Attachment_14_-_Course_(Present_and_Future).pdf

Attachment #14 – Courses (Present and Future)

AF IC ISSM/ISSO Course

Length: 3 Days

• (9/25/17) This three day course is designed specifically for AF IC Cybersecurity personnel protecting weapon systems operating at the TS/SCI level and above appointed as Information System Security Manager (ISSM) & Information System Security Officer (ISSO) and their associated RMF personnel

• Our goal is to provide the students with information and knowledge needed for them to perform their cybersecurity duties correctly and effectively

• Specifically, our target audience are the cybersecurity personnel following ICD 503, Risk Management Framework (RMF), and using Xacta IA Manager as their Assessment and Authorization (A&A) Tool

• Student handbooks and companion CD will be provided

Building an SSP (Site Security Package)

Length: 3 Days

• This course is designed specifically for AF IC Cybersecurity personnel appointed as an Information System Security Manager (ISSM) or Information System Security Officer (ISSO) and their associated RMF personnel

• This hands-on course builds upon the Risk Management Framework (RMF) fundamentals taught in the AF IC ISSM/ISSO course. This course teaches the fundamentals of using the Xacta IA Manager tool, to create a Site Security Package (SSP). You will learn how to document system changes, approved under the AF IC Security Impact Analysis (SIA) process and lastly request IS Removal and Decommissioning

• This course is instructor led/student hands-on in our local Virtual Lab Classroom located on JBSA Lackland AFB

• Seating size is limited to 13 Students, due to facility space

• Modules are broken down by tasks and follow an approved AF IC RMF Workflow. Each Task module is broken down into Process Steps. These steps stay the same, despite future updates to the AF IC Workflow being used

• The trainee will be given a project with any required roles assigned. Tasks not performed by the student will be taught by the instructor, to gain an understanding of tasks performed by other security personnel

• Student handbooks will be provided upon arrival

Security Control Implementation

Length: TBD *Coming Spring 2020

Our goal is to educate students on the RMF and provide practical knowledge of security control implementation. Students will learn the following concepts:

Attachment #14 – Courses (Present and Future)

• security controls

• control families

• selection and implementation of controls

• CCPs

• reading the AF IC workflow and real-world application of security controls within the RMF

Assessment Workshop

Length: TBD *Coming Spring 2020

Our goal is to provide the students the knowledge about what SCAs are looking for in assessments and how the assessment process works.

Students will learn about their roll in a successful assessment and how a well-done self-assessment can lead to an easier SCA visit.

Senior Leaders Length: TBD *Coming Soon

The Senior Leaders Course is designed as a way to educate leadership on their roles and responsibilities within the RMF and how they can assist their cybersecurity personnel assigned within their organizations.