RMF Foundations: From Risk to Authorization (Self-Paced)
IDCYSE7001SP
Learn the full NIST Risk Management Framework lifecycle, from categorizing a system to authorizing it to operate.
Learn the full NIST Risk Management Framework lifecycle, from categorizing a system to authorizing it to operate.
This course is self-paced. For live online or in-person instruction, take RMF Foundations: From Risk to Authorization.
The NIST Risk Management Framework is the backbone of how federal information systems are secured and authorized to operate. This foundational course walks the complete RMF lifecycle as defined in NIST SP 800-37, connecting each step to the risk decision it supports.
Learners move from the core concepts of risk and governance through the seven RMF steps (Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor), ending with an integrated capstone that follows a system through the entire process. The course assumes no prior authorization experience and builds the shared vocabulary and mental model that every later course in the RMF track depends on.
Receive instruction from subject‑matter experts who bring proven government experience.
Courses that are regularly updated based on feedback and industry developments, ensuring versions are mapped to federal competencies.
The instructor was wonderful and so knowledgeable. The course materials were extremely relevant to what my job is. I feel like I can be better because of this class.
— 2025 student
Directly addressing the day-to-day challenges of federal employees.
Your trusted training partner, equipping public service professionals with the skills and knowledge to excel in their roles and drive meaningful impact.
Our instructors are industry experts and experienced educators, driven to help you succeed.
Instructor
Instructor
Upon completion of this course, you’ll receive an official certificate testifying to your mastery of the curriculum. We’ll send you a link where you can download your certificate, share it online with your friends, post it to your professional network on LinkedIn, and view all your earned certificates. Congratulations on your achievement!
Shareable on
Since 1921, Graduate School USA has partnered with over 125 federal agencies and trained more than one million federal employees. Led by instructors with deep, real-world knowledge of federal regulations, policies, and practices, our private group programs are practical, mission-driven, and tailored to your agency’s objectives. We offer expertise across key federal domains—including human resources, financial management, acquisition and contracting, leadership, and more—to deliver training where and how your team needs it.
Complete this form and we’ll get back to you within 1 business hour.
The first installment is due one week before the first class. Subsequent installments are spread out evenly across the duration of the course.
| Installments | |
|---|---|
| 10% non-refundable deposit | |
| $799.00 | Total You Pay |
See the Installment plan FAQ for more information.
Instructor
Wes Bryan resides in Gainesville, Florida, and has built his career around technology, education, and helping others understand complex subjects. He values continuous learning, clear communication, and practical problem-solving. Outside of work, Wesley enjoys running, hiking, fishing, and spending time outdoors. He also has a strong interest in music and literature, enjoys reading both fiction and nonfiction, as well as playing guitar.
Instructor
With more than 25 years of experience in IT and cybersecurity, Chuck has built a career on a strong foundation in security, networking, help desk operations, and technical training. He has helped organizations strengthen their security posture by identifying vulnerabilities, conducting threat assessments, implementing security controls, and ensuring compliance with industry standards. Combining extensive technical expertise with a passion for education, Chuck equips professionals with the knowledge and practical skills needed to recognize risks, risks and respond effectively.