A comprehensive guide to the NIST Risk Management Framework (RMF), covering the seven-step process, security categorization, control selection, assessment, authorization, and continuous monitoring.
Chapters
NIST SP 800-37 RMF Overview
20 min read
Step 1: Prepare the Organization
25 min read
Step 2: Categorize the Information System
20 min read
Security Categorization: FIPS 199 and NIST SP 800-60
22 min read
Step 3: Select Security Controls
25 min read
NIST SP 800-53 Control Catalog Deep Dive
20 min read
Tailoring and Scoping Security Controls
18 min read
Step 4: Implement Security Controls
20 min read
Documenting System Security Plans
15 min read
Step 5: Assess Security Controls
22 min read
Assessment Methods and NIST SP 800-53A
25 min read
Managing Findings and Plan of Action and Milestones
18 min read
Step 6: Authorize the System
20 min read
Understanding Authorization Packages and Risk Acceptance
15 min read
Step 7: Monitor Security Controls
20 min read
Continuous Monitoring Strategies
22 min read
Automation in RMF and GRC Tools
15 min read
Advanced Compliance and Regulatory Overlaps
20 min read
Career Roadmap: Becoming an RMF Practitioner
12 min read