Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Risk Management Framework (RMF) in Practice
Risk Management Framework Training is a 2-day course where participants learn the fundamental concepts and principles of the Risk Management Framework (RMF) as well as learn to apply RMF practices to identify, assess, and manage risks in information systems.
The Risk Management Framework (RMF) is a template and guideline used by companies to identify, eliminate and minimize risks. Risk Management Framework was originally developed by the National Institute of Standards and Technology to help protect the information systems of the United States government. The business benefits of RMF are considerable. An RMF can help an organization to reduce its risks, thereby minimizing legal exposure and helping to maximize profitability.
Course Overview
None
Learning Objectives
- Understand the importance of risk management in information systems.
- Understand the key concepts of the Risk Management Framework (RMF).
- Be able to identify and assess risks to information systems.
- Understand how to implement security controls to mitigate risks.
- Be able to monitor and report on risks to information systems.
- Understand the roles and responsibilities of different stakeholders in the RMF process.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.