Implementing Cybersecurity: A Guide to the National Institute of Standards and Technology Risk Management Framework

The book provides the complete strategic understanding requisite to allow a person to create and use the RMF process recommendations for risk management. This will be the case both for applications of the RMF in corporate training situations, as well as for any individual who wants to obtain specialized knowledge in organizational risk management. It is an all-purpose roadmap of sorts aimed at the practical understanding and implementation of the risk management process as a standard entity. It will enable an “application” of the risk management process as well as the fundamental elements of control formulation within an applied context.

Table of Contents

Chapter 1: Introduction to Organizational Security Risk Management
Chapter 2: Survey of Existing Risk Management Frameworks
Chapter 3: Step 1— Categorize Information and Information Systems
Chapter 4: Step 2—Select Security Controls
Chapter 5: Step 3— Implement Security Controls
Chapter 6: Step 4— Assess Security Controls
Chapter 7: Step 5— Authorize: Preparing the Information System for Use
Chapter 8: Step 6— Monitor Security State
Chapter 9: Practical Applications of the National Institute of Standards and Technology Risk Management Framework