risk management framework (RMF) training

Updated: November 4, 2024

This class has been updated to reflect the CGRC exam domain changes effective June 15, 2024.

Test Pass Academy has expert security instructors that have been doing Risk Management Framework (RMF) training since it first came out. Our security instructors are well known in the industry not only as top level instructor's with rave reviews, but also as top level security professionals who pass along real world examples to the class. This 3 day bootcamp also offers an add-on feature of taking the (ISC)² Certified in Governance, Risk and Compliance (CGRC) exam — formerly known as the Certified Authorization Professional. Our experts have a vast understanding of security and a remarkable teaching ability making it easy to understand RMF and PASS the CGRC Exam on the 1st attempt. Our 3 day Risk Management Framework bootcamp will provide you with a fast proven method for mastering all domains as defined by the National Institute of Standards and Technology (NIST). If you are looking to gain RMF knowledge and pass the CAP exam, you found the right place. This 3 day bootcamp is geared for the Government, Military and Contractors seeking 8570 compliance.

3 Day Risk Management Framework (RMF) Bootcamp: Train-Test-Pass!

Upon completion of the RMF Course, you will demonstrate competence and learn to master:

• DoD and Intelligence Community specific guidelines, Key concepts including assurance, assessment, authorization, Security controls
• Cybersecurity Policy Regulations and Framework Security laws, policy, and regulations, DIACAP to RMF transition, ICD 503, CNSSI-1253, SDLC and RMF, Documents for cyber security guidance
• RMF Roles and Responsibilities, Tasks and responsibilities for RMF roles, DoD RMF roles
• Risk Analysis Process DoD organization-wide risk management, RMF steps and tasks, RMF vs. C&A
• Categorize Step 1 key references Sample SSP: Security Categorization, Information System Description, Information System Registration Registering a DoD system
• Select Step 2 key references: Common Control Identification, Select Security Controls, Monitoring Strategy, Security Plan Approval, Select Security Controls
• Implement Step 3 key references: Security Control Implementation, Security Control Documentation, Implement Security Controls
• Assess Step 4 key references About Assessment: Assessment Preparation, Security Control Assessment, Security Assessment Report, Remediation Actions, Assessment Preparation
• Authorize Step 5 key references: Plan of Action and Milestones, Security Authorization Package, Risk Determination, Risk Acceptance, Authorizing Information Systems
• Monitor Step 6 key references: Information System and Environment Changes, Ongoing Security Control Assessments, Ongoing Remediation Actions, Key Updates, Security Status Reporting, Ongoing Risk Determination and Acceptance, Information System Removal and Decommissioning Continuous Monitoring Security Automation, Monitoring Security Controls
• RMF for DoD and Intelligence Community, eMASS, RMF Knowledge Service, DoD 8510.01, DFAR 252.204-7012, ICD 503, CNSSI-1253, FedRAMP, RMF within DoD and IC process review

Note: NIST has officially released NIST 800-37 Rev 2 and named it as "RMF 2.0." Our class is up to date with the new changes.