Lifetime - Access
Keep the NIST Risk Management Framework Simple
Risk Management Framework for Beginners
Created By Larry Watlington
Get this course with 2000+ of our top related courses with personal plan.
Try Personal Plan for freeThis scenario is a simple example of me purchasing a new computer for my parents to demonstrate the practical application and simplicity of the Risk Management Framework (RMF). The aim is to explain RMF in a non-technical manner.
Whether we are planning the security for a network that supports a multi-million dollar corporation or deciding how to secure the new home we just purchased, the fundamental security concepts and principles are very similar. Even though our home example is typically not as structured (unless you are really meticulous) as a business model, the fundamental approach to security has not changed since the first caveman discovered the value of a wooden club and another caveman wanted it!
Throughout the scenario, we will cover the concepts of Risk Management as well as each of the six RMF Steps:
Categorize the risks associated with the information and the system.
Select the appropriate security controls to mitigate risks to an acceptable level.
Implement the selected controls.
Assess the implemented controls.
Authorize the system for use.
Continuously monitor the controls to ensure they effectively mitigate risks.
So, forget anything you may have already learned about RMF, NIST 800-53, and most of the other technical jargon, and join me in this adventure of buying a new computer for my parents!
Course content
RMF Scenario - Intro
RMF Step 1: System Categorization
RMF Step 1: Categorization Overlays
RMF Step 1: Final Categorization
RMF Step 2: Selecting Controls
RMF Step 3: Implementing Controls
RMF Steps 1 through 3 Summary
RMF Step 4: Assessing Controls
RMF Step 5: Authorizing the System for Use
RMF Step 6: Continuous Monitoring
Bringing it All Together...
Similar courses
Explore More
Instructor
Hi, I am Larry Watlington, of Keep Cyber Simple!
I am a retired US Air Force Chief Master Sergeant with over thirty years of IT/Telecommunications and Cybersecurity experience with the Department of Defense and Defense Contractors. My background also extends into the areas of radio and satellite systems, networking as well as IT project management, acquisition and requirements analysis.
My education includes Dual Masters in Cybersecurity and IT/Telecommunications Management from the University of Maryland and a bachelor’s degree in industrial technology from Southern Illinois University, Carbondale. I have earned my CISSP and Security + Certifications.
I now reside in Dallas Texas with my beautiful wife, Aida where I am an Information System Security Manager (ISSM) for a large defense contractor.
Teaching and inspiring other is my true passion and calling.
More Courses by Larry Watlington
Recieve the best deals..
