CYB 207 Wk 4 – NIST RMF Step 5: Authorize Information System

0 items
CYB 207 Wk 4 - NIST RMF Step 5: Authorize Information System
CYB 207 Wk 4 – NIST RMF Step 5: Authorize Information System
$9.00
Go to the store page
  • Description

CYB 207 Wk 4 – NIST RMF Step 5: Authorize Information System

As the team leader for Phoenix Security Services’ SureMarket account, you continue your SOX assessment of compliance using the NIST RMF as described in NIST SP 800-37:

  • Step 1: Categorize Information Systems

  • Step 2: Select Security Controls

  • Step 3: Implement Security Controls

  • Step 4: Assess Security Controls

  • Step 5: Authorize Information System

  • Step 6: Monitor Security Controls

 

Research your documentation for Steps 1 through 4.

 

Your next task is to complete Step 5 of the NIST RMF process by developing a risk mitigation plan and presenting your assessments to the SureMarket senior leadership in order to gain authorization for continuing operations of the 5 SureMarket IT Systems.

 

Part A

To prepare your risk mitigation plan, complete the 2- to- 3-page SureMarket Risk Mitigation Plan template using the results from Steps 3 and 4 of the NIST RMF process, along with your recommended mitigation actions, estimated completion date, and milestones. This information will be summarized in your presentation to senior leadership for approval of the mitigation plan in Part B.

 

Part B

Create a media-rich, 10- to 12-slide Microsoft PowerPoint presentation or an infographic using an infographic maker, such as Piktochart™, Venngage™, or Canva®, to the SureMarket senior leadership that includes the following:

  • Summarize the 5 IT systems, including their respective categorization (Low, Medium, High)

  • Summarize each IT system’s vulnerabilities

  • Summarize each IT system’s risks using the 5 x 5 Risk Matrix from NIST SP 800-30

  • Summarize how each of the risks can impact SureMarket business objectives and SOX compliance if the risks are not mitigated

  • Document your recommended mitigation plan in priority order

  • Include DETAILED SLIDE NOTESin the notes section of each slide

 

Note: You will use this week’s assignment to help you complete the Week 5 assignment.

 

Submit your completed template and presentation or infographic (if you made one) saved as a PDF.