The IELTS Co-Owner Lost 94% of Its Value. The Reason: Visas.

Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Graduate School USA

FISMA & Continuous Monitoring Fundamentals Course

via Graduate School USA

Go to class Write review

Overview

An authorization to operate marks a beginning, not an ending. Federal systems have to be watched continuously, with weaknesses tracked and risk reported up to leadership on a standing basis. This intermediate course pairs the statutory accountability FISMA establishes with the day-to-day practice of Information Security Continuous Monitoring as laid out in NIST SP 800-137.

Participants design an ISCM strategy, put in place the asset, configuration, and vulnerability visibility that monitoring rests on, work findings through POA&Ms, and build the metrics and reporting that make ongoing authorization possible. A capstone brings those pieces together into a functioning continuous monitoring program.

Syllabus

Module 1: FISMA Governance, Accountability, and Risk Oversight

  • Examine the statutory foundation of FISMA and the roles responsible for cybersecurity governance, accountability, and risk oversight.

Module 2: Designing an ISCM Strategy

  • Develop an information security continuous monitoring strategy aligned with NIST Special Publication 800-137.

Module 3: Asset, Configuration, and Vulnerability Visibility

  • Review the asset, configuration, and vulnerability data needed to support effective continuous monitoring.

Module 4: Control Monitoring, Assessment, and Evidence Management

  • Maintain current control assessments and supporting evidence throughout the system lifecycle.

Module 5: Security Metrics, Analysis, and Risk Reporting

  • Convert monitoring data into meaningful security metrics, analysis, and risk reporting for decision-makers.

Module 6: Findings, POA&Ms, and Risk-Based Response

  • Manage identified weaknesses through Plans of Action and Milestones and prioritize corrective actions based on risk.

Module 7: Ongoing Authorization and ISCM Program Evaluation

  • Explore how continuous monitoring supports ongoing authorization and evaluate the effectiveness of an ISCM program.

Module 8: Building a Continuous Monitoring Program Capstone

  • Design an end-to-end continuous monitoring program that integrates strategy, data collection, assessment, reporting, and risk response.

Taught by

Wes Bryan and Chuck Moore

Reviews

Start your review of FISMA & Continuous Monitoring Fundamentals Course

Go to class

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.