Free NIST RMF Training Course for ISSO Roles

About Course

The Risk Management Framework (RMF) requires seven steps: Prepare by establishing organizational context. Categorize the system based on impact. Select appropriate baseline security controls. Implement the controls and document them. Assess controls to verify operational effectiveness. Authorize the system by formally accepting risk. Monitor the system continuously for security changes….

Course Content

Module 1: Foundations, Governance & The ISSO Portfolio

1. Introduction: What is an ISSO? (The Home Inspector Analogy)
2. The ISSO Ecosystem: Meeting the Team
3. Laws & Mandates: Your Rulebooks
4. The Master Documentation Portfolio: Your “Paperwork”
5. SDLC Integration: When do we start?
6. Role Boundaries: Knowing Your Lane
Listen to this lesson’s audio overview:
Hands-on Lab 1: System Registration & Master Documentation Index – Part A
Hands-on Lab 1: System Registration & Master Documentation Index – Part B
Module 1 Quiz

Module 2: Privacy Frameworks (PTA & PIA)

1. Introduction: Privacy vs. Security (The Frosted Window Analogy)
2. Privacy Legal Basis: Why do we do this?
3. Definitions: The “Sensitivity Scale”
4. The Privacy Workflow: PTA vs. PIA
5. Role Boundaries: Who does the work?
Listen to this lesson’s audio overview:
Hands-on Lab 2: Authoring a PTA and Full PIA – Part A
Hands-on Lab 2: Authoring a PTA and Full PIA – Part B
Module 2 Quiz

Module 3: RMF Step 0 (Prepare) & Step 1 (Categorize)

1. Introduction: The Pre-Game and the Valuation
2. Defining the Authorization Boundary (The Digital Fence)
3. FIPS 199: Categorizing the System
4. NIST SP 800-60: The Information Mapping
5. Role Boundaries: Who does the mapping?
Listen to this lesson’s audio overview:
Hands-on Lab 3: Boundary Diagramming & FIPS 199 Categorization – Part A
Hands-on Lab 3: Boundary Diagramming & FIPS 199 Categorization – Part B
Module 3 Quiz

Module 4: RMF Step 2 (Select) & System Security Plan (SSP) (Part 1)

Module 5: SSP Implementation Statements & Operational SOP Authoring

Module 6: Technical Auditing, Scanning & Hardening Artifacts

Module 7: Contingency Planning & Business Continuity

Module 8: Incident Response & Operational Security Plans

Module 9: RMF Step 3 (Implement) & Step 4 (Assess)

Module 10: RMF Step 5 (Authorize) & Package Assembly

Module 11: RMF Step 6 (Monitor) & Continuous Compliance

Module 12: Career Portfolio, Industry Aligned Resumes & Capstone

Student Ratings & Reviews

No Review Yet

About Course

Course Content

Module 1: Foundations, Governance & The ISSO Portfolio

1. Introduction: What is an ISSO? (The Home Inspector Analogy)

2. The ISSO Ecosystem: Meeting the Team

3. Laws & Mandates: Your Rulebooks

4. The Master Documentation Portfolio: Your “Paperwork”

5. SDLC Integration: When do we start?

6. Role Boundaries: Knowing Your Lane

Listen to this lesson’s audio overview:

Hands-on Lab 1: System Registration & Master Documentation Index – Part A

Hands-on Lab 1: System Registration & Master Documentation Index – Part B

Module 1 Quiz

Module 2: Privacy Frameworks (PTA & PIA)

1. Introduction: Privacy vs. Security (The Frosted Window Analogy)

2. Privacy Legal Basis: Why do we do this?

3. Definitions: The “Sensitivity Scale”

4. The Privacy Workflow: PTA vs. PIA

5. Role Boundaries: Who does the work?

Listen to this lesson’s audio overview:

Hands-on Lab 2: Authoring a PTA and Full PIA – Part A

Hands-on Lab 2: Authoring a PTA and Full PIA – Part B

Module 2 Quiz

Module 3: RMF Step 0 (Prepare) & Step 1 (Categorize)

1. Introduction: The Pre-Game and the Valuation

2. Defining the Authorization Boundary (The Digital Fence)

3. FIPS 199: Categorizing the System

4. NIST SP 800-60: The Information Mapping

5. Role Boundaries: Who does the mapping?

Listen to this lesson’s audio overview:

Hands-on Lab 3: Boundary Diagramming & FIPS 199 Categorization – Part A

Hands-on Lab 3: Boundary Diagramming & FIPS 199 Categorization – Part B

Module 3 Quiz

Module 4: RMF Step 2 (Select) & System Security Plan (SSP) (Part 1)

1. Introduction: The Hardware Store Catalog

2. Lecture Topics: The Selection Process

3. Role Boundaries: What is the ISSO’s Job?

Listen to this lesson’s audio overview:

Hands-on Lab 4: SSP Front Matter & ISA/MOU Drafting – Part A

Hands-on Lab 4: SSP Front Matter & ISA/MOU Drafting – Part B

Module 4 Quiz

Module 5: SSP Implementation Statements & Operational SOP Authoring

1. Introduction: The Recipe vs. The Meal (Analogy)

2. Lecture Topics: How to Write for an Auditor

3. Role Boundaries: The Writer vs. The Doer

Listen to this lesson’s audio overview:

Hands-on Lab 5: The Authoring Lab – Part A

Hands-on Lab 5: The Authoring Lab – Part B

Module 5 Quiz

Module 6: Technical Auditing, Scanning & Hardening Artifacts

1. Introduction: The Doctor’s X-Ray (Analogy)

2. Lecture Topics: Finding the Holes

3. Role Boundaries: The Inspector vs. The Mechanic

Listen to this lesson’s audio overview

Hands-on Lab 6: Parsing Vulnerability Scans & STIG Evaluation – Part A

Hands-on Lab 6: Parsing Vulnerability Scans & STIG Evaluation – Part B

Module 6 Quiz

Module 7: Contingency Planning & Business Continuity

1. Introduction: The Spare Tire (Analogy)

2. Lecture Topics: The Strategy of Survival

3. Role Boundaries: The Planner vs. The Decision Maker

Listen to this lesson’s audio overview:

Hands-on Lab 7: BIA & Contingency Plan Authoring – Part A

Hands-on Lab 7: BIA & Contingency Plan Authoring – Part B

Module 7 Quiz

Module 8: Incident Response & Operational Security Plans

1. Introduction: The Smoke Detector and the Firefighter (Analogy)

2. Lecture Topics: The Attack Playbook

3. Role Boundaries: The Coordinator vs. The Specialist

Listen to this lesson’s audio overview

Hands-on Lab 8: Incident Response Plan & Call Tree Authoring – Part A

Hands-on Lab 8: Incident Response Plan & Call Tree Authoring – Part B

Module 8 Quiz

Module 9: RMF Step 3 (Implement) & Step 4 (Assess)

1. Introduction: Building and Inspecting (Analogy)

2. Lecture Topics: How the Audit Works

3. CRITICAL ROLE BOUNDARY LESSON

Listen to this lesson’s audio overview:

Hands-on Lab 9: Audit Preparation & POA&M Management – Part A

Hands-on Lab 9: Audit Preparation & POA&M Management – Part B