... I P ge 1of 7 I...

Size: px

Start display at page:

Download "... I P ge 1of 7 I..."

Elinor Burns
6 years ago
Views:

ISA220 Risk Man ag ement Framework for Practitio n e rs Less?n 1.

1 ISA220 Risk Man ag ement Framework for Practitio n e rs Less?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT I HELP The Risk Management Framew ork (RMF) Knowledge (KS) Resources and references are critical to any new process. The Depart ment of Defense (DoD) simplified the implementation of the Risk Management Framework {RMF) through a "one stop shop" web service that provides you with policy references, instances and links to critical resources, templates for essential elements of information required in plans and authorization packages, and chat capability to assist you in your role. Do not worry, the DoD Information Assurance Certification and Accreditation Process {DIACAP) Knowledge {KS) remains in place as you transition to RMF. This lesson provides you with information on how to access, and what you can expect to see, in the RMF and DIACAP Knowledge s.... I P ge 1of 7 I... Back W Next 1

2 ISA220 Risk Management Framework for Practitioners Less?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT I HELP The Purpose of the RMF Knowledge RMF KS is a Public Key Infrastructure (PKI )-enabled Common Access Card (CAC) or DoD-Approved Ex ternal PKI Certificate required, web-based resource, managed by the DoD Chief Information Officer (CJO), that serves as DoD's authoritative source for all RMF information. The RMF KS provides DoD RMF practitioners with immediate access to RMF policy and guidance to effectively and efficiently apply the appropriate methods, standards, and practices required to protect DoD Information Technology (IT). The RMF KS provides the most up to date implementation guidance and DoD intent in addressing evolving security objectives and risk. Note: During DoD's transition from DIACAP to RMF, the Knowledge supports DIACAP as well as RMF procedures Welcome to tho RMF K.oowlodgo ScNieo _.._ _ ---~ :.o- " ,,.., I Page 2 of7 I... Back Next

3 ISA220 Risk Man agem ent Framework f o r Practitio ner s Less?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT I HELP Benefits of RMF KS All infonnation for implementing the DoD RMF is provided by the KS. This infonnation includes: DoD security control baselines, overlays, implementation guidance, procedures, and templates for implementing the DoD RMF Help desk support via A library of tools, diagrams, process maps, and documents An information repository and collaboration forum for the RMF and associated working groups A collaboration workspace for the user community to develop, share, and post lessons learned and best practices A source for cybersecurity news and events and other cybersecurity-related infonnation resources Scheduled updates throughout the year which can be quickly updated with new information, made immediately available to the user community ~ I Page3of7 I... Back Next

ISA220 Risk Management Framework for Practitioners Les5?n 1.

4 ISA220 Risk Management Framework for Practitioners Les5?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT I HELP Accessing the RMF KS I n order t o access the RMF KS port al, all users must comply with one of the following requirement s: Users must have a valid DoD PKI Certificate OR Users must have a valid DoD-Approved Ext ernal PKI Certificate AND must be sponsored by a DoD employee Fi rst-time users must go through a series of steps to gain access t o the Knowledge, including att aining sponsorship from a DoD employee for all External Certification Authority (ECA) certificate holders. The instructions on accessing the RMF Knowledge are: 1. Type the URL: 2. Select the "Login to the RMF Knowledge ".... I Page4of7 I... Back Next

5 ISA220 Risk Management Framework for Practitioners Les5?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT I HELP Accessing the RMF KS I n order t o access the RMF KS portal, all users must comply with one of the following requirement s: Users must have a valid DoD PK! Certificat e OR Users must have a valid DoD-Approved External PK! Certificate AND must be sponsored by a DoD employee Fi rst-time users must att aining sponsorship f The instructions on ace 1. Type the URL : ht 2. Select the "Login Long Description The instructions on accessing the RMF Knowledge are : 1. Type the URL: htt ps://rm fks.osd.mil/login.htm. 2. Select the "Login t o the RMF Knowledge Serv ice". rvice, including A) certificate holders. ~ I Page 4 of7 I... Back Next

ISA220 Risk Management Framework for Practitio ners Less?n 1.4 - The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT j HELP Knowledge Review 1 True or False.

6 ISA220 Risk Management Framework for Practitio ners Less?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT j HELP Knowledge Review 1 True or False. During Department of Defense {DoD)'s transition to DoD Risk Management Framework {RMF), the RMF Knowledge will continue to support DoD Information Assurance Certification and Accreditation Process {DIACAP) as well as RMF procedures../ True LJ False Chedc Answer During transition to DoD RMF, the RMF KS will continue to support DIACAP. ~ I P ge3of7 I... Back Next

7 ISA220 Risk Management Framework for Practitioners Less?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURCES I PRINT I HELP Knowledge Review 2 The benefits of the Risk Management Framework (RMF) Knowledge include: Department or Defense (DoD) security control baselines, overlays, implementation guidance, procedures, and templates for implementing the DoD RMF Help desk support via A collaboration workspace for the user community to develop, share, and post lessons learned and best prac tices./ All of the above Chedc Answer All or the above. The RMF Knowledge includes guidance, templates, DoD security control baselines, help desk support, and a collaboration workspace. ~ I P ge6of7 I... Back Next

8 ISA220 Risk Man ag ement Framework for Practitio n e rs Less?n The Purpose, Benefits, and Accessing the RMF Knowledge RESOURC ES I PRINT I HELP Lesson Completion You have completed the content for this lesson. T o continue, select another lesson from the Table of Contents on the left. If you have closed or hidden the T able of Contents, click the Show TOC button at the top in t he Atlas navigation bar.... I P ge 7of7 I... Back Next

Michael Coughenour Lockheed Martin Rotary & Mission Systems (RMS) System Engineering Technologist

Michael Coughenour Lockheed Martin Rotary & Mission Systems (RMS) System Engineering Technologist A Systems Engineering approach to applying Risk Management Framework (RMF) for a successful program and a secure system a case study RMF is Not a 4-Letter Word Craig Covak Lockheed Martin Rotary & Mission