NIST Cybersecurity Consultant

Audience
The course is designed for IT and security managers, system and network administrators, risk management/compliance personnel, advisors, consultants, managers and decision-makers working with or responsible for cybersecurity in organizations. It is suitable for those who wish to implement, lead or advise on safety programs based on frameworks from the National Institute of Standards and Technology (NIST), for example in the public sector, critical infrastructure, finance, health, or other regulated industries.

Learning objectives
Participants will gain a thorough understanding of core principles and concepts of information security and cybersecurity, including confidentiality, integrity and accessibility. The course will provide knowledge of and ability to interpret and apply key NIST publications (e.g. NIST SP 800-12, NIST SP 800-53, NIST SP 800-171, NIST Risk Management Framework) as well as the overall NIST Cybersecurity Framework (CSF). Participants learn how to assess risks, select and implement security and privacy controls, develop a holistic security program, plan preparedness and incident management, and implement strategies for continuous monitoring, response, and recovery.

After completing the course you will be able to

• Explain basic principles of cybersecurity and information security
• Understand and apply guidelines and recommended controls from NIST SP 800-12, 800-53, 800-171, Risk Management Framework and CSF
• Perform risk assessments and gap analyses against NIST standards
• Plan, develop and implement a comprehensive cybersecurity program tailored to your organization's needs
• Selecting and implementing relevant technical and administrative security and privacy controls
• Manage security incidents, including analysis, response, mitigation, and recovery
• Contribute to continuous monitoring, evaluation and improvement of safety and risk management program