Aligning Cybersecurity And Risk Management Frameworks (CSF/RMF)

This three-day Integrating NIST Frameworks (CSF/RMF) course helps students to understand the background and integration of several key frameworks from the National Institute of Standards and Technology (NIST).

The course explains the background and application of NIST’s Cybersecurity Framework and Risk Management Framework (RMF), and their relationship to other NIST models such as those for Cybersecurity Workforce, Privacy Risk Management, Supply Chain Risk Management (SCRM), and integration with Enterprise Risk Management (ERM).

Using the Cybersecurity Framework’s proven components as a way to organize risk expectations, outcomes and communication, the course explains the interaction among mission objectives and priorities, risk management through the language of business, and application of those objectives for managing risk for business systems and services.

The course applies the principles described in the Cybersecurity Framework to treat cybersecurity risk management as an enterprise practice. It helps security teams understand how to manage risk in light of executives’ priorities, and it helps leaders apply the necessary privacy & security enablers to be prepared for an ever-evolving cybersecurity risk landscape.

Note that although this course has been developed and will be delivered by an engineer that participated in numerous NIST projects, NIST itself does not deliver or endorse any formal courses about their risk management or cybersecurity initiatives.