Risk Management Framework (RMF) 2.0 Express

• The updates to RMF provided in NIST SP 800-37 rev2, “Risk Management Framework for Information Systems and Organizations.” 
• The newly added “Prepare” which is designed to provide a more cost-effective and efficient approach to RMF with into the system life cycle.
• Overview of each step within RMF, roles and responsibilities, and tasks within each steps.

• This presentation outlines updates to the latest publication of NIST Special Publication (SP) 800-37 (Revision 2) “Risk Management Framework for Information Systems and Organizations.”
• Review new “Prepare” step and additional tasks added throughout the RMF cycle?
• The NIST SP 800-37 revisions provide a better defined, structured, and flexible process for managing security and privacy risks.

Speaker Bio:
 Karen Williams is a Sr. Cyber Security Analyst in Huntsville, AL. For the last 15 years, Mrs. Williams has been responsible for training cybersecurity teams on Risk Management Framework (RMF), performing risk analysis, developing security plans, as well as performing cyber security assessments for information systems that manage, support and operate missile defense systems. In 2012, Mrs. Williams created T.E.A.M CyberSecure, LLC to provide training, education, assurance and management consulting as a service. Mrs. Williams is also the founder of the social networking group for cyber professionals called “Cyber Brews.”

Mrs. Williams received a Bachelor’s of Arts (BA) in Communications from University of Alabama in Huntsville (UAH) in 2004. She later obtained a Master’s of Science (MS) degree in Management Information Systems (MIS) from UAH in 2010 and also completed course work for the Information Assurance Certificate program in 2011. She received her Certified Information Systems Security Professional (CISSP) certification in 2012.
​​​​_past_events