topic Re: General training request to learn about FedRamp, FISMA, and RmF for DOD IT? in Governance, Risk, Compliance

General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

meh2ecu95 — Mon, 25 Aug 2025 19:43:50 GMT

Hello community!

Greetings! I'm going to give a presentation next week and I need to get up to speed and sound credible and knowledgeable about these 3 regulations at a high level so as to speak to C level non-technical business executives.

Suggestions for where I can learn about these 3?

Many thanks!

Marc

Re: General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

nkeaton — Mon, 25 Aug 2025 20:20:18 GMT

@meh2ecu95 If you don't have experience with it, you will definitely be found out by those that do know it. I would advise familiarity with NIST SP 800-37 and 53 but will not give you the level of expertise that are trying to have.

Re: General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

meh2ecu95 — Mon, 25 Aug 2025 20:57:15 GMT

Thanks!

Do you recommend any particular course? I see LinkedIn learning has some courses, yet any other recommendations for this entry level learner on this topic?

Thanks!

Re: General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

nkeaton — Tue, 26 Aug 2025 03:02:45 GMT

@meh2ecu95 About as close as you can get overall is ISC2’s CGRC training. BAI Information Security does have some specialized training classes but is going to not be cheap. These are difficult subjects to find general training for.

Re: General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

meh2ecu95 — Tue, 26 Aug 2025 13:23:15 GMT

Thanks! This helps!

By chance did you (or anyone else) taken this, and was it super useful for a sales / consulting leadership role?

Sent from my iPhone

Re: General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

nkeaton — Tue, 26 Aug 2025 16:36:15 GMT

@meh2ecu95 I never took any training for mine. Used the NIST documents to study for the exam. I am not in GRC but help our folks that are. Not sure would be useful in that discipline. To earn the certification, you have to demonstrate experience after take the exam.