Description

NIST Cybersecurity and Risk Management Frameworks: Achieving Proficiency in Security, Compliance, and Governance [Video]

Key benefits

Gain a comprehensive understanding of NIST frameworks
Implement security controls effectively for enhanced protection
Conduct thorough risk assessment and categorization

Description

The course kicks off with an exploration of NIST Cybersecurity and Risk Management Frameworks, offering insights into their significance in today’s digital landscape. You’ll delve into NIST publications, relationships, and the framework’s core components, setting a strong foundation. As the course progresses, you’ll gain an in-depth understanding of NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF). Discover how to assess risks, categorize information systems, and select appropriate security controls. Learn to create System Security Plans (SSPs) and implement security controls effectively. The course wraps up by emphasizing the importance of a risk-based approach to security, highlighting the RMF preparation step, and covering topics like system authorization, risk response, and change management.

What you will learn
Navigate complex NIST relationships and standards Conduct risk assessments and categorization Implement security controls effectively Ensure system authorization and risk response Manage change and configuration control Handle system disposal and continuity of operations

Table of Contents
13 Chapters
1. NIST Cybersecurity Frameworks and Standards
Course Overview
NIST Cybersecurity and Publications
NIST Relationships
NIST CSF & RMF Overview
NIST CSF Core, Tiers, and Profiles
The Vocabulary of Risk
NIST Frameworks & Standards Case Study

2. Identification and Asset Management
NIST Core Review and Identify Function Overview
Inventory of Critical Assets
Business Impact Assessment
Security Policies and Procedures

3. NIST’s Protect Function for Comprehensive Cybersecurity
NIST Core Review and Protect Function Overview
Awareness & Training
Access Control
Protective Technology – Network
Protective Technology – Systems
Data Security and Encryption
Maintenance
Personnel and Physical Security

4. Monitoring, Alerting, and Assessments in Cybersecurity
System Auditing and Logging
Monitoring and Alerting
Assessments

5. Essentials of Incident Response and Digital Forensics in Cybersecurity
Response Planning
Incident Response Plan Examples
Digital Forensics
Response Training and Testing
Mitigation and Improvements

6. Strategies for Business Continuity and Recovery in Cybersecurity
Continuity of Operations Plan
Backup and Recovery
Virtualization and the Cloud

7. NIST Risk Management Framework and Security Planning
NIST RMF Overview & Preparation
A Risk-Based Approach to Security
The RMF Preparation Step
System Security Plan (SSP)

8. Categorization Step in NIST Risk Management Framework
Categorizing Information Systems
Establishing Scope
The RMF Categorize Step
Categorization Risk Analysis

9. Control Selection in the NIST Risk Management Framework
Selecting Security Controls
NIST Control Documents
Setting and Tailoring Control Baselines
Control Allocation and Monitoring
Documentation and Approval

10. Implementing and Documenting Security Controls in Cybersecurity
Security Control Implementation
Common Controls
Documenting Controls

11. Assessment and Remediation in the NIST Risk Management Framework
NIST RMF Assessment Step and Process
Assessment Plan
Conducting the Assessment
Analyzing Assessment Results
Assessment Documentation
Risk Remediation

12. System Authorization and Risk Response in Cybersecurity
System Authorization
Risk Response

13. Continuous Monitoring and Change Control in Cybersecurity
Monitoring Controls Step