SEC525 - Applying the Risk Management Framework (RMF) and NIST Controls

Delivery Options Instructor-Led - Virtual

Course Description

Short Course | 24 Hours | 2.4 CEUs | $3,595

Risk

Our Applying the Risk Management Framework (RMF) and NIST Controls course provides comprehensive training on the federal Risk Management Framework (RMF) and its application within federal government departments and agencies, the Department of Defense (DoD), and the Intelligence Community (IC). Designed for cybersecurity and information security professionals responsible for implementing the RMF, this instructor-led course provides the knowledge and practical skills needed to apply relevant DoD, NIST, and CNSS publications within their work environments.

Students gain practical experience with the RMF seven-step process, risk management and assessment, security controls, system authorization, RMF documentation, and NIST control assessment. Through instructor-led discussions, hands-on activities, case studies, and individual and team exercises, students learn how to prepare for the RMF, categorize information systems, select and implement security controls, assess controls, develop authorization artifacts, and continuously monitor security controls throughout the system development life cycle..

Course Outline

Introduction
Cybersecurity Principles
Risk Management of Federal Information Systems
Threats and Issues
Framework and Methodologies of Information System Risk Assessment and Management Aligned to the RMF
Federal Policies, Instructions, and Guidelines for Implementing the RMF
Foundations of Information Security and Risk Management
RMF Life Cycle Process
- Prepare Step – Organization
- Prepare Step – System
- Categorize System Step
- Select Controls Step
- Implement Controls Step
- Assess Controls Step
- Authorize System Step
- Monitor Controls Step
- Roles and Responsibilities, References and Guidelines
RMF Documentation
System Security Plan
Security Assessment Report
NIST Controls
- Security Controls
- Management Controls
- Operational Controls
- Technical Controls
- Controls Assessment
RMF Resources
Automated Security Tools
DIACAP to RMF Transition