Learn GRC, security, and compliance in 8-minute bites.

8-bit Bytes turns dense standards into daily, bite-size lessons — written exclusively from authoritative sources (NIST, ISO, AICPA, RFCs, official regulations) with citations down to the document section, and links to the originals in every lesson.

116 LESSONS ACROSS 18 TOPICS
• Foundations: what GRC actually is, SOC 2, risk management, policy writing, ISO 27001
• Core domains: identity & access, incident response, business continuity, vendor risk, zero trust, cloud security, privacy
• Control catalogs: NIST SP 800-53 and 800-171, ISO 22301, 27701, 27017, and 20000-1
• Audit & assurance: IT audit fundamentals, SOC 1, SOC 3, SOX IT general controls
• Regulated regimes: PCI DSS, HIPAA, CMMC, DORA, NERC CIP, Cyber Essentials, Essential Eight, HITRUST, and the EU AI Act
• Specialist tracks: privileged access & workload identity, Apple device management

STUDY FOR REAL CERTIFICATIONS
Lessons map to official exam objectives — CompTIA Security+, ISACA CISM and CISA, Microsoft SC-300, Okta Certified Professional, and Apple's IT certifications.

LISTEN LIKE A PODCAST
Studio-quality narration for every lesson, with adjustable speed. Technical terms are pronounced the way practitioners say them.

QUIZ YOURSELF PROPERLY
1,000+ questions: a quick check after every lesson, drawn from rotating pools so retakes actually test you, plus full chapter quizzes.

MAKE IT YOURS
Bookmarks, highlights, and notes collected in a Saved tab. Dictionary lookup for unfamiliar words. Dark mode and adjustable text size. Streaks to keep you honest — and Byte & Co., a fictional company you build as your knowledge grows.

HONEST BY DESIGN
Lessons are AI-drafted exclusively from verified authoritative sources and independently fact-checked; every lesson lists its sources. If it is not in the source, it is not in the lesson.

INDEPENDENT APP — NOT A GOVERNMENT ENTITY
8-bit Bytes is an independent educational app. It is not affiliated with, endorsed by, or representing any government entity, standards body, or certification provider. Certification names are trademarks of their respective owners, used for identification only.

OFFICIAL SOURCES
All government and regulatory material in the app comes from, and links to, the official publishers:
• NIST publications — https://csrc.nist.gov
• HIPAA (U.S. HHS) — https://www.hhs.gov/hipaa
• CMMC (U.S. DoD CIO) — https://dodcio.defense.gov/cmmc/
• EU law: GDPR, DORA, EU AI Act — https://eur-lex.europa.eu
• SOX (U.S. SEC) — https://www.sec.gov
• Cyber Essentials (UK NCSC) — https://www.ncsc.gov.uk
• Essential Eight (Australian ACSC) — https://www.cyber.gov.au
• NERC CIP — https://www.nerc.com
• ISO standards — https://www.iso.org
• AICPA (SOC reports) — https://www.aicpa-cima.com
• PCI DSS — https://www.pcisecuritystandards.org
• IETF RFCs — https://www.rfc-editor.org

PRICING
Foundations (28 lessons) is free with ads. Unlock any other section for $0.99, or get All Access — every section, no ads, forever — for $3.99. The first lesson of every topic is always free to try.