|
所在平台: Coursera |
课程主页: https://www.coursera.org/learn/nist-800-171
课程评论：没有评论
课程名称：NIST 800-171 概述：NIST SP 800-171 是由美国国家标准与技术研究所（NIST）发布的网络安全框架，包含 110 项控制措施，分为 14 个类别。本学习路径将教您如何遵守 NIST 800-171 的要求。您将了解什么是受控未分类信息（CUI），如何识别它；什么是非联邦信息系统；如何理解框架中的每一项 110 条要求，并根据需要满足这些要求；如何创建证据材料（BOE），包括组织政策或程序；系统安全计划（SSP）和行动计划与里程碑（POAM）。完成本课程后，您将具备实施 NIST 800-171 框架所需控制措施的知识和技能，并能够构建您的证据材料。 课程大纲： 1. 复习导致 NIST 800-171 的 DFARS 要求 2. 理解 NIST 800-171 控制措施 3. 理解并创建政策和计划 4. 为已实施的控制措施创建 SSP 5. 为未实施的控制措施创建 POAM 6. 回顾 NIST 800-171 合规性如何为组织准备 CMMC 1-3 级 7. 整合所学内容 此课程将为希望深入了解网络安全控制措施及其实施的学员提供实用的知识和技能。
Name:Review the DFARS Requirement that led to NIST 800-171
Description:
Name:Understanding the NIST 800-171 Controls
Description:
Name:Understand and Create Policies and Plans
Description:
Name:Create and SSP for Implemented Controls
Description:
Name:Create a POAM for Unimplemented Controls
Description:
Name:Review how NIST 800-171 compliance prepares an org for CMMC Levels 1-3
Description:
Name:Putting it all together
Description:
NIST SP 800-171 is a cybersecurity framework of 110 controls in 14 families published by the National Institute of Standards and Technology (NIST). This learning path will teach you how to comply with the requirements of NIST 800-171. You will understand what CUI is and how to identify it; what a nonfederal information systems is; how to understand each of the 110 requirements in the framework and satisfy each of them if necessary; how to create a Body of Evidence (BOE) including Organizational Policy or Procedures; a System Security Plan (SSP) and Plans of Action and Milestones (POAM). Upon completion of this course, you will have the knowledge and skills to implement the controls required by the NIST 800-171 framework and build your BOE.
