|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/keep-the-risk-management-framework-simple/
课程评论：没有评论
课程名称：简单理解NIST风险管理框架 概述：本课程通过一个简单的情境——为我的父母购买一台新电脑，展示风险管理框架（RMF）的实际应用和简易性。课程旨在以非技术性语言解释RMF。无论是为支持数百万美元公司的网络规划安全，还是决定如何保护刚购买的新家，基本的安全概念和原则都是相似的。虽然我们的家庭示例通常没有企业模型那么结构化（除非你非常细致），但自从第一个人类发现木棒的价值以来，安全的基本方法并没有改变。 在这个情境中，我们将覆盖风险管理的概念以及六个RMF步骤： 1. 对信息和系统相关的风险进行分类。 2. 选择适当的安全控制措施以将风险降低到可接受水平。 3. 实施所选择的控制措施。 4. 评估已实施的控制措施。 5. 授权系统使用。 6. 持续监测控制措施，以确保其有效地缓解风险。 因此，请忘记您可能已经学到的关于RMF、NIST 800-53以及其他技术术语的内容，和我一起踏上为我父母购买新电脑的冒险之旅吧！
This scenario is a simple example of me purchasing a new computer for my parents to demonstrate the practical application and simplicity of the Risk Management Framework (RMF). The aim is to explain RMF in a non-technical manner.Whether we are planning the security for a network that supports a multi-million dollar corporation or deciding how to secure the new home we just purchased, the fundamental security concepts and principles are very similar. Even though our home example is typically not as structured (unless you are really meticulous) as a business model, the fundamental approach to security has not changed since the first caveman discovered the value of a wooden club and another caveman wanted it!Throughout the scenario, we will cover the concepts of Risk Management as well as each of the six RMF Steps:Categorize the risks associated with the information and the system.Select the appropriate security controls to mitigate risks to an acceptable level.Implement the selected controls.Assess the implemented controls.Authorize the system for use.Continuously monitor the controls to ensure they effectively mitigate risks.So, forget anything you may have already learned about RMF, NIST 800-53, and most of the other technical jargon, and join me in this adventure of buying a new computer for my parents!
