NIST Cyber Security Framework 800-171 (QANCSP8171) [Video]

Module 1, Course introduction

Introduces the course and its aims, followed by a lesson that prepares students for the rest of the material. Lessons include:

• Course organization
• Setting the stage

Module 2, Managing risks in the digital age

Introduces students to ERM and the COSO principles. Lessons include:

• Enterprise risk management framework
• COSO overview
• Enterprise risk management framework applied

Module 3, Cybersecurity within a system

Introduces systems thinking and the SVMS (which includes the Z-X model). Lessons include:

• The importance of systems thinking
• Governance and culture
• Strategy and set objectives
• The service value management system
• The Z-X model overview

Module 4, Z-X model capabilities

Probes the details of the Z-X model and its relationship to existing organizational capabilities. Lessons include:

• Plan
• Design
• Build and deploy
• Operate
• Improve

Module 5, Adapt, covers the first part of AIO

Introduces the goal, question, metrics (GQM) approach to develop appropriate metrics for the cybersecurity implementation. Lessons include:

• Overview of AIO (adapt, implement, and …