RMF is the unified information security framework for the entire federal government that is replacing the legacy Certification and Accreditation (C&A) processes within federal government departments and agencies, the Department of Defense (DOD) and the Intelligence Community (IC).
Learning Objectives
Information Security Concepts Security Authorization (Ciampa) Concepts and Standards Introduction to FISMA and RMF Introduction to RMF for DoD ITDoD, NIST and CNSS Publications Life-Cycle Activities (DoDI 8510.01 and NIST SP 800-37)Documentation NIST Security Controls (NIST SP 800-53 Rev. 4))RMF Resources and Tools (incl. Knowledge Service, eMASS)Transition from DIACAP to RMF DoD, NIST and CNSS Publications Roles and Responsibilities System Boundary DefinitionRMF for DoD IT Process (DoDI 8510.01)RMF Life Cycle (NIST SP 800-37)RMF for DoD IT Documentation System Categorization and Security Control Selection (CNSSI 1253)NIST Security Controls (SP 800-53 Rev. 4), implementation and assessmentRMF Resources and Tools Security Testing ToolsDIACAP to RMF Transition Strategy and Implementation
Framework Connections
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.