Risk management is a key element in any organization’s information security and privacy program. The National Institute of Standards and Technology (NIST) provides a Risk Management Framework (RMF) that outlines a process for effectively managing organizational risk. In this course, learn how to implement the NIST RMF to help your organization categorize and effectively manage your security and privacy program throughout the system management lifecycle. Instructor Ronald Woerner provides an in-depth look at each of the seven steps in the NIST RMF process, covering everything from how to prepare for a risk-based approach to security to how to monitor and assess security controls in a system on an ongoing basis. Along the way, he demonstrates how each step is applied in the real world by providing a case study.