Advanced Risk Management, Security Controls & Monitoring

In this module, you will explore the process of selecting appropriate security controls within the NIST Risk Management Framework. The content covers identifying applicable rules and standards, setting and tailoring control baselines, allocating controls effectively, and documenting them for approval. You'll learn methodologies to select the most appropriate security controls for specific organizational needs and how to properly document them for review and implementation.

In this module, you will delve into the practical aspects of deploying security controls in cybersecurity. The content focuses on implementing, evaluating, and documenting these controls to ensure they meet necessary standards and requirements. You'll learn about common controls and how to properly document implemented controls to demonstrate compliance with security requirements.

In this module, you will cover the entire assessment process within the NIST RMF. The content includes planning, conducting, and documenting assessments, as well as identifying and remediating risks based on the findings. You'll learn methodologies for creating assessment plans, conducting thorough evaluations, analyzing results, and documenting assessment outcomes.

In this module, you will focus on the final steps of system authorization and risk response. The content covers the authorization process, documentation of risk responses, and strategies for mitigating identified risks. You'll learn the formal procedures for obtaining system authorization and developing appropriate responses to security risks.

In this module, you will examine the continuous monitoring and change control processes in cybersecurity. The content focuses on managing system changes, handling configuration control, and evaluating secure methods for system disposal at the end of its lifecycle. You'll learn how to maintain security controls over time through effective monitoring and change management.