NIST Cybersecurity and Risk Management Frameworks

Name: NIST Cybersecurity and Risk Management Frameworks
Rating: 4.6 (190 reviews)

Standards for security, compliance and privacy

Created byStone River eLearning

Last updated 6/2023

English

What you'll learn

Understand the role of NIST in developing cybersecurity frameworks and guidelines and its importance in the field of cybersecurity.
Comprehend the fundamentals of cybersecurity and the significance of managing risks to protect critical assets and information systems.
Familiarize themselves with the NIST Cybersecurity Framework (CSF) and its five core functions: Identify, Protect, Detect, Respond, and Recover.
Apply the CSF to assess their organization's cybersecurity posture, identify vulnerabilities, and develop risk management strategies aligned with business obj
Gain knowledge of the NIST Special Publication 800-53, including its control families, control selection, implementation, and ongoing security assessment and

Course content

13 sections • 57 lectures • 21h 51m total length

Course Overview3:57
NIST Cybersecurity and Publications25:56
Define cybersecurity and culture through a practical lens, showing prevention, protection, restoration, and governance aligned with NIST risk management and cybersecurity frameworks and the CSRC publications library.
NIST Relationships24:52
NIST CSF & RMF Overview23:26
Explore the NIST CSF and RMF, detailing their five functions and risk-based controls. Learn the RMF steps—prepare, categorize, select, implement, assess, authorize, monitor—and how they guide asset risk management.
NIST CSF Core, Tiers, and Profiles24:02
The Vocabulary of Risk24:21
NIST Frameworks & Standards Case Study20:00

NIST Core Review and Identify Function Overview22:56
Explore the identify function of the NIST cybersecurity framework, connect asset management with governance and risk, and reference subcategories and informative references.
Inventory of Critical Assets26:37
Business Impact Assessment26:15
Explore how the NIST cybersecurity framework identify function links the business environment to a business impact assessment, detailing BIA processes, RTO, RPO, and recovery strategies, including supply chain considerations.
Security Policies and Procedures23:23
Explore security policies and procedures within the NIST cybersecurity framework, focusing on governance, organizational policy, roles and responsibilities, and how standards, guidelines, and processes drive risk management.

NIST Core Review and Protect Function Overview12:39
Awareness & Training21:47
Access Control22:52
Protective Technology - Network25:02
Explore protective technology for networks, including network access control, firewalls, VPNs, DNS, DNSSec, segmentation, and zero-trust concepts, tied to NIST SP800-53r5 controls.
Protective Technology - Systems25:29
Data Security and Encryption24:58
Maintenance21:24
Personnel and Physical Security22:14

NIST RMF Overview & Preparation20:12
Discover the NIST RMF overview and preparation, detailing risk management framework goals and the seven steps: prepare, categorize, select, implement, assess, authorize, monitor, for consistent risk-based security.
A Risk-Based Approach to Security23:33
Define risk with NIST vocabulary and apply a risk-based security approach aligned to the RMF and CIA triad, then outline the SP 800-30R1 risk assessment steps.
The RMF Preparation Step24:28
System Security Plan (SSP)16:54
Identify and document the system with a system security plan (SSP) that inventories hardware and software, defines controls, and supports incident response and minimum security baselines.

Requirements

While no specific prerequisite is mandatory, to effectively engage with and benefit from the NIST Cybersecurity and Risk Management Frameworks course, participants should ideally have a basic understanding of cybersecurity concepts and risk management principles.

Description

In the US, NIST is the de-facto standard for security, compliance and privacy. If you are doing business with the US federal government, manage critical infrastructure, or maintain personally identifiable information (PII), you must be compliant with NIST standards.

NIST provides the Cybersecurity Framework (CSF) and Risk Management Framework (RMF) to guide organizations on securing their infrastructure, systems, and data. In this course, you will apply the NIST Cybersecurity and Risk Management Frameworks to better protect their infrastructure, detect possible cyber incidents and appropriately respond and recover should they occur. You'll become well-versed in the NIST CSF and RMF, how to implement them, and ways to effectively manage CSF & RMF processes for optimal security, privacy and compliance.

This course provides an overview of the NIST Cybersecurity and Risk Management Frameworks and their application. Organizations may require additional industry-specific knowledge and specialized guidance to tailor these frameworks to their unique needs and compliance requirements.

Upon completing the course, participants should have the knowledge and skills necessary to assess, implement, and enhance cybersecurity practices within their organizations using the NIST Cybersecurity and Risk Management Frameworks. They will be equipped to make informed decisions regarding risk management, establish appropriate controls, and respond to cybersecurity incidents in a proactive and efficient manner.

Who this course is for:

The NIST Cybersecurity and Risk Management Frameworks course is relevant to a wide range of individuals and professionals involved in cybersecurity and risk management within organizations.
Information Security Professionals
IT Managers and System Administrators
Risk Managers and Compliance Officers
Cybersecurity Consultants and Auditors
System Developers and Architects
Executives and Decision-makers
Government and Public Sector Professionals
Students and Researchers

NIST Cybersecurity and Risk Management Frameworks

What you'll learn

Explore related topics

Course content

Topic 1:NIST Cybersecurity Overview7 lectures • 2hr 27min

Topic 2: NIST CSF Identify4 lectures • 1hr 39min

Topic 3: NIST CSF Protect Function8 lectures • 2hr 56min

Topic 4: NIST CSF Detect Function3 lectures • 1hr 11min

Topic 5: NIST CSF Respond Function5 lectures • 1hr 50min

Topic 6: NIST CSF Recover Function3 lectures • 1hr 42min

Topic 7: NIST RMF Preparation4 lectures • 1hr 25min

Topic 8: NIST RMF Categorization4 lectures • 1hr 23min

Topic 9: NIST RMF Control Selection5 lectures • 1hr 57min

Topic 10: NIST RMF Control Implementation3 lectures • 1hr 1min

Requirements

Description

Who this course is for: