Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
Cybersecurity Risk Management Framework (CRMF) Training
Become a Job-Ready Cybersecurity Risk Management Framework Professional (CRMF) in just 16 Weeks. The NIST Risk Management Framework (RMF) and the Federal Risk and authorization Management Program (FedRAMP) are the standards utilized for on-premises and cloud security risk management in the U.S. today.
This training program is designed to provide participants with a thorough understanding of the National Institute of Standards and Technology (NIST) RMF, a risk-based approach to information security used by federal agencies and organizations that handle sensitive data. Participants will learn how to navigate the RMF process, including categorization, security control selection, implementation, assessment, authorization, and continuous monitoring. Our Cybersecurity Risk Management Framework (RMF) hands-on training will validate your NIST RMF project experience and cybersecurity knowledge to employers and get you the lucrative job you desire.
Course Overview
All prerequisites are built into the program
Learning Objectives
You will learn how to implement the NIST Risk Management Framework (RMF) and Federal Risk and authorization Management Program (FedRAMP) on Federal and non-Federal information systems. You will have a firm understanding and expertise to demonstrate the specific skills required to implement the Security Assessment and Authorization (SA&A) process by utilizing special publications such as National Institute of Standards and Technology (NIST) and Federal Information Processing Standards (FIPS) standards and guidelines.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Specialty Areas
- Cybersecurity Management
- Test and Evaluation
- Vulnerability Assessment and Management
- Risk Management
- Systems Development
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.