|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/fismacompliance/
课程评论：没有评论
课程名称：初学者的NIST风险管理框架（RMF） 课程概述：在这门课程中，我将教授风险管理框架（RMF），帮助您完成安全评估与授权流程（常称为系统 A & A）。如果您对这些术语不熟悉，不用担心，本课程将对其进行详细解析。我专注于初学者，因为我曾经也是初学者。在正式进入FISMA合规性之前，第一章将让您了解一些基础的IT概念，帮助您理解企业网络及其支持要素。接下来，我将指导您如何起草系统安全计划（SSP），评估SSP，记录计划行动及里程碑（POA & M），并提交授权包。这些都是完成RMF过程的关键组成部分。 本课程的教学采用真实工作环境模拟，您将作为安全分析师与我共同参与我们的系统A & A项目。我认为这种方式是帮助您掌握课程内容的最佳途径。由于我们涉及安全合规性，有时课程可能会感到单调，因此我会偶尔加入一些笑话，以保持您的警觉与兴趣。有些人称我的笑话为冷笑话，有些称为“爸爸笑话”，我觉得它们很有趣！您来评判。好了，废话不多说，让我们开始工作吧。系好键盘，我们要出发去FISMA！
In this course, I will teach you the Risk Management Framework (RMF). My goal is to show you how to complete a security Assessment and Authorization process (also known as system A & A). If you don't know what all those terms mean, don't worry, we will break it all down in this course. I like to cater to beginners, because well… I used to be one. So before we get into FISMA compliance, chapter 1 will teach you some foundation IT concepts. I do this by getting you to understand what an enterprise network is and what is takes to support one. After that I'm going to show you how to draft an System Security Plan (SSP), How to assess the SSP, document your POA & M and submit your authorization package. These are key components to completing the RMF process.This course is taught from a true to life approach. That means that I put you in a simulated work environment where you're the security analyst working with me on our system A & A project. I did this because I think that's the best way for you retain the information you will learn in this course. Oh! And since we're dealing with security compliance, it can start to feel a bit monotone at times, so I try to throw in a few jokes here and there to make sure you're alert and keeping up. Some people call my jokes corny, others call them dad jokes. I call them funny! You be the judge. Ok, enough talking let's get to work. Fasten your keyboard, we're blasting off to FISMA!
