Your Role As an ISSO within The RMF

[@germainkone9029]

This is the video that I need. Thank you Sir!

[@JustineCarissa]

This was a good explanation of the video. I recently became an ISSE for the navy on the civilian side, I'm hoping to become an ISSO later one day too.

[@cyberfirstsolutions]

@@JustineCarissa Awesome!

[@stephanieabbey8120]

Great explanation! What aspects of a system would you recommend someone knows to be successful in an ISSO role?

[@ldogjr]

Thanks this makes perfect sense !

[@mirabellesophrey529]

Clearly understood

[@networkman4114]

This sounds way for more easier then actually what it is. I been a network engineer/ System Engineer for well over 5 years and I can't even get an ISSO or ISSE interview.

[@cyberfirstsolutions]

@networkman4114 Having a technical background doesn't always guarantee a GRC job. Recruiters are looking for people with knowledge of frameworks, processes, and procedures

[@networkman4114]

@@cyberfirstsolutions I have knowledge of frameworks I work them currently and I was on a Gov contract.

[@cyberfirstsolutions]

@networkman4114 let's explore the job search strategy you are implementing because people with less experience than what you have listed, are getting jobs in GRC. I tell my students that they need to have a resume with specific keywords listed, they need to have a LinkedIn in profile that mirrors their resume, they need to have a cybersecurity certification, they need to be able to translate their technical and non-technical skills to GRC skills/roles, and they need to be able to answer interview questions strategically and appropriately. There are other tips as well.

[@networkman4114]

@@cyberfirstsolutions Thanks you have an email I can reach you.

[@bridgetukhuegbe159]

THANK YOU ..

[@stylinoutlander]

Hi Sir, what is the difference between an ISSO and a GRC Analyst?

[@cyberfirstsolutions]

Hi. An ISSO is a defined role per NIST 800-37 where as a GRC Analyst could be asked to to do various RMF tasks including developing policies and procedures

[@stylinoutlander]

@@cyberfirstsolutions thank you for your reply! What would you suggest to study to become an ISSO as my first job(coming from a non tech field)??

[@cyberfirstsolutions]

@@stylinoutlander NIST 800-37 and NIST 800-53 rev 5

[@steffan662]

is there a big difference between ISSO and ISSO manger

[@cyberfirstsolutions]

@@steffan662 Hi. I don't believe I have seen an ISSO Manager title. It's usually called Branch Chief or Information System Security Manager (ISSM). The main difference is that one is a lead role while the other is not

[@KikiSmith-s4l]

Sir, is it mandatory to have TSC to work as ISSO?

[@cyberfirstsolutions]

@user-sz8ul2ls4r no. It is not mandatory to have a Top secret clearance for an ISSO role. It all depends on the client/data you will be working on

[@emmanuelsebellih8321]

Do you have to be a citizen to be an ISSO

[@cyberfirstsolutions]

@emmanuelsebellih8321 You do not have to be a citizen to be an ISSO. There might be some particular government agencies that require US citizenship but for the most part, no.