The two-day NIST Cybersecurity Practitioner course is designed for individuals within an organization who are directly involved in the planning, design, creation, implementation, and or improvement of a cybersecurity program that will follow the principles of the NIST Cybersecurity Framework. Although some aspects of the course are technical this course also includes risk management, business controls, and guidance for a continuous cybersecurity improvement plan.
Pre-requisite(s):
- Individuals should have already taken the NIST Cybersecurity Framework (NCSF) Foundation Training course or have significant experience with the NIST Cybersecurity Framework.
Course Outline:
- Chapter 1: Course Introduction
- Chapter 2: The Components of the NIST Cybersecurity Framework
- Chapter 3: Risk Management in the NIST CSF and NIST RMF
- Chapter 4: Real World Attacks
- Chapter 5: Defense in Depth and the NIST Cybersecurity Framework
- Chapter 6: Assessing Security in the Subcategories
- Chapter 7: Creating a Written Information Security Program
- Chapter 8: A Practitioner’s Deep Dive into Creating or Improving a Cybersecurity Program
- Step 1: Prioritize and Scope
- Step 2: Orient
- Step 3: Create a Current Profile
- Step 4: Conduct a Risk Assessment
- Step 5: Create a Target Profile
- Step 6: Determine, Analyze, and Prioritize Gaps
- Step 7: Implement Action Plan
- Chapter 9: Continuous Cybersecurity Improvement
This course is available for "remote" learning and will be available to anyone with access to an internet device with a microphone (this includes most models of computers, tablets). Classes will take place with a "Live" instructor at the date/times listed below.
Upon registration, the instructor will send along additional information about how to log-on and participate in the class.