RMF Foundations: From Risk to Authorization (Self-Paced) (Coming Soon)
IDCYSE7001SP

Module 1: RMF Orientation and Risk Fundamentals

• Explore why the Risk Management Framework exists and how it connects cybersecurity activities to organizational missions.

Module 2: RMF Governance, Risk Levels, and Participant Roles

• Examine the three risk tiers and the roles and responsibilities that support the RMF process.

Module 3: Prepare

• Review organization- and system-level activities that establish readiness for the RMF process.

Module 4: Categorize

• Determine system impact levels using Federal Information Processing Standard 199.

Module 5: Select

• Apply control baselines and tailoring guidance using NIST Special Publication 800-53B.

Module 6: Implement

• Put selected security controls in place and document how they have been implemented.

Module 7: Assess

• Produce and evaluate evidence to determine whether security controls are implemented correctly and operating effectively.

Module 8: Authorize

• Evaluate residual risk and support the issuance of an authorization decision.

Module 9: Monitor

• Maintain current information about control effectiveness, system changes, and organizational risk.

Module 10: Integrated RMF Capstone and Knowledge Check

• Apply the complete RMF process through an integrated capstone exercise and knowledge check.