Handling risk is one of the chief goals of organizations, mainly in the InfoSec program. Risk management delivers the vehicle for the balance between compliance and security. Businesses need to defend their data by launching and upholding an operational risk management platform. Organizations must considered their environment, resources, threats, and sensitivity of their data. In this book, you will learn the fundamentals of risk management with security, and how to deploy the RMF to efficiently deal with compliance and risk within your business.
You will learn: • Compliance, Security, Risk • How to be Compliant and Secure • Introduction to Risk Management Framework • Introduction to the NIST Special Publications • Introduction to the RMF Publications • Understanding the Cybersecurity Framework • Comprehending the CSF Construction • Comprehending the CSF Tiers and Profiles • Essential RMF Concepts • Understanding Risk Tiers • Understanding Systems and Authorization • Introduction to Roles and Responsibilities • Comprehending Security and Privacy in the RMF • How to prepare for RMF • How to prepare for Organization-level Tasks • How to prepare for System-level Tasks • How to Categorize Information Systems • Comprehending RMF Categorization Tasks • Understanding Categorizing Systems • How to Select Security Controls • How to Select Controls and Baselines • How to Implement Security Controls • How to Implement Controls • How to Assess Security Controls • Understanding RMF Assess Tasks • How to Assess Systems • How to Authorize Information Systems • How to Monitor Security Controls • How to Monitor Tasks • How to Monitor Systems
