Federal agencies often grapple with the many requirements of
a Certification and Accreditation (C&A). C&A encompasses an
array of areas such as FISMA, NIST (800-37, 800-60,
FIPS-199, etc.), Privacy regulations, OMB regulations (such
as how a POA&M should be created and tracked) and more. This
course offers a systematic and in-depth approach to
conducting a C&A, as well as to preparing for a C&A team
site visit. It is aimed at staff performing the C&A, or IT
professionals within a federal agency interacting and
responding to the many requests of C&A teams.
The course covers the following topics:
·
Introduction to C&As
·
FISMA requirements
·
Boundary Scoping
·
Security Plans
·
IT Contingency Plans
·
Privacy Impact Assessments
·
Security Test & Evaluation (STE) requirements
·
Security Assessment Reports (SAR)
·
Finalizing the package
CPE credits:
8 to 16
Field of Study:
Auditing
Format:
Lecture, Group
Discussion and Class Examples
Length:
1
- 2 days
For pricing and scheduling
information, contact
onsitecourses@agacgfm.org.