk, ransomware, incident response, SOC operations, GRC, AI security, threat intelligence, digital forensics, ISO 27001, CISSP, CISM, and security leadership. Built for SOC analysts, auditors, cybersecurity professionals, students, and…
More from Prabh Nair All episodes →
-
13 Aug 2026 · 58 min
Auditing AI Systems in Critical Sectors
AI is moving from simple human-to-system interaction to agentic AI, where machines interact with other machines, take actions, exchange data, and influence business decisions.This creates a major challenge for cybersecurity, GRC, audit, compliance, and assurance professionals: Priyank Sonihttps://www.linkedin.com/in/priyank-soni-iima/How do you audit an AI system when you cannot fully see the model, logic, architecture, or internal decision-making process?In this podcast, Prabh speaks with Priyank Soni, a cybersecurity, AI/ML, digital trust, governance, and assurance leader, about auditing…
-
10 Aug 2026 · 1 hr 10 min
CISO Masterclass: Building Security Programs for the AI Era
AI adoption is accelerating across enterprises, but most security programs were not designed for the speed, scale, and complexity of AI-driven threats.In this CISO Masterclass episode, Prabh speaks with Agnidapta Sarkar, a seasoned cybersecurity evangelist and digital resilience strategist, about how CISOs must evolve their security programs for the AI era.Agni explains why organizations must first understand their digital assets, business impact, material risk, and enterprise architecture before rushing into AI adoption or AI security controls.The discussion goes deep into why traditional…
-
6 Aug 2026 · 56 min
Practical OT Risk Assessment Using
In many organizations, OT security is still discussed at a very high level. But when we go into the real world, the challenge is different:How do we actually assess cyber risk in an OT environment where safety, uptime, legacy systems, plant operations, and business impact all come together? In this session, Sajath walked through a very practical approach to OT cybersecurity risk assessment — not just theory, but how to think through:OT asset identificationBusiness and operational impactThreat scenariosVulnerability and exposureLikelihood and impact scoringRisk matrix creationSafety and…
-
3 Aug 2026 · 1 hr 3 min
Real-World Red Teaming: From Reconnaissance to System Access
In this special cybersecurity podcast episode, Prabh interviews Sarang, a seasoned cybersecurity expert popularly known as “Cyber Insane,” to discuss practical red teaming, enterprise attack simulations, web application security, and real-world attack kill chain thinking. https://www.linkedin.com/in/sarang-tumne-cyber-insane-a1681827/https://m.youtube.com/@redteamgarage-rtg?ra=m📚 RTG – Practical Red Teaming Book copies are now available!✅ Physical Book: ₹899 (Free delivery across India)✅ PDF Copy: ₹499 (Instant download)🎁 Special for Prabh’s community: Get 15% OFF using coupon code: RTG15📩…
-
30 Jul 2026 · 1 hr 14 min
Bug Bounty Hunting Roadmap: From Zero to First Bounty
Are you interested in bug bounty hunting but confused about where to start?In this podcast session, Prabh speaks with Monish about the real beginner roadmap for learning bug bounty, web security, XSS, SQL injection, Burp Suite, vulnerability reporting, and practical web application testing.This session is designed for beginners who want to learn bug bounty the right way. Instead of directly jumping into advanced tools and random payloads, Monish explains why every beginner must first understand how websites actually work.Before you start hunting bugs, you need to understand the basics of…
-
23 Jul 2026 · 50 min
Kudankulam Data Leak Explained | Critical Infrastructure, Vendor Risk & Dark Web Intelligence
Critical infrastructure may not always be directly attacked.Sometimes, the real risk comes from vendors, contractors, suppliers, hosting providers, exposed credentials, weak access controls, and data leaked through third-party ecosystems.In this podcast episode, Prabh speaks with Rakesh Krishnan, a threat intelligence researcher, about the Kudankulam Nuclear Power Plant-related data exposure discovered on a dark web data leak site operated by the ransomware group World Leaks.00:00 - 01:04 – Highlights01:04 - 02:54 - Introduction, Guest welcome, his credentials and Agenda02:54 – 04:29 -…
-
23 Jul 2026 · 1 hr 39 min
How to Implement ISO 27701 in the Real World
Want to understand how to implement ISO 27701 properly and turn privacy compliance into a working system? In this podcast, we break down the practical implementation of ISO 27701, explain how it relates to ISO 27001, and show how organizations can build a real Privacy Information Management System (PIMS) instead of treating privacy as a one-time compliance exercise.This session covers the structure of ISO 27701, the role of privacy principles, the difference between controllers and processors, and the real steps involved in operationalizing privacy controls across people, process, and…
-
20 Jul 2026 · 1 hr 43 min
How to Pentest LLMs Like a Security Researcher Cybersecurity
Are LLMs and AI apps really secure? In this podcast, we break down LLM security, prompt injection, LLM penetration testing, and the real vulnerabilities attackers look for when testing AI systems. From reconnaissance and enumeration to payload manipulation and lab-based exploitation, this session shows how traditional web application security testing differs from LLM security testing in real-world environments.Youtube : https://m.youtube.com/@darshanhackzInstagram : https://www.instagram.com/darshanhackzX : https://x.com/darshanhackzSecurity researcher Darshan Naik joins the discussion to…
-
16 Jul 2026 · 58 min
How to Build AI Governance in 5 Practical Steps Real Usecase
AI governance is no longer optional. In this podcast, we break down a practical 5-step AI governance framework for managing high-risk AI systems from intake and inventory to risk assessment, documentation, vendor review, and continuous monitoring.Using a fictional HR hiring model at a multinational financial institution, this session explains how organizations can build a real-world AI governance process that addresses bias, compliance, privacy, vendor risk, model drift, and regulatory expectations. We also explore how governance teams can align AI systems with business objectives, legal…
-
13 Jul 2026 · 1 hr 21 min
vCISO Master Class: Build a Security Program From Zero
Want to become an effective vCISO and learn how to build an information security program from scratch? This masterclass breaks down the real role of a virtual CISO, showing how to lead security through strategy, governance, risk management, compliance, stakeholder communication, and measurable execution.In this session, you’ll learn how a modern vCISO operates across the three core functions of security leadership: strategic direction, governance structure, and operational oversight. The masterclass covers how to assess low-maturity organizations, identify crown jewels, develop a security…
Take it with you
The Melo app keeps playing with the screen off, works in the car and on your watch, wakes you to your station, and browses the whole catalogue offline. Free, no ads, no account.
