During this 3-day Applying the FISMA/NIST Risk Management Framework program, students will acquire fundamental knowledge of the requirements for meeting FISMA requirements, as well as an in-depth look of the Federal system authorization process and Risk Management Framework (RMF).
This training equips the students with an in-depth indoctrination into the RMF and they will learn the requirements for managing risk, and ensuring that the confidentiality, availability and integrity of federal information and information systems is protected at a level commensurate with the security requirements of the information and the information system. Students will participate in a series of scenario-based hands-on exercises to enhance understanding of the processes used for system authorization, including all of the elements of the Risk Management Framework. These exercises will include the development of Systems Security Plans (SSPs), Security Assessment Reports (SARs), and Plans Of Action and Milestones (POA&Ms) for Federal Information Systems. This training is a CNSS approved course that deals with the new C&A transformation. This course has been aligned with NIST SP 800-37 Revision 1 and is the new process under the C&A transformation.
Students will receive a CD with a comprehensive set of NIST and Director of National Intelligence (DNI) - approved templates, as well as copies of the guidelines, instructions, standards, and presentations discussed during the training. You will also receive a copy of the book, “The Definitive Guide to the C&A Transformation” co-authored by Dr. Julie E. Mehan and Waylon Krush.
Every student participating in the Applying the FISMA/NIST RMF In-Depth 3 Day course will receive a National Security Agency (NSA) and Committee on National Security Systems (CNSS) NSTISSI4011 Certificate for successful participation in the course, which will allow you to add the CNSS/NSA 4011 designation to your resumes.
*This program is delivered in partnership with Lunarline, Inc. FISMA courseware meets all of the elements of the Committee on National Security Systems (CNSS) for Information Systems Security (INFOSEC) Professionals, NSTISSI No. 4011 National Training Standard