In this course, I will teach you the Risk Management Framework (RMF). My goal is to show you how to complete a security Assessment and Authorization process (also known as system A&A). If you don’t know what all those terms mean, don’t worry, we will break it all down in this course.

I like to cater to beginners, because well… I used to be one. So before we get into FISMA compliance, chapter 1 will teach you some foundation IT concepts. I do this by getting you to understand what an enterprise network is and what is takes to support one.

After that I’m going to show you how to draft an System Security Plan (SSP), How to assess the SSP, document your POA&M and submit your authorization package. These are key components to completing the RMFprocess.

This course is taught from a true to life approach. That means that I put you in a simulated work environment where you’re the security analyst working with me on our system A&A project. I did this because I think that’s the best way for you retain the information you will learn in this course.

Oh! And since we’re dealing with security compliance, it can start to feel a bit monotone at times, so I try to throw in a few jokes here and there to make sure you’re alert and keeping up. Some people call my jokes corny, others call them dad jokes. I call them funny! You be the judge.

Ok, enough talking let’s get to work. Fasten your keyboard, we’re blasting off to FISMA!