In a virtual lab system, students execute the NIST RMF Steps 4-6: Implementation, Authorization and Monitoring, and complete the associated analysis and documentation, as required by the NIST/FedRAMP/CMMC Frameworks
Learning Objectives
Develop a Security Assessment Plan (SAP) following NIST RMF Steps 4, 5 and 6 |Produce a Security Assessment Report (SAR) based on gap analysis from SAP and audit results | Complete Authorization to Operate (ATO) Package for an organization | Develop Plan of Action and Milestones (POA&M) for the organization under study | Develop the Information Security Continuous Monitoring (ISCM) Strategy aligned to NIST's RMF Steps 4, 5 and 6 | Produce the System Decommissioning Strategy for the organization
Framework Connections
Specialty Areas
- Risk Management
- Strategic Planning and Policy
Feedback
If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.