NIST/CNSS’s new common foundation for information security/assurance provides the Intelligence Community, Defense, and Civil sectors of the federal government and their supporting contractors, more uniform and consistent ways to manage the risk to operations, assets, individuals, other organizations, and the Nation from the operation and use of information systems. State, local, and tribal governments, as well as private sector organizations that compose the critical infrastructure of the United States, are also highly encouraged by NIST to consider the use of the new and updated guidelines.

The NIST RMF/Security Controls Workshop is intended to serve a diverse group of information system and information security/assurance professionals, both in and supporting all areas of the federal government/DoD and the Intelligence Community including:

Individuals with information system development and integration responsibilities. (e.g., Program Managers, Information
Individuals with information system and security management and oversight responsibilities. (e.g., Authorizing Officials, Chief
Individuals with information system and security control assessment and monitoring responsibilities. (e.g., System Evaluators, Assessors/Assessment Teams, Independent Verification and Validation Assessors, Auditors, Inspectors General, or Information System Owners)
Individuals with information security implementation and operational responsibilities. (e.g., Information System Owners, Common

REGISTER NOW

Questions about our corporate training may be directed to

Training@sss-anc.com

or

(888) 939-4313

Ask about our mobile training capability and training credits—It saves you money!

RMF/Security Controls Workshop Combined

STS Systems Support, LLC (SSS) is pleased to offer a combined Risk Management Framework for DoD Information Technology (RMF for DoD IT) and NIST SP 800-53 Rev. 4 (soon Rev. 5) Security Controls Workshop. This 4-day workshop breaks down the methodology (into steps, tasks, outputs and responsible entities) and includes informative lectures, discussions and exercises. These provide students with a functional understanding of Cybersecurity Risk Management Framework, and the proper selection, implementation and validation of the current Security Controls as outlined in the RMF Knowledge Service and NIST SP 800-53 Rev.4 (soon Rev. 5) security controls.

Course Description

This course is for personnel who must understand, implement, maintain, address and transition to the new NIST SP 800-53 Rev. 4 (soon Rev. 5) security controls. It will ensure a complete understanding of the NIST Risk Management Framework (RMF) / Security Authorization Process (SAP), NIST, and how the Office of the Director of National Intelligence (ODNI), the Department of Defense (DOD), and the Committee on National Security Systems (CNSS), has established a common, FISMA compliant, foundation for information security/assurance across the entire federal government.

The NIST C&A (now A&A) process (NIST SP 800-37) has been revitalized (integrated into NIST’s RMF) and totally transformed into a “near real time risk management” process, based on continuous Information System monitoring – fully integrating the new SAP.

This workshop starts with the RMF Six Step Process and builds the students NIST RMF/SAP knowledge base. The course follows the Six Step RMF Methodology and begins integrating the Security Controls once the student understands the RMF. The blend of lecture and hands-on exercises is continued to provide the student with highly detailed information concerning the NIST SP 800-53, Rev. 4 (soon Rev. 5), CNSSI 1253 security control selection and specification process and the guidance/activities necessary to translate the security controls identified in the Information System’s Security Plan into an effective implementation.

The students will be provided with detailed information concerning the NIST SP 800-53A, Rev. 1 process of assessing the security controls in federal information systems and organizations (including the development of Security Assessment Plans and full coverage of the “Program Management (PM)” family of security controls).

Duration: 4-days

Cost of Course: $2,300.00 per student (Government Rates, Volume Rates, and Training Credits are available)

Materials Required: Laptops must have a Web browser, Adobe Acrobat Reader (free version), Excel, and Word. Resource CDs are provided via download and CDs for students attending the course, for in-class work, as well as supplemental materials.

NOTE: All SSS training locations have appropriately configured laptops for each student to use during class.

Course Materials Provided: Students will receive a workbook (to include instructional slides) and a Resource CD (that includes supporting materials and exercises).

Instructor Policy: Students should arrive no later than 10 minutes prior to start time on the first day of class. If you have any special requirements that need to be addressed prior to arrival, please let us know at the time of registration. Please do not make any travel arrangements prior to 5pm (local time) on the last day of training.

Locations: We offer this course in San Antonio, TX as well as mobile training at your facility for up to 15 students per course. Contact us at Training@sss-anc.com or (888) 939-4313 for details, pricing and availability for mobile training options.

Course Topics

NIST RMF/Security Controls Workshop (4-days) Combined

(

A

Module 1: Introduction/Review
- RMF Purpose & Applicability
- RMF Transition from DIACAP
- RMF DOD Policies
- RMF DOD Responsibilities
- RMF DOD Governance Review
- The RMF Steps – Review
- Q&A/End of Module 1 Exercise
Module 2: Reference and Policy Drivers
- RMF Knowledge Service and NIST Resources
- Security Authorization Documentation
- Security Reciprocity for DOD
- RMF Governance for DOD and Federal
- Q&A/End of Module 2 Exercise
Module 3: In Depth Look at the Steps and Tasks
The RMF Methodology
- Categorize System
- Select Security Controls
- Implement Security Controls
- Q&A/End of Module 3 Exercise
Module 4: The Security Controls
- Security Control Structure
- Security Control Baselines
- Security Control Designations
- Tailoring Baseline Security Controls
- Control Implementation Tips
Module 5: In Depth Look at the Steps and Tasks
- Social motivation as it relates to STIG’s/SCAP
- Influence strategies as they relate to STIG’s/SCAP
- Key concepts on improving efficiencies in RMF process
- Course wrap up
- Q&A/EOC Exercise
Implementing the Security Controls
(Students will use Modified SP 800-53 Workbook)
- The PM Controls
- The Dash-1 Controls
- The Privacy Controls
- The AC Controls
- The AU Controls
- The AT Controls
- The CA Controls
- The CM Controls
- The IA Controls
- The SC Controls
- The SI Controls
- The Rest of the Security Control Families

STS Systems Support 1826 N Loop 1604 W, Suite 336A San Antonio, TX 78248

STS Systems Support is a Bristol Bay Native Corporation Company

Phone: (210) 892-3511 Fax: (210) 892-3522 www.sss-anc.com

CAGE: 7S2T6 DUNS: 08-0448-7230 Tax ID: 81-4325845