-
+1 - 312-224-1615
Get in touch with us
-
support@helpwithassignment.com
Send us an e-mail
Solution Library
Risk Management Framework for Federal Information Systems NIST Revision Guide
Question
The National Institute of Standards and Technology (NIST) replaced the former NIST Special Publication 800-37, Guide for the Security Certification and Accreditation of Federal Information Systems with NIST Special Publication 800-37 Revision 1, Guide for Applying Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach. The NIST document changed from a certification and accreditation framework to a risk management framework because information security management systems should be regularly reviewed, updated, and maintained. It makes more sense to follow a security life cycle approach (continuous monitoring) versus a single one-time static certification/accreditation approach.
For this task, you will be using NIST Special Publication 800-37 Revision 1, Guide for Applying Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach and the attached “Healthy Body Wellness Center Risk Assessment” case study.
You have been hired to apply the NIST’s risk management framework to the Healthy Body Wellness Center’s information systems. You know that the organization has recently had a risk assessment completed that includes recommendations for implementing security controls and mitigating risks. In your new role, a team of people will be assigned to help you with the task. The first job you are tasked with is creating a to-do list for the specific tasks outlined in each of the six steps in the risk management framework (RMF).
Task:
A. Discuss key elements that need to be addressed as part of the risk management framework by completing the attached “RMF To-Do List.”
B. Create a white paper that compares the ISO 27002, COBIT, NIST, and ITIL frameworks by doing the following:
1. Discuss how each framework is most commonly used.
2. Analyze the purpose of each framework design.
3. Evaluate the strengths of each framework.
4. Evaluate the weaknesses of each framework.
5. Discuss the certification and accreditation process for the frameworks.
6. Discuss when you would choose to use each framework (e.g., ISO 27002 versus COBIT, NIST, or ITIL).
C. When you use sources, include all in-text citations and references in APA format.
Summary
The question belongs to Computer Science and it deals with risk management framework that can be applied to Federal Information Systems. A case study of Healthy Body Wellness Center Risk Assessment has been referred to. NIST or National Institute of Standards and Technology has undergone risk assessment and several recommendations have been suggested.
Total Word Count 2637
WHAT OUR STUDENTS SAY
Great assistance!!! Thank you guys for all your support. I love the way you dealt with my every instruction and I’m very much satisfied with the work. As I had difficulties managing time for studies and job, you really saved both.
Brendon Student
There was a research based assignment on the clinical services available for the aboriginals of New Zealand and for that I needed some expert who knows the nursing industry of New Zealand more than anything else. Luckily here I got hold of one lovely professor who helped me that assignment and many other assignments in the due time.
Sharon Nash Student
The concepts surrounding kinetics and dynamics in chemical engineering often confused me in my initial days, till I came across HwA. Their team of online chemical engineering assignment experts helped me through the course by letting me get excellent grades in all of my assignments. And the best part is that because the tutors are from Singapore itself there is no gap in the communication between us.
Oscar Ang Student
I was apprehensive at first about using an online tutoring service that too for a subject as critical as mechanical engineering. But once I gave it a try I know that I need not have worried. The tutors at TheReliableTutor.com are totally in sync with what is required by me. So we are in a good place
Ashok Banerjee Student
Designing a motivational strategy as a part of the employee development plan was a tough ask for me as I missed few classes last semester. However, the help I got from HwA was remarkable and they not only offered me the assignment solution but also at the same time helped me to understand the concepts.
Steve Wilson Student
Comments
this is a very good website
I have 50 questions for the same test your page is showing only 28
hi can you please help or guide me to answer my assignments. thanks
hi can anyone help or guide me to my assignments. thanks
This solution is perfect ...thanks
Hello Allison,I love the 2nd image that you did! I also, had never heard of SumoPaint, is something that I will have to exolpre a bit! I understand completely the 52 (or so) youtube videos that you probably watched. Sometimes they have what you want, sometimes they don't! However, it is always satisfying when you are able to produce something that you have taught yourself. Great job!Debra 0 likes
Perfect bank of solution.
great !
thanks for the quick response. the solution looks good. :)
thnx for the answer. it was perfect. just the way i wanted it.
works fine.