RMF for Federal Agencies Training

RMF for Federal Agencies Fundamentals (One Day) provides an overview of information security and risk management and proceeds to a high-level view of FISMA regulations, roles, and responsibilities, and NIST RMF process steps, including security authorization (aka. certification and accreditation).  It also includes an introduction to the NIST RMF documentation package and the NIST security controls.

RMF for Federal Agencies In-Depth (Days 2-4) expands on these topics at a level of detail that enables practitioners to immediately apply the training to their daily work.  Each student will gain an in-depth knowledge of the NIST publications along with the practical guidance needed to implement them in his/her environment.  Each activity in the NIST SP 800-37 Rev 2 Risk Management Framework is covered in detail, as is each component of the documentation package.  NIST SP 800-53 (Rev 4 and Rev 5) Security Controls and NIST SP 800-53a assessment procedures are covered in detail, as are the CNSSI 1253 “enhancements” applicable to National Security Systems (NSS) and the intelligence community.  “Class participation” exercises and collaboration reinforce key concepts.