ISSO 101

Profile of an ISSO

How Technical Do You Need to Be as an ISSO?

Certs and Degrees for ISSOs

Information System Security Officer (ISSO) Guide (DHS)

I want to know about YOU!

What is RMF?

RMF 101

NIST SP 800-37 r2, Risk Management Framework for Information Systems and Organizations

NIST SP 800-37r1, Guide for Applying the Risk Management Framework to Federal Information Systems (replaced dec 2019)

Risk Management Framework Resources

0_RMF ISSO Intro

1_RMF ISSO Sample Systems

Prepare: Tasks

Prepare: Points of Contact

Prepare: Minutes, Hardware / Software, Diagrams

RMF Prepare 101

Stakeholders POC, Hardware, Software (downloadable)

NIST SP 800-37 Rev 2, Risk Management Framework for Information Systems and Organizations

NIST SP 800-37 Rev 1, Guide for Applying the Risk Management Framework to Federal Information Systems

Security Plan (sample)

RMF ISSO Preparation

Category: System Description

Categorize Quiz 1

Category: Information Type 1: NIST 800-60 Vol 2

Category: Security Category Determined By Impact Level

Categorize Quiz 2

NIST SP 800-60v2r1, Appendices to Guide for Mapping Types of Information and Information Systems to Security Categories

NIST FIPS 199, Standards for Security Categorization of Federal Information and Information Systems

Category: Security Category High Water Mark

Categorize Quiz 3

Concept of Operations Template (downloadable

Category: System Security Plan

NIST SP 800-18 r1, Guide for Developing Security Plans for Federal Information Systems

System Security Plan (downloadable)

NIST 200, Minimum Security Requirements for Federal Information and Information Systems

RMF ISSO Categorize

Select: Intro

Select: Baseline Controls

Select: Tailor Controls

Select: Allocation

Select: Documentation

Select: Monitoring

Select: Approval

NIST SP 800-53 r4, Security and Privacy Controls for Federal Information Systems and Organizations

NIST SP 800-53 r5 (draft), Security and Privacy Controls for Information Systems and Organizations

Example of a System that does RMF - eMASS STEP by STEP

RMF ISSO Selection

Implement: Work with Subject Matter Experts

Implement: DIY Implementation

Implement: Resources

RMF ISSO Implement

Assess: Tasks Intro

Assess: What Happens During Assessments?

Assess: Resources

NIST SP 800-53A r4, Assessing Security and Privacy Controls in Federal Information Systems and Organizations

NIST 800-30 v1, Risk Assessment

RMF ISSO Assess

Authorize

RMF ISSO Authorize

Continuous Monitor

NIST SP 800-137, Information Security Continuous Monitoring

RMF ISSO Monitor

About me

My Resume as a ISSO

How to Contact Me

Cyberwar Mueller Report Cybersecurity (Part 1)

Cyberwar Mueller Report Cybersecurity (Part 2)

RMF ISSO Foundations (Audio only)