-
FISMA Compliance RMF STEP 1-3 44
-
FISMA – Course introLecture1.1
-
FISMA – Into to FISMA Compliance 06 minLecture1.2
-
FISMA – Intro to FISMA Compliance Quiz 10 questionsQuiz1.1
-
FISMA – RMF step 1: Security Categorization Part 1 05 minLecture1.3
-
FISMA – Security Categorization Quiz 1 10 questionsQuiz1.2
-
FISMA – RMF step 1: Security Categorization Part 2 07 minLecture1.4
-
FISMA – Security Categorization Quiz 2 10 questionsQuiz1.3
-
FISMA – Security Categorization Part 3 05 minLecture1.5
-
FISMA – Security Categorization Quiz 3 10 questionsQuiz1.4
-
FISMA – System and Technical Description Part 1 05 minLecture1.6
-
FISMA – System and Technical Description Quiz 1 10 questionsQuiz1.5
-
FISMA – System and Technical Description Part 2 05 minLecture1.7
-
FISMA – System and Technical Description Quiz 2 10 questionsQuiz1.6
-
FISMA – RMF step 2 : Select Security Controls 05 minLecture1.8
-
FISMA – Select Security Controls Quiz 10 questionsQuiz1.7
-
FISMA – RMF Step 3 – Implement Security Controls 05 minLecture1.9
-
FISMA – Implement Security Control Quiz 10 questionsQuiz1.8
-
FISMA – Pep Talk and Intro to simulations 05 minLecture1.10
-
FISMA – SSP Pep talk Quiz 10 questionsQuiz1.9
-
FISMA – Simulation: Editing the Cover Page 06 minLecture1.11
-
FISMA – Cover Page Simulation Quiz 10 questionsQuiz1.10
-
FISMA – Simulations: Security Categorization 06 minLecture1.12
-
FISMA – Security Categorization Simulation Quiz 10 questionsQuiz1.11
-
FISMA – Digital Identity Part 1 06 minLecture1.13
-
FISMA – Digital Identity Quiz 1 10 questionsQuiz1.12
-
FISMA – Digital Identity Part 2Lecture1.14
-
FISMA – Digital Identity Quiz 2 10 questionsQuiz1.13
-
FISMA – Digital Identity Part 3Lecture1.15
-
FISMA – Digital Identity Quiz 3 10 questionsQuiz1.14
-
FISMA – Simulation: Digital IdentityLecture1.16
-
FISMA – Digital Identity Simulation Quiz 10 questionsQuiz1.15
-
FISMA – Simulation: POCLecture1.17
-
FISMA – Simulation: General System Description and User Types 06 minLecture1.18
-
FISMA POC to User Type Simulation Quiz 10 questionsQuiz1.16
-
FISMA – Simulation: Network Architecture, Environment and Inventory 05 minLecture1.19
-
FISMA Architecture to Inventory Simulation Quiz 10 questionsQuiz1.17
-
FISMA – Simulation: System interconnection, Laws and regulations 06 minLecture1.20
-
FISMA – Interconnection and Laws Simulation Quiz 10 questionsQuiz1.18
-
FISMA – Simulation: RMF step 2 – Selecting Controls 04 minLecture1.21
-
FISMA – Selecting Controls Simulation Quiz 10 questionsQuiz1.19
-
FISMA – Simulation: RMF Step 3 – Implementing Security Controls Part 1 04 minLecture1.22
-
FISMA – Implementing Security Controls Simulation Quiz 1 10 questionsQuiz1.20
-
FISMA – Simulation: Implementing Security Controls Part 2Lecture1.23
-
FISMA – Implementing Security Controls Simulation Quiz 2 10 questionsQuiz1.21
-
-
FISMA Compliance RMF STEPS 4-5 25
-
FISMA – RMF Step 4: Assessing Security Controls 10 minLecture2.1
-
FISMA – Assessing Security Controls – Quiz 1 10 questionsQuiz2.1
-
FISMA – Security Assessment Report (SAR) Part 1 13 minLecture2.2
-
FISMA – SAR Quiz 1 10 questionsQuiz2.2
-
FISMA – Security Assessment Report Part 2 10 minLecture2.3
-
FISMA – SAR Quiz 2 10 questionsQuiz2.3
-
FISMA – RMF Step 5: Authorize the Information System 08 minLecture2.4
-
FISMA – System Authorization Quiz 10 questionsQuiz2.4
-
FISMA – RMF Step 5 & 6 – System Authorization and Continuous Monitoring 10 minLecture2.5
-
FISMA – RMF Steps 5 & 6 Quiz 10 questionsQuiz2.5
-
FISMA – Simulation – Introductions and Preparation for the Assessment 10 minLecture2.6
-
FISMA – Preparation for the Assessment Quiz 10 questionsQuiz2.6
-
FISMA – Security Assessment Kick-Off Meeting Demo 10 minLecture2.7
-
FISMA – Kick Off meeting Quiz 10 questionsQuiz2.7
-
FISMA – Simulation: Completing the SAR 10 minLecture2.8
-
FISMA – SAR Simulation Quiz 1 10 questionsQuiz2.8
-
FISMA – Simulation – completing the SAR part 2 10 minLecture2.9
-
FISMA – SAR Simulation Quiz 2 10 questionsQuiz2.9
-
FISMA – Simulation: POA&M Reports Review Part 1 10 minLecture2.10
-
FISMA – POA&M Reports Review Simulation Quiz 1 10 questionsQuiz2.10
-
FISMA – Simulation: POA&M Reports Review Part 2 10 minLecture2.11
-
FISMA – POA&M Reports Review Simulation Quiz 2 10 questionsQuiz2.11
-
FISMA – Simulation: Authorize System and Receive ATO 10 minLecture2.12
-
System Authorization Quiz 10 questionsQuiz2.12
-
FISMA – ATO Completion – Pep Talk! 10 minLecture2.13
-
This content is protected, please login and enroll course to view this content!
6 Comments
I can’t place/see the listed information types. could it be listed so I can use it in my ssp
thanks
Hi,
the SSP that you’re drafting should be an SSP of your home network. so you shouldn’t need the DOP information type. You will need to create your own information types. Examples of information typed that you can use is listed in the NIST 800-60.
okay, thanks
hello Paul,
I would rather if I had a list of the information types though, this gives me a better scenario of a work base, using my home network would give me too much freedom (if that makes sense)
Also I noticed in your SSP you used only the information titles, those this mean we can’t pin to an actual type say for example: Help Desk service (just trying to understand things better)
thanks
hello Paul,
I would rather if I had a list of the information types though, this gives me a better scenario of a work base, using my home network would give me too much freedom (if that makes sense)
Also I noticed in your SSP you used only the information titles, those this mean we can’t pin to an actual type say for example: Help Desk service (just trying to understand things better)
thanks
Hi,
What do you mean by having a list of the information types? its all listed on nist 800-60v2r1. below is a link to the referenced document. the list is on page 2, 3 and 103 (for classified systems).
Are you suggesting i tell you what your information types are? you are the system owner so you should be able to creatively come up with your own information types.
As for me not using the NIST recommended information types in the example in the video, you;re right, i should have. to make things more clear. But in my defense, NIST 800-60 is a recommendation not a requirement 🙂 I’ll improve this part when i revise the video.
thanks!
https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-60v2r1.pdf