NIST Cybersecurity And Risk Management Frameworks
 
Course Description
This course provides a comprehensive understanding of the NIST Cybersecurity and Risk Management Frameworks, essential for navigating today’s digital landscape. Beginning with an exploration of NIST publications and their significance, you will delve into the core components of these frameworks. As you progress, you will gain in-depth knowledge of the NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF), learning how to assess risks, categorize information systems, and implement effective security controls. The course culminates in emphasizing a risk-based approach to security, covering system authorization, risk response, and change management.
 
What You Will Learn
Navigate complex NIST relationships and standards
Conduct risk assessments and categorize information systems
Implement security controls effectively
Ensure system authorization and risk response
Manage change and configuration control
Handle system disposal and continuity of operations
 
Course Overview
1. NIST Cybersecurity Frameworks and Standards
Course Overview
NIST Cybersecurity and Publications
NIST Relationships
NIST CSF & RMF Overview
NIST CSF Core, Tiers, and Profiles
The Vocabulary of Risk
NIST Frameworks & Standards Case Study
2. Identification and Asset Management
NIST Core Review and Identify Function Overview
Inventory of Critical Assets
Business Impact Assessment
Security Policies and Procedures
3. NIST’s Protect Function for Comprehensive Cybersecurity
NIST Core Review and Protect Function Overview
Awareness & Training
Access Control
Protective Technology – Network
Protective Technology – Systems
Data Security and Encryption
Maintenance
Personnel and Physical Security
4. Monitoring, Alerting, and Assessments in Cybersecurity
System Auditing and Logging
Monitoring and Alerting
Assessments
5. Essentials of Incident Response and Digital Forensics in Cybersecurity
Response Planning
Incident Response Plan Examples
Digital Forensics
Response Training and Testing
Mitigation and Improvements
6. Strategies for Business Continuity and Recovery in Cybersecurity
Continuity of Operations Plan
Backup and Recovery
Virtualization and the Cloud
7. NIST Risk Management Framework and Security Planning
NIST RMF Overview & Preparation
A Risk-Based Approach to Security
The RMF Preparation Step
System Security Plan (SSP)
8. Categorization Step in NIST Risk Management Framework
Categorizing Information Systems
Establishing Scope
The RMF Categorize Step
Categorization Risk Analysis
9. Control Selection in the NIST Risk Management Framework
Selecting Security Controls
NIST Control Documents
Setting and Tailoring Control Baselines
Control Allocation and Monitoring
Documentation and Approval
10. Implementing and Documenting Security Controls in Cybersecurity
Security Control Implementation
Common Controls
Documenting Controls
11. Assessment and Remediation in the NIST Risk Management Framework
NIST RMF Assessment Step and Process
Assessment Plan
Conducting the Assessment
Analyzing Assessment Results
Assessment Documentation
Risk Remediation
12. System Authorization and Risk Response in Cybersecurity
System Authorization
Risk Response
13. Continuous Monitoring and Change Control in Cybersecurity
Monitoring Controls Step
 
By completing this course, you will be well-equipped to implement and manage security controls effectively, conduct thorough risk assessments, and navigate the complexities of NIST frameworks to enhance your organization’s cybersecurity posture.