By using our website you agree to our use of cookies.

NIST Security Framework Foundation

2 Day Course
Code QANISTF

Book Now - 1 Delivery Method Available:

Classroom Virtual Classroom Private Group - Virtual Self-Paced Online

Overview

This theory based course provides a foundation awareness of the five functional pillars (Identify, Protect, Detect, Response and Recover) of the National Institute of Standards and Technology (NIST) security framework.

Objectives

The NIST Security Framework Foundation will focus on the following topics;

1. Identify

  • Asset Management
  • Business Environment
  • Governance
  • Risk Assessment
  • Risk Management Strategy

2. Protect

  • Access Control
  • Awareness & Training
  • Data Security
  • Information Protection Processes and Procedures
  • Maintenance
  • Protective Technology

3. Detect

  • Anomalies and Events
  • Security Continuous Monitoring
  • Detection Processes

4. Response

  • Response Planning
  • Communications
  • Analysis
  • Mitigation
  • Improvements

5. Recover

  • Recovery Planning
  • Improvements
  • Communications
View detailed Course Modules

Training Partners

We work with the following best of breed training partners using our bulk buying power to bring you a wider range of dates, locations and prices.

Modules

Collapse all

Module 1 - Asset Management (1 topic)

  • The data personnel, devices, systems, and facilities that enable the organisation to achieve business purposes are identified and managed consistent with their relative importance to business objectives and the organisation's risk strategy.

Module 2 - Business Environment (1 topic)

  • The organisation's mission, objectives, stakeholders, and activities are understood and prioritised; this information is used to inform cybersecurity roles, responsibilities, and risk management decisions.

Module 3 – Governance (1 topic)

  • The policies, procedures, and processes to manage and monitor the organisation's regulatory, legal, risk, environmental, and operational requirements are understood and inform the management of cybersecurity risk.

Module 4 – Risk Assessment (1 topic)

  • The organisation understands the cybersecurity risk to organisational operations (including mission, functions, image, or reputation), organisational assets, and individuals.

Module 5 - Risk Management Strategy (1 topic)

  • The organisation's priorities, constraints, risk tolerances, and assumptions are established and used to support operational risk decisions.

Module 6 – Access Control (1 topic)

  • Access to assets and associated facilities is limited to authorised users, processes, or devices, and to authorised activities and transactions.

Module 7 – Awareness and Training (1 topic)

  • The organisation's personnel and partners are provided cybersecurity awareness education and are adequately trained to perform their information security-related duties and responsibilities consistent with related policies, procedures, and agreements.

Module 8 - Data Security (1 topic)

  • Information and records (data) are managed consistent with the organisation's risk strategy to protect the confidentiality, integrity, and availability of information.

Module 9 - Information Protection Processes and Procedures (1 topic)

  • Security policies (that address purpose, scope, roles, responsibilities, management commitment, and coordination among organisational entities), processes, and procedures are maintained and used to manage protection of information systems and assets.

Module 10 - Maintenance (1 topic)

  • Maintenance and repairs of industrial control and information system components is performed consistent with policies and procedures.

Module 11 - Protective Technology (1 topic)

  • Technical security solutions are managed to ensure the security and resilience of systems and assets, consistent with related policies, procedures, and agreements.

Module 12 - Anomalies and Events (1 topic)

  • Anomalous activity is detected in a timely manner and the potential impact of events is understood.

Module 13 - Security Continuous Monitoring (1 topic)

  • The information system and assets are monitored at discrete intervals to identify cybersecurity events and verify the effectiveness of protective measures.

Module 14 - Detection Processes (1 topic)

  • Detection processes and procedures are maintained and tested to ensure timely and adequate awareness of anomalous events.

Module 15 - Response Planning (1 topic)

  • Response processes and procedures are executed and maintained, to ensure timely response to detected cybersecurity events.

Module 16 - Communications (1 topic)

  • Response activities are coordinated with internal and external stakeholders, as appropriate, to include external support from law enforcement agencies.

Module 17 - Analysis (1 topic)

  • Analysis is conducted to ensure adequate response and support recovery activities.

Module 18 – Mitigation (1 topic)

  • Activities are performed to prevent expansion of an event, mitigate its effects, and eradicate the incident.

Module 19 – Improvements (1 topic)

  • Organisational response activities are improved by incorporating lessons learned from current and previous detection/response activities.

Module 20 – Recovery Planning (1 topic)

  • Recovery processes and procedures are executed and maintained to ensure timely restoration of systems or assets affected by cybersecurity events.

Module 21 – Improvements (1 topic)

  • Recovery planning and processes are improved by incorporating lessons learned into future activities.

Module 22 – Communications (1 topic)

  • Restoration activities are coordinated with internal and external parties, such as coordinating centres, Internet Service Providers, owners of attacking systems, victims, other CSIRTs, and vendors.

Prerequisites

There are no prerequisites for this course, however, participants are expected to have a basic understanding of computers and the internet.

Scheduled Dates

Please select from the dates below to make an enquiry or booking.

Pricing

Different pricing structures are available including special offers. These include early bird, late availability, multi-place, corporate volume and self-funding rates. Please arrange a discussion with a training advisor to discover your most cost effective option.

Code Location Duration Price Jun Jul Aug Sep Oct Nov
Later scheduled dates may be available for this course.
Next 6 Months
Cyber Security Training Courses

Course PDF

Print

Share this Course

Share

Recommend this Course

Sections