RMF 2.0 Workshop (online)

This online workshop is approximately 12 hours in length and will cover the latest National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37 REV 2  "Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy." We will review other NIST 800 series documents that have been updated (800-53 rev 5, 800-53A, 800-160 v1, and 800-160v2).  This workshop will include comprehensive overviews of System Security Plans (SSPs), System Security Engineering (SSE), Security Assessment Planning, and Plan of Action and Milestone (POA&M) management.

Mrs. Williams uses her experience working in the Department of Defense (DoD) as a government contractor for 17 years to explain how each step affects not only security professionals and system owners, but also project management, system development, and organizational risk tolerance.