NIST RMF System Categorization Step Hands On (Using SP 800-60 Vol II)

Federal Information Security Modernization Act (FISMA) Risk Management Framework (RMF). In this video we went over how new information system is categorized into Low, Moderate or High impact levels using FIPS-199 and SP 800-60 Vol II as guides.
csrc.nist.gov/...
**You can download a copy of the Assessment Test Case I used in this video for your practice if need be, from my Patreon Page, link below.***
www.patreon.co...
The free way to help the channel grow is by subscribing using the link below:
www.youtube.co...
************Patreon & Channel Support******************
www.patreon.co...
*******Order your KamilSec (KS) Designs Merch:*********
kamilsec.creat...
**************************************************************
CashApp: $Kamilzak
Zelle: [e-mail]
Paypal: paypal.me/MZakari
Thank You!!!
*************************************************************
*I ALSO CONDUCT INDIVIDUALIZED RESUME AND INTERVIEW PREP SESSION*
Udemy Affliate link:
track.flexlink...
Connect with me on Social Media:
Twitter: / kamilzak_1​
Instagram: @Kamilzak1

[@1step2life]

In all honesty, you are a natural born Teacher. You are very amazing at breaking down seemingly complicated documents such as NIST RMF. I tip my hat to you with a standing ovation.

[@KamilSec]

Thank you!

[@joseskobena9801]

This is awesome presentation, this is my first exposure to the RMF, this presentation has broken the CATEGORIZATION STEP down, I love it. Thank you.

[@KamilSec]

Glad it was helpful!

[@jimmyk3443]

I am currently taking RMF class and I thought I understood what I was taught until I watched this video. This is awesome. Great job Prof!! Love it.

[@KamilSec]

Glad it was helpful!

[@germainkone9029]

So helpful. Currently talking this class and this is so clear. Plan to contact you for interview prep. Thanks

[@leema5051]

This is the best explanation of RMF and Categorization I've seen so far. Thank you!

[@KamilSec]

You're very welcome! Glad it was helpful.

[@Tonezatl]

This guy was born a lecturer... Excellent explanation !!!

[@KamilSec]

Thank you!

[@joyful422]

Hello Professor, I like to join your class

[@wilfredoduro6017]

I’m currently taking this class and his tutorials have been a great help ..Thanks Prof.

[@lepatriote007]

Thank you much , been in security realm for 10+ years, mostly in technical roles. I have never taken the time to understand the basics of policy and compliance. Now in leadership role and have to learn the hard way. Your videos made everything easy.

[@KamilSec]

You are very welcome, I am very glad my videos are helpful.

[@kafagodwill9185]

wow wow wow wow wow this is awesome i wish i met this this class before paying those classes i attended . you are just the best

[@KamilSec]

You are most welcome, please help share the videos to promote the channel

[@kafagodwill9185]

@@KamilSec please I need your contact so we can talk I am interested in having some details

[@rahmadiallo2896]

Best class you explained everything without reading can’t wait for other classes

[@KamilSec]

Thank you for watching, I am glad you found it beneficial.

[@ericmicheltsanga9714]

@@KamilSec You are doing a wonderful JOB!!!!

[@saved123]

@@KamilSec do u have classes in 2022?

[@ppvshenoy]

You the MAN!! This is exactly what I was looking to clarify. Thanks for your time and the video. Much appreciated. Info categorization is half the battle.

[@KamilSec]

Glad it was helpful!

[@chindaleonardawudu7573]

Wow wow! Teaching is a gift and Talent. Thank you for this wonderful explanation and teaching. This is teaching at its finest.

[@KamilSec]

You are very welcome!

[@skylarngugi9894]

So well explained! its beyond amazing!

[@KamilSec]

Glad it was helpful!

[@oliviangwa3473]

Thank you so Much Sir,,,, I have been looking for hands on to make me feel like I have been working. I think I find one and I think am now ready to hit the Job Market. May God continue to bless you Sir 🙏🏽🙏🏽

[@KamilSec]

Best of luck!

[@lawrencencelanyegha8079]

Men, you are wonderful, and your mastery of the subject matter is commendable. I wish i came across your videos before paying for a training that wasn't worth a dime.

[@KamilSec]

Glad you like them!

[@wilson2423]

Hi,I just join this group and the information giving is well understood and easy to apply interns of categorizing the system..This is so informative..Thanks prof.

[@KamilSec]

I am glad it was helpful.

[@Naa4mla]

wow great job ....you took your time and explain everything perfectly... i'm very impressed

[@KamilSec]

Glad it was helpful!

[@DamagesOverTime]

Great explanations and easy to follow, nice job.

[@akwadasays6330]

This is the best session ever. Very very hands-on. I subscribed.

[@KamilSec]

Thanks and Welcome aboard!

[@kga3758]

Boss .. u are just a master at ur craft..

[@tyronedotson]

Thanks so much for the info GOD bless, I m trying to get into GRC

[@KamilSec]

Best of luck!

[@thandekambonambi5007]

I love this very insightful

[@KamilSec]

Glad it was helpful!

[@akofabulous]

I just stumbled upon your channel. You're a great teacher. Thank you so much for these videos. 🙏🏾

[@KamilSec]

Glad you like them! Thanks...

[@dastylee]

Hi how can one contact you...?

[@technop.8461]

Excellent, this worth paying for, great knowledge, thanks

[@KamilSec]

Glad it was helpful!

[@adrienkelli8954]

Thank you so this video. Down to the nitty gritty. Can't wait for more detailed hands on video.

[@KamilSec]

Awesome, I am glad you like it. Stay subscribed for more videos...

[@magnus5316]

You know what you doing , make it easy and make sense,those others guys all over the place like shit confused

[@KamilSec]

Thank you!

[@stephenasare3328]

Good job bro . You did a great job. Well done 👏

[@KamilSec]

Thank you so much 😀

[@derekl.301]

Great videos, appreciate you taking the time out of your busy schedule to drop this knowledge. Thanks.

[@KamilSec]

My pleasure!

[@rebeccaoseitutu3515]

@@KamilSec how do I join your class

[@yvetteayire6641]

thank you so much for these videos and the explanations. it helps a lot

[@KamilSec]

You're very welcome!

[@ThaRealCLang]

Great presentation sir!

[@KamilSec]

Thank you kindly!

[@ABiitOfEverything]

This video is gold. Thank you 🙏🏽

[@KamilSec]

Glad it was helpful!

[@HD-dl3ud]

Awesome job done. Thank u!

[@dannylopez8734]

I have an interview tomorrow thank you for the information it is helpful.

[@KamilSec]

Best of luck on the interview!!!

[@montecristo2160]

Excellent!

[@jokeawotunde7149]

This is great

[@KamilSec]

Thanks!

[@mbarkawalter2307]

Do you accept GI bill as payment for your class ?

[@KamilSec]

No, we don't accept GI Bills

[@ngwasiripaul6604]

This is just amazing. Do you have all your classes for RMF in one place where I can subscribe to and follow step by step?

[@KamilSec]

Yes, you can reach out [e-mail]

[@MK-ru1dx]

Ty prof. Well explained However can u help differentiate the meanings of 1) Baseline. 2) Impact Level. 3) High/Low water Mark. Ty

[@KamilSec]

Hello M.K, Baseline in regards to control, is the minimum control needed to provide protection to a system. Impact Level, is the qualitative descriptions of risk For High Water Mark please check out the video again, I provided a detailed explanation on that.

[@selftaughtviolinist6583]

Please what job is this under as a security analyst....job application...is it auditing....new to cybersecurity please

[@KamilSec]

IT Security Analyst

[@AzizBTL]

Good job 👍🏽 👏👏👏

[@chukwuzubeluchibinezie8427]

Good day, during categorization, when you set up a meeting with the stakeholders, what questions will you ask the system owner to know the type of information type to choose from the nist.

[@KamilSec]

Ask about the system descriptions, purpose of the system and the what information would the system process?

[@oladimejimichaeloloyede7203]

With all the GRC tools available, do assessors still go through the process of the NIST SP800 series?

[@KamilSec]

Yes they do...

[@InvestWithSN]

did you have anything that discusses the CUI portion of the categorization?

[@KamilSec]

No, I do not

[@mom0f457]

Thank you so much.

[@coffie313]

Hi are you teaching any rmf classes?

[@KamilSec]

Yes

[@Ruffgemm]

Great class...😯 wow....Since we need 800-60 for categorization, where does FIPS 199 come into play and for what purpose?

[@KamilSec]

Great question. FIPS-199 is a 13 page document that explains some key concepts we use in the categorization process such as the security objectives, Confidentiality, Integrity, and Availability. It also explains the impact levels (Low, Moderate, and High) what they mean, and how they affect organization/agency, nations and people. It further explains what High Water Mark means. Last but not the least it shows us the format to follow to create our categorization templates and documentation. Hope this help.

[@chakap]

@@KamilSec This is excellent. I enjoyed the video. Could you please share more videos that talk about the complete process of building the full RMF? I would greatly appreciate that ([e-mail])

[@KamilSec]

@@chakap Sure stay tune I will discuss the full RMF process soon.

[@chakap]

@@KamilSec Thank you so much.

[@phyllisobeng4763]

@@KamilSec looking forward to that Kamil.

[@yvetteayire6641]

why was reporting considered the amongst the others in that phrase. was it the choice of the system owner? could you please help me?

[@KamilSec]

Not sure what the ask is here, please elaborate more...

[@yvetteayire6641]

It’s ok I had the answer already

[@yvetteayire6641]

Thank you so much 🙏

[@ezy8mobi]

Hello bro, are you going to have videos on implementation, Assessment, Authorization and Monitoring?

[@KamilSec]

Whats bro, yea I have 2 videos on Control Assessment on the channel. I will be doing something on Control Implementation, Authorization and Monitoring soon.

[@ezy8mobi]

@@KamilSec okay bro thank you so much and I appreciate what you are doing for us. Your videos are very helpful.

[@magnus5316]

How much you charge for your ISSO PROGRAM??

[@KamilSec]

kzbin.info/www/bejne/rXzCYoN4gqiFars

[@germainkone9029]

Hello sir. What about OSCAL ? any ideas please?

[@KamilSec]

Not there yet, very soon I will look into the automation part...

[@germainkone9029]

Not problem sir. Thanks

[@ryoka1g]

You can make this method for financial institutions as well correct?

[@KamilSec]

Yes, you can. Even though they are different set of controls, the approach is generally similar.

[@ryoka1g]

@@KamilSec sorry for asking you again is there an automated excel spreadsheet that you manually use this framework? Eg add a risk and use as a remediation action 2-3 controls and leave a residual risk with a percentage (e.g 5%)

[@Miahealdd]

Hi, i sent you a personal email regarding Training one on one. Im thinking about taking CAP exam or security plus after studying the RMF. I Need some directions. Thank you

[@olamish4846]

Do you still teach the class? When is the next class starting ?

[@KamilSec]

Currently I do not teach the RMF class due to time constraints, hopefully I will get back to teaching soon...

[@olamish4846]

How can I contact you please!

[@KamilSec]

@@olamish4846 [e-mail]

[@kga3758]

I’ve been trying to connect with you boss..

[@KamilSec]

Look at the videos descriptions for my social media handles and email.

[@VsnsmnGndmd]

Miller Richard Johnson Steven Anderson Maria

[@Chanssr]

High Impact systems are not all NSS systems!!!! 🤣

[@KamilSec]

Thanks for the comment.

[@emytoprah]

Kamil, what’s your email if someone wants to contact you

[@KamilSec]

[e-mail]

[@emytoprah]

@@KamilSec thanks

[@jedidiahwiafe9789]

@@KamilSec pls your number