NIST SP 800-37

The NIST SP 800-37 3-day workshop presents the principles for accomplishing, testing and documenting the NIST SP 800-37 requirements.  This interactive workshop provides students with an in-depth understanding of the C&A process, including the roles and responsibilities, the security controls, and the documentation required.  Students who attend this workshop will be provided with a comprehensive template as a take-away from the class.

Who Should Attend
Information Security Managers, IT Managers, Program Managers, Certification and Accreditation Professionals, and Designated Approval Authorities

Duration 
3 days – 24 hours

Workshop Objectives

  • Basic risk management concepts
  • Certification & Accreditation methodology requirements
  • Certifier, program manager, user representative, and accreditor roles and responsibilities-essential for successful certification effort
  • Forming a team of resident experts to perform certification
  • Applying the C&A process to any system, regardless of its life-cycle status
  • Scope of verification and validation testing, evaluations, and analysis
  • Importance of configuration management
  • Developing comprehensive security policies, standards, and procedures (e.g., Rules of Behavior, Trusted Facility Manual, Back-up Plans, Contingency Plans, Incident Response Plans, etc.)
  • Applying such certification concepts as type accreditation, site accreditation, and generic accreditations
  • Accreditation decision-making process and the implications of full accreditation, interim approval to operate, and accreditation disapproval

Register Now

Questions about our corporate training may be directed to training@secureinfo.com, or call 888.677.9351.

Ask about our mobile training capability--it saves you money!