This course is designed for the information security practitioner who champions system security commensurate with an organization's mission and risk tolerance, while meeting legal and regulatory requirements. It conceptually mirrors the NIST system authorization process in compliance with the Office of Management and Budget (OMB) Circular A-130, Appendix III. This course provides a comprehensive review of information systems security concepts and industry best practices. It covers the RMF at an extensive level. This course prepares you to sit for the (ISC)²® CAP® certification exam. The (ISC)²® CAP® certification is the only certification under the DoD 8570 Mandate that aligns to each of the RMF steps.
General knowledge of the NIST Framework.
Ideal for IT, information security and information assurance practitioners, ISSOs, ISSMs, and contractors who use the RMF in the US federal government, the military or federal contractors.
- Risk Management Framework (RMF)
- Categorization of Information Systems
- Selection of Security Controls
- Security Control Implementation
- Information System Authorization
- Monitoring of Security Controls
- Course Material
- Labs and Exercises
- Classroom Discussion
- In-class Internet Access
- Personal Computer Station