NIST Risk Management Framework (RMF) Steps - RMF 7 Steps

[@RohanShah-iv8xv]

I must say that this is the only video that will give you clear picture of 7 Steps of RMF.

[@Youonlyloseyourself]

Live this video. One month into being introduced to this I gained the confidence and applied for a ISSO position to do RMF and the interview was technically incline with all the categories you explain here.
All questions were asked based on SSP and all steps and roles and responsibilities.

[@bisharohashi822]

Any advice you can give on what to study for the interview questions?

[@Youonlyloseyourself]

@@bisharohashi822 I’d suggest that if you’re going for a position totally situated with ATO Authority to operate just study the NIST RMF

[@irineajebe2864]

Thanks, sir for breaking down the 7 steeps of RMF this has always being my challenge but with this video, you make it easier for me to understand each steep.

[@mayfaira9592]

Oh my goodness, you’re a very great teacher. 👏👏

[@SunShinepkg]

you did JUSTICE to RMF steps!

[@samilonaire290]

This gave me the clear understanding of the steps of RMF

[@endamfom1]

Thanks a lot this has been very insightful

[@chinygodfrey7408]

Wow! you did a great presentation of RMF and it's steps. Kudos to you 👍👏👏👏👏

[@TighTechConsult]

Thank you

[@sethayensu8111]

I am really enjoying this presentation

[@TighTechConsult]

Thank you

[@RenzoGoodlow]

Thank you 🙏🏿 great explanation.

[@Fineghang8768]

Wow thank you very much for the information

[@TighTechConsult]

Thanks to you too for the support

[@kahmildreth8571]

Thank you Sir.
Your explanations are very simple and direct. Making it easy to follow ❤

[@LoveYa17]

Thank u 🙏🏾

[@hopehope5314]

Thanks a lot for this video

[@fatimahsodiq2494]

Well explained, thank you.

[@ChristinUs1]

Thanks a lot

[@faboge]

very nice!

[@nanaabaasarewanaomi7646]

Thanks very much.👍👍

[@madysapien]

Very helpful.Thank you.👍

[@TighTechConsult]

You are welcome

[@evakapche]

Do you still teach? Where are you located?

[@moses-j5703]

So Mr Emanuel in a job interview if you are ask to explain the RMF steps can I used this lessons to explain to a job interviewer

[@TighTechConsult]

Yes you can use this video to explain to job interviewers.

[@moses-j5703]

@@TighTechConsult thank you very much sir

[@magnus5316]

I have to know impact level to know security code to select

[@tonqatresor8177]

Hi Mr Emmanuel, thanks for sharing but where can I get a copy of what you just explained in that video?

[@TighTechConsult]

You need to pay to get the copy.
[e-mail]
[phone]

[@christianihendu7438]

Thank you for the breakdown on 7 rmf steps according to NIST SP 800- 37 Rev 2
I will like to know if we also conduct risk assessment during the prepare step?

[@oliviangwa3473]

Hi, I have been looking for the assessment video and couldn't find it. But its like Assessment is done by the Assessor and not the ISSO

[@Sikamore1]

How much is it to get this ( RMF

[@simp1eone]

Sir please i think you did not mention document to review for AUTHORISE step - what NIST number

[@TighTechConsult]

NIST SP 800-37 Rev 2

[@magnus5316]

After categorizing you didn’t say selection of high impact

[@ruel1072]

I would add "impact of loss of the information in regards to confidentiality, integrity, and availability".

[@TighTechConsult]

I don't understand what you mean.

[@ruel1072]

@@TighTechConsult Sir, categorization of information is based solely on impact of the loss of confidentiality, integrity, and availability. Once you establish the kind of information an organization is using for its business (e.g. NIST SP 800-60), FIPS 199 can further assist in categorizing the information based on consequences if the organization were to compromise the data's confidentiality, integrity, and availability. Categories are Low, Moderate, and High. Once these are determined, NIST SP 800-53 and FIPS 200 can help with security control selection based on the impact of the compromise of data as stated above. Based on the impact, FIPS 200 lists 17 families of controls. These families are further broken down into many subcategories of controls listed in NIST 800-53.

[@ruel1072]

@@TighTechConsult If you see Appendices D and F in NIST SP 800-53 (Rev 4), you'll notice every security control will have corresponding impacts of "Low, Moderate, and High". As mentioned, these corresponding impacts (categories) are based off the loss of confidentiality, integrity, and availability.

[@TighTechConsult]

@@ruel1072 according to NIST 800-53 Rev 5, there are now 20 Control families. Please check out my other videos on that.

[@TighTechConsult]

@@ruel1072 I have videos on that, Please check them out.