General training request to learn about FedRamp, FISMA, and RmF for DOD IT?

[meh2ecu95]

Hello community!

Greetings!  I'm going to give a presentation next week and I need to get up to speed and sound credible and knowledgeable about these 3 regulations at a high level so as to speak to C level non-technical business executives.

Suggestions for where I can learn about these 3?

Many thanks!

Marc

[nkeaton]

@meh2ecu95   If you don't have experience with it, you will definitely be found out by those that do know it.  I would advise familiarity with NIST SP 800-37 and 53 but will not give you the level of expertise that are trying to have.  

[meh2ecu95]

Thanks!

Do you recommend any particular course? I see LinkedIn learning has some courses, yet any other recommendations for this entry level learner on this topic?

Thanks!

[nkeaton]

@meh2ecu95 About as close as you can get overall is ISC2’s CGRC training. BAI Information Security does have some specialized training classes but is going to not be cheap. These are difficult subjects to find general training for.

[meh2ecu95]

Thanks! This helps!

By chance did you (or anyone else) taken this, and was it super useful for a sales / consulting leadership role?


Sent from my iPhone

[nkeaton]

@meh2ecu95 I never took any training for mine. Used the NIST documents to study for the exam. I am not in GRC but help our folks that are. Not sure would be useful in that discipline. To earn the certification, you have to demonstrate experience after take the exam.