RMF Analogy (Building a House)
RMF House Analogy House Summary
Main Roles and their Objectives
RMF Phases and Roles in Real World
How to categorize an information system
Case Study Kickoff Meeting
Class Project Categorize LCM
Class Project Categorize LCM Walkthrough
Entering System Categorization in SSP
SAP (Security Assessment Plan)
Selecting Controls Class Project LCM
Selecting Common Controls
Selecting Common controls continued (Hybrid Controls)
Implementing Security Controls
Upload Artifacts and Contact Assessor
Reviewing Security Controls Artifacts
2 Main Roles and thier Objectives.
System Information XYZ system
ISSO and SCA Duties in a Nutshell
A to Z break down Prepare to Implementation
A to Z break down Assessment to Monitor
Quiz (Categorize Information System)
Selecting security Controls: What is a Security Control?
Select Phase Types of Controls Management Technical and Operational
Select Phase Common control System Specific Control and Hybrid Control
Select Phase: NIST 800-53 and FIPS 200
Select Phase NIST Website and SSP Templates
Select Phase: NIST Control Families
Select Phase: Low, Moderate, High and Enhancements
Implement Documenting Implementation Statements
Assess Evidence Review Tips
Conducting the assessment
Assessment Using the SAP worksheet
Assess Phase: Entering Assessment Observations
Assess Phase: Documenting the Findings in the SAR
Assess Phase: Remediation Actions
Assess Phase: POA&M Report
Assess Phase: Documenting Plan of Action and Milestones POA&Ms
Security Assessment Process from A to Z