Meet FY2016 FISMA Requirements: Implementing RMF & Meeting FISMA Metrics

Every year, the Office of Management and Budget (OMB) and Department of Homeland Security (DHS) are raising the FISMA requirements to achieve the ultimate goal of “Near-Real-Time System Security Awareness” and “Ongoing Authorization.”   Additionally, they are making available automated security solutions to improve our protection and security awareness for our systems. 

How do you project, plan and program for these requirements?
How do you leverage all of the automated advances and ensure that your approach to securing your systems is practical, simplified, and effective?  
How do we protect our existing and future systems against the evolving threats and attacks?
What are the most practical and efficient options for implementing the Risk Management Framework (RMF) and meeting your FISMA requirements?

If you are in a Federal Agency, Military, or supporting contractor organization, you can successfully and effectively meet your FY2016 FISMA requirements by understanding the FISMA trends and proven successful, security strategies and simple and automated solutions.  

OMB, DHS, Department of Defense (DoD), Committee of National Security Systems (CNSS), and the National Institute of Standards and Technology (NIST) have made major advances in moving Federal information technology (IT) security forward.  They have created new standards, processes, and solutions that are streamlining and automating security and moving us closer to the goal of total near-real-time security awareness.  Attendees will understand how to leverage:

• New automated solutions (Security Content Automation Protocol (SCAP), DoD Host-Based Security System (HBSS) Solutions, Assured Compliance Assessment Solution (ACAS), and Continuous Diagnostics and Mitigation (CDM) Program) to support "ongoing authorizations" and meet the metrics;
   
• Modified RMF processes for effectively and accurately identifying and documenting a system's security needs;
   
• System deployment strategies to protect against evolving threats and attacks, like leveraging authorization boundaries, Security Overlays and Templates, Compensating/Common/Hybrid Controls, "air-gaps" and "connect-and-protect", etc.;
   
• Simple planning and management tools, like Cybersecurity Calendar and Cybersecurity Journal; and
   
• Organization's Sponsors:  Authorization Official's, Facilities', Physical, Security's, Human Relations', Operation's, Budget's, and Inspector General's staffs.

This course is about how to implement these together to successfully meet your FY2016 RMF security and FISMA Metrics.