Every federal information system that reaches production gets there through the NIST Risk Management Framework. This foundational course follows that framework end to end as NIST SP 800-37 defines it, tying each stage back to the risk decision it exists to inform.
Beginning with the fundamentals of risk and governance, participants work through all seven RMF steps — Prepare, Categorize, Select, Implement, Assess, Authorize, and Monitor — and close with an integrated capstone that traces a single system across the whole sequence. No prior authorization experience is assumed; the class exists to establish the shared vocabulary and mental model that the rest of the RMF track builds on. Sessions run live with an instructor, so questions can be raised as each step is introduced.
