• Packt logo

NIST Cybersecurity and Risk Management Frameworks

Achieving Proficiency in Security, Compliance, and Governance

The CPD Certification Service

This course has been certified by the CPD Certification Service as conforming to continuing professional development principles. Find out more.

Build a strong foundation in the NIST Cybersecurity Framework

Discover how the NIST Cybersecurity Framework (CSF) and Risk Management Framework (RMF) work together to strengthen cybersecurity. Starting with the NIST ecosystem and core principles, you’ll progress from identifying assets and understanding business impact to implementing risk-based security practices that support resilient organisations.

Move from visibility to protection

Build practical confidence by applying the core functions of the NIST CSF to protect critical systems. Explore access controls, data security, protective technologies, security awareness, and continuous monitoring to strengthen organisational defences against evolving cyber threats.

Apply the Risk Management Framework across the system lifecycle

Complete your journey by following the NIST RMF through system categorisation, security control selection, implementation, assessment, and ongoing governance. You’ll also explore incident response, business continuity, change management, and continuous monitoring to support long-term cyber resilience.

Syllabus

  • Week 1

    Demystifying the NIST CSF

    • NIST Cybersecurity Frameworks and Standards

      In this activity you will explore NIST Cybersecurity concepts, course overview, relationships within the CSF, vocabulary, framework components, and episode highlights to build practical understanding and apply CSF controls.

    • Identification and Asset Management

      In this activity you will explore the NIST Core Identify function to handle asset identification, compile an inventory of assets, analyze business impact, and establish foundational security policies.

    • NIST's Protect Function for Comprehensive Cybersecurity

      In this activity you will explore the NIST Core Protect function, focusing on awareness training, access control, protective technology, data security, system maintenance, and personnel security.

    • Monitoring, Alerting, and Assessments in Cybersecurity

      In this activity you will explore continuous monitoring, system auditing, and compliance assessments to maintain a strong security posture.

  • Week 2

    Mastering the NIST Risk Management Framework

    • Essentials of Incident Response and Digital Forensics in Cybersecurity

      In this activity you will explore incident response essentials, response planning, digital forensics, response teams, and mitigation strategies

    • Strategies for Business Continuity and Recovery in Cybersecurity

      In this activity you will explore core strategies, business continuity, backup and recovery solutions, and virtualization architectures

    • NIST Risk Management Framework and Security Planning

      In this activity you will explore the NIST Risk Management Framework overview, a risk-based approach, the RMF process, and system security

    • Categorization Step in NIST Risk Management Framework

      In this activity you will explore system categorization, the process of categorizing systems, establishing baselines, and the RMF categorization steps

    • Control Selection in the NIST Risk Management Framework

      In this activity you will explore control selection, selecting safeguards, NIST controls, setting baselines, control allocation, and documentation requirements

  • Week 3

    NIST RMF Lifecycle Operations

    • Implementing and Documenting Security Controls in Cybersecurity

      In this activity you will explore security control implementation, managing common controls, and maintaining thorough documentation

    • Assessment and Remediation in the NIST Risk Management Framework

      In this activity you will explore the NIST RMF assessment process, including conducting and analyzing assessments, and implementing risk remediation strategies

    • System Authorization and Risk Response in Cybersecurity

      In this activity you will explore system authorization and risk response strategies

    • Continuous Monitoring and Change Control in Cybersecurity

      Finally you will explore continuous monitoring strategies, implement change management practices, and execute secure system disposal procedures

Who is this accredited by?

The CPD Certification Service
The CPD Certification Service:

The CPD Certification Service was established in 1996 and is the leading independent CPD accreditation institution operating across industry sectors to complement the CPD policies of professional and academic bodies.

When would you like to start?

Start straight away and join a global classroom of learners. If the course hasn’t started yet you’ll see the future date listed below.

Learning on this course

On every step of the course you can meet other learners, share your ideas and join in with active discussions in the comments.

What will you achieve?

By the end of the course, you‘ll be able to...

  • Navigate complex NIST relationships and standards
  • Conduct risk assessments and categorization
  • Implement security controls effectively
  • Ensure system authorization and risk response
  • Manage change and configuration control
  • Handle system disposal and continuity of operations

Who is the course for?

This course is ideal for cybersecurity professionals, security analysts, IT practitioners, and risk managers who want to deepen their understanding of the NIST Cybersecurity Framework and Risk Management Framework.

Who developed the course?

Packt

Practical Tech Learning, Built for Where the Industry Is Heading

For over 20 years, Packt has helped technologists at every stage turn complex topics into real, usable skills. We’re a global technology learning publisher with a library of more than 9,000 hands-on tutorials, and we’re adding to it constantly.

What's included?

This is a premium course. These courses are designed for professionals from specific industries looking to learn with a smaller group of like-minded individuals.

  • Unlimited access to this course
  • Includes any articles, videos, peer reviews and quizzes
  • Certificate of Achievement to prove your success when you're eligible
  • Download and print your Certificate of Achievement anytime

Still want to know more? Check out our FAQs

Learning on FutureLearn

Your learning, your rules

  • Courses are split into weeks, activities, and steps to help you keep track of your learning
  • Learn through a mix of bite-sized videos, long- and short-form articles, audio, and practical activities
  • Stay motivated by using the Progress page to keep track of your step completion and assessment scores

Join a global classroom

  • Experience the power of social learning, and get inspired by an international network of learners
  • Share ideas with your peers and course educators on every step of the course
  • Join the conversation by reading, @ing, liking, bookmarking, and replying to comments from others

Map your progress

  • As you work through the course, use notifications and the Progress page to guide your learning
  • Whenever you’re ready, mark each step as complete, you’re in control
  • Complete 90% of course steps and all of the assessments to earn your certificate

Want to know more about learning on FutureLearn? Using FutureLearn

Do you know someone who'd love this course? Tell them about it...