NIST Cybersecurity Framework (NCSF) Practitioner Training Courseware (NCSF-PRACTITIONER)

MODULE 1: COURSE INTRODUCTION

Provides the student with information relative to the course, conduct of the course in the virtual classroom, and course materials.

MODULE 2: APPLYING NIST CSF TIERS AND PROFILES

1. Review of the NIST CSF Major Components
2. Tiers and Tier selection
3. Current and Target Profiles and the Framework Core

MODULE 3: AN EXPLORATION OF INFORMATIVE REFERENCES

1. Defining the major Informative References
2. CIS Controls v8
3. ISO/IEC 27001:2013
4. NIST SP 800-53 Rev. 5

MODULE 4: RISK MANAGEMENT IN THE NIST CSF AND NIST RMF

1. Risk Management in the NIST Cybersecurity Framework
2. Analyzing the NIST Risk Management Framework
   1. Introduction and History
   2. Purpose, Design, and Characteristics
   3. Seven Steps
      1. Prepare
      2. Categorize
      3. Select
      4. Implement
      5. Assess
      6. Authorize
      7. Monitor
3. Integrating the Frameworks

MODULE 5: UNDERSTANDING AND DEFENDING AGAINST REAL WORLD ATTACKS

1. Major Cybersecurity Attacks and Breaches
2. MITRE ATT&CK Matrices
3. Defense in Depth and the NIST CSF
4. Security Operations Center (SOC) activities and Security Information and Event Management (SIEM) solutions in relation to the NIST CSF

MODULE 6: ASSESSING SECURITY IN THE SUBCATEGORIES

1. Creating an Assessment Plan
2. Assigning Roles and Responsibilities
3. Tiers, Threats, Risks, Likelihoods, and Impact

MODULE 7: CREATING A WRITTEN INFORMATION SECURITY PROGRAMS (WISP)

1. The Intersection of Business and Technical Controls
2. What is a Written Information Security Program (WISP)?
3. Creating a WISP Template
4. Aligning Current Profile with a WISP

MODULE 8: A PRACTITIONER’S DEEP DIVE INTO CREATING OR IMPROVING A CYBERSECURITY PROGRAM

1. Step 1: Prioritize and Scope
   1. Identifying organizational priorities
   2. Aiding and influencing strategic cybersecurity implementation decisions
   3. Determining scope of the implementation
   4. Planning for internal adaptation based on business line/process need
   5. Understanding risk tolerance
2. Step 2: Orient
   1. Identifying systems and applications which support organizational priorities
   2. Working with compliance to determine regulatory and other obligations
   3. Planning for risk responsibility
3. Step 3: Create a Current Profile
   1. Cybersecurity Assessment options
   2. How to measure real world in relation to the Framework
   3. Qualitative and quantitative metrics
   4. Current Profile and Implementation Tiers
4. Step 4: Conduct a Risk Assessment
   1. Risk assessment options (3rd party vs internal)
   2. Organizational vs. system level risk assessment
   3. Risk assessment and external stakeholders
5. Step 5: Create a Target Profile
   1. Target Profile and Steps 1-4
   2. External stakeholder considerations
   3. Adding Target Profiles outside the Subcategories
6. Step 6: Determine, Analyze, and Prioritize Gaps
   1. Defining and determining Gaps
   2. Gap analysis and required resources
   3. Organizational factors in creating a prioritized action plan
7. Step 7: Implement the Action Plan
   1. Implementation team design from Executives to Technical Practitioners
   2. Assigning tasks when priorities conflict
   3. Considering compliance and privacy obligations
   4. Taking action
   5. Reporting and reviewing

MODULE 9: CONTINUOUS CYBERSECURITY IMPROVEMENT

1. Creating a continuous improvement plan
2. Implementing ongoing assessments