RMF Half-Day Workshop (BSides)

This workshop is approximately 4 hours in length and will cover the first three steps (Categorize, Select, and Implement) the latest National Institute of Standards and Technology (NIST) Special Publication (SP) 800-37 REV 2  "Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy." We will review other NIST 800 series documents that have been updated (800-53 rev 5, 800-53A, 800-160 v1, and 800-160v2).  This workshop will include comprehensive overviews of System Security Plans (SSPs), System Security Engineering (SSE), and Plan of Action and Milestone (POA&M) management.

Mrs. Williams uses her experience working in the Department of Defense (DoD) as a government contractor for 18 years to explain how each step affects not only security professionals and system owners, but also project management, system development, and organizational risk tolerance.

4.0 CPE

Lunch is included