Implementing NIST's Risk Management Framework (RMF)

By Bobby Rogers
Challenges in IT today include balancing security, functionality, risk, and compliance, all with limited resources. In this course, you'll learn how the NIST Risk Management Framework can help you do all of this by providing a formal process.
Play course overview
Course info
Level
Intermediate
Updated
Feb 28, 2019
Duration
3h 54m
Table of contents
Course Overview
Course Overview 2m
Understanding Security, Risk, and Compliance
Introduction and Compliance, Security, and Risk 2m Compliance 6m Security 5m Risk 5m Compliance vs. Security 6m Being Compliant and Secure: Part 1 3m Being Compliant and Secure: Part 2 4m The Risk Management Framework 5m Summary 1m
Using RMF Publications
NIST Special Publications 4m Demo: NIST, CSRC, and Publications 5m RMF Publications 5m NIST SP 800-39 3m NIST SP 800-37 2m NIST SP 800-30 3m NIST SP 800-53 5m NIST SP 800-53A 4m NIST SP 800-60 4m Summary 1m
Discovering the Cybersecurity Framework
What Is the CSF? 3m Understanding the CSF Structure 8m CSF Tiers and Profiles 4m Relationship of CSF to RMF 3m Summary 1m
Understanding the RMF
Introducing the New RMF 3m Important RMF Concepts 3m Risk Tiers 3m Systems and Authorization 3m Roles and Responsibilities 5m Security and Privacy in the RMF 2m Summary 1m
RMF Preparation
The Preparation Step 3m Organization-level Preparation Tasks 6m System-level Preparation Tasks 9m RMF Preparation at Globomantics 2m Summary 1m
Categorizing Information Systems
Categorize 4m FIPS 199 3m NIST SP 800-60 8m RMF Categorization Tasks 2m Categorizing Systems at Globomantics 2m Summary 1m
Selecting Security Controls
Selecting Security Controls 3m FIPS-200 3m NIST SP 800-53 7m RMF Select Tasks 4m Control Selection at Globomantics 2m Summary 1m
Implementing Security Controls
Implementing Security Controls and Control Fundamentals 5m Implementing Controls 2m NIST SP 800-160 2m RMF Implement Tasks 1m Implementing Controls at Globomantics 1m Summary 1m
Assessing Security Controls
Assessing Security Controls 4m NIST SP 800-53A 5m NIST SP 800-30 4m RMF Assess Tasks 5m Assessing Systems at Globomantics 3m Summary 1m
Authorizing Information Systems
Authorizing Information Systems 3m Authorization Under NIST SP 800-37r2 1m RMF Authorize Tasks 3m Authorizing Systems at Globomantics 1m Summary 1m
Monitoring Security Controls
Monitoring Security Controls 2m NIST SP 800-137 4m RMF Monitor Tasks 4m Monitoring Systems at Globomantics 3m Summary 0m
Description
Course info
Level
Intermediate
Updated
Feb 28, 2019
Duration
3h 54m
Description

Managing risk is one of the primary goals of businesses, particularly in the information security program. Risk management provides the vehicle for the balance between resources, compliance, and security. Organizations must protect their information assets by establishing and maintaining an effective risk management program, considering the organization’s environment, threats, resources, and sensitivity of its data. In this course, Implementing NIST's Risk Management Framework (RMF), you'll gain a solid foundation and knowledge on the risk management aspect of security, as well as, how to employ the RMF to effectively deal with risk and compliance in your organization. First, you'll learn how to categorize systems based upon criticality and impact, select the appropriate security controls, and then implement those controls. Next, you'll also learn how to conduct control and risk assessments. Finally, you'll learn about the system authorization process and how monitoring the effectiveness of controls and ever-changing risk, by performing continued assessments and reauthorization processes, can help you truly manage cyber risk in the organization. By the end of this course, you'll be well-versed in the NIST RMF and how it can help you with both compliance and security.

About the author
Bobby Rogers
About the author

Bobby E. Rogers is an information security engineer working as a contractor for Department of Defense agencies, helping to secure, certify, and accredit their information systems. His duties include information system security engineering, risk management, and certification and accreditation efforts.

More from the author
Running the Business of Information Security
Advanced
1h 59m
Oct 4, 2019
Preparing to Manage Security and Privacy Risk with NIST's Risk Management Framework
Advanced
3h 11m
Sep 9, 2019
Information Security Manager: Information Security Incident Management
Intermediate
3h 55m
Jun 6, 2019
More courses by Bobby Rogers
Section Introduction Transcripts
Section Introduction Transcripts

Course Overview
(Music) Hi, everyone. My name is Bobby Rogers, and welcome to the Implementing NIST's Risk Management Framework course. I'm a cybersecurity analyst, and I work as a contractor securing information systems and data for the U.S. Government, specializing in cyber risk management. Have you ever seen anyone just put a system or a network online without regard to security or if they're even allowed to do that? The federal government requires that all of its systems be authorized to operate before they can be brought online using the NIST Risk Management Framework or RMF. That's why we've produced this course that covers how to use the RMF within your organization. We're going to talk about the major things you need to know to effectively establish or improve a risk-management program using the RMF. Some of the major topics that we'll cover include the new RMF, RMF publications, the 7-step RMF process, and assessing controls. By the end of this course, you'll understand how to use the RMF to help secure your information systems as well as meeting component requirements and managing cyber risk. Before beginning the course, you should be familiar with basic security concepts and terminology such as confidentiality, integrity, and availability, as well as governance concepts. I hope you'll join me on this journey to learn about the RMF with the Implementing NIST's Risk Management Framework course from Pluralsight.

You're the smartest person in the room

PROVE IT

Your team won't just close the skills gap

THEY'LL HURDLE IT