Certified FISMA Practitioner

The Federal Information Security Management Act of 2002 requires each federal agency to develop, document, and implement an agency-wide program to provide information security for the information and information systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other source. Obtaining recognition as a Certified FISMA Practitioner through the CICPC demonstrates to agency management that you are equipped with the requisite knowledge of the federal guidelines established by the National Institute of Standards and Technology, so that you can be trusted to ensure compliance or to satisfy compliance mandates for access to government contracts. Areas of study in this course include:

• legal roles, responsibilities and compliance issues
• risk management and the Federal risk management framework
• system categorization procedures
• technical and functional IA processes
• policies and procedures that support defense in-depth
• selection testing and evaluation of IA controls
• system life-cycle
• continuity of operations planning
• continuous monitoring

The CICPC’s FISMA certificate program provides participants an understanding of information security basics, a foundation necessary to achieve the required level of trust and security in organizational information systems, and ultimately FISMA compliance. The coursework includes a "primer" and a comprehensive review of current FISMA documentation, which focuses on major IA areas and is structured into separate learning modules, including:

1. FISMA Primer – A Program Overview 2. System Life Cycle and Security Implications 3. Roles, responsibilities and legal compliance issues* 4. Information Assurance Basics 5. Security Categorization of Information Systems and Networks 6. Category Mapping 7. Security Controls for Information Systems 8. Information security metrics and trust* 9. C & A under FISMA* 10. Security Plans 11. Risk Management and the Federal risk management frameword under FISMA* 12. Continuous monitoring for Federal systems* 13. Industrial control system security

*This course available independently

The reference materials for this program include the official NIST Federal Information Processing Standards, the Series 800 Special Publication, and other supplementary materials available for download at www.nist.gov.

For more information:

ken {@} capitol-college.edu