Course Objectives

1. Understanding the Landscape: NIST CSF and Control Criticality

• We kick off by exploring the Federal Information Processing Standard (FIPS) 199. This standard categorizes federal information and information systems based on their impact on confidentiality, integrity, and availability. We’ll delve into the three security objectives:

• Confidentiality: Protecting against unauthorized disclosure.

• Integrity: Safeguarding data from unauthorized modification.

• Availability: Ensuring timely access to information.

• Additionally, we’ll discuss control criticality, which assigns security categorization based on the potential impact on agency operations, assets, and individuals.

2. Crafting Policies, Standards, and Procedures

• Our course provides step-by-step guidance on creating robust cybersecurity documents:

• Policies: High-level statements that set the tone for security practices.

• Standards: Specific requirements and guidelines for implementation.

• Procedures: Detailed instructions for executing security tasks.

• We’ll emphasize clarity, consistency, and alignment with industry best practices.

3. Templates and Examples

• Participants gain access to downloadable templates for each document type. These templates are customizable, ensuring relevance to your organization.

• Real-world examples illustrate how to adapt the templates to various scenarios.

4. Expert Insights and Examples

• The seasoned cybersecurity professional instructor shares practical insights and lessons learned.

• The instructor highlights successful implementations and pitfalls to avoid.