Advanced Risk Management, Security Controls & Monitoring from Coursera

This comprehensive course delves into the NIST Risk Management Framework, guiding you through the process of selecting, implementing, and monitoring security controls. Beginning with an overview of control selection, you will explore various control frameworks, assess applicable laws and standards, and learn how to tailor control baselines to organizational needs. The course then transitions to implementing these controls, emphasizing the importance of documentation and approval processes to ensure compliance and system security.

Next, the course covers the crucial steps involved in assessing and remediating security controls. You will learn to develop assessment plans, conduct thorough evaluations, and analyze results to identify compliance gaps. The course also provides insight into effective risk remediation strategies, helping you understand how to prioritize, and address identified risks to maintain a robust security posture.

Finally, the course addresses continuous monitoring and change management, teaching you how to maintain control effectiveness over time. You will explore change management techniques, configuration controls, and best practices for handling system disposal. This advanced training equips you with the necessary skills to manage complex security environments and ensure continuous risk mitigation.

This course is designed for cybersecurity professionals, risk managers, and IT auditors who have a foundational understanding of cybersecurity principles. Familiarity with basic risk management concepts and the NIST framework is recommended.

What's inside

Syllabus

Control Selection in the NIST Risk Management Framework

In this module, we will explore the process of selecting appropriate security controls within the NIST Risk Management Framework. You will learn how to identify applicable rules and standards, set and tailor control baselines, allocate controls effectively, and document them for approval.

Implementing and Documenting Security Controls in Cybersecurity

In this module, we will delve into the practical aspects of deploying security controls in cybersecurity. You will learn how to implement, evaluate, and document these controls, ensuring that they meet the necessary standards and requirements.

Assessment and Remediation in the NIST Risk Management Framework

In this module, we will cover the entire assessment process within the NIST RMF. You will learn to plan, conduct, and document assessments, as well as to identify and remediate risks based on the findings.

System Authorization and Risk Response in Cybersecurity

In this module, we will focus on the final steps of system authorization and risk response. You will learn about the authorization process, how to document risk responses, and strategies for mitigating identified risks.

Continuous Monitoring and Change Control in Cybersecurity

In this module, we will examine the continuous monitoring and change control processes in cybersecurity. You will learn to manage system changes, handle configuration control, and evaluate secure methods for system disposal at the end of its lifecycle.

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Designed for cybersecurity professionals, risk managers, and IT auditors, which indicates a focus on practical application and career advancement

Assumes a foundational understanding of cybersecurity principles, suggesting it builds upon existing knowledge rather than starting from scratch

Familiarity with basic risk management concepts and the NIST framework is recommended, implying a need for prerequisite knowledge

Focuses on the NIST Risk Management Framework, which is widely used in the U.S. federal government and increasingly adopted by other organizations

Covers continuous monitoring and change management, which are essential for maintaining long-term security posture and adapting to evolving threats

Explores system disposal at the end of its lifecycle, which is a critical aspect of security often overlooked in introductory courses

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Advanced Risk Management, Security Controls & Monitoring with these activities:

Review NIST Risk Management Framework Fundamentals

Show steps

Reinforce your understanding of the NIST Risk Management Framework to better grasp the advanced concepts covered in the course.

Browse courses on NIST Risk Management Framework

Show steps

Review the NIST RMF documentation.
Complete practice quizzes on NIST RMF concepts.
Summarize the key steps of the NIST RMF.

Review 'NIST Handbook: Applying the Risk Management Framework'

Show steps

Gain a deeper understanding of the NIST Risk Management Framework by studying a comprehensive handbook.

View Putting Knowledge to Work on Amazon

Show steps

Read the sections relevant to control selection and implementation.
Take notes on key concepts and definitions.
Relate the book's content to the course modules.

Develop a Security Control Implementation Plan

Show steps

Apply the course concepts by creating a detailed plan for implementing security controls in a hypothetical organization.

Show steps

Select a hypothetical organization and its industry.
Identify applicable compliance requirements.
Choose and document security controls based on NIST guidelines.
Outline the steps for implementing these controls.

Four other activities

Expand to see all activities and additional details

Show all seven activities

Create a Presentation on Security Control Assessment

Show steps

Solidify your understanding of security control assessment by creating a presentation that explains the process and its importance.

Show steps

Research security control assessment methodologies.
Outline the key steps in the assessment process.
Design visually appealing slides with clear explanations.
Practice delivering the presentation.

Design a Continuous Monitoring Dashboard

Show steps

Apply your knowledge of continuous monitoring by designing a dashboard that visualizes key security metrics and alerts.

Show steps

Identify relevant security metrics for continuous monitoring.
Choose a dashboarding tool or platform.
Design the dashboard layout and visualizations.
Document the data sources and calculations used.

Review 'Security Controls Evaluation, Testing, and Assessment Handbook'

Show steps

Deepen your understanding of security control evaluation by studying a specialized handbook.

View Putting Knowledge to Work on Amazon

Show steps

Read the chapters on assessment methodologies and techniques.
Compare the book's content to the course modules on assessment.
Identify key takeaways and apply them to your projects.

Volunteer at a Local Non-Profit to Improve Security Posture

Show steps

Apply your knowledge of risk management and security controls by assisting a non-profit organization in improving their security posture.

Show steps

Identify a local non-profit organization in need of security assistance.
Assess their current security posture and identify vulnerabilities.
Recommend and implement security controls based on NIST guidelines.
Document the improvements made and provide training to staff.

Career center

Learners who complete Advanced Risk Management, Security Controls & Monitoring will develop knowledge and skills that may be useful to these careers:

Information Security Analyst

An information security analyst works to protect an organization's computer systems and networks from cyber threats. This includes implementing security measures, monitoring systems for vulnerabilities, and responding to security incidents. The course modules covering control implementation, assessment, and remediation directly prepare someone for this role. The continuous monitoring aspect of the course will help an analyst maintain a resilient security posture for their organization. A core part of an analyst's job is to understand and apply security frameworks like NIST in practical settings, making this course extremely relevant to any analyst's professional development.

See salaries and explore the career path for Information Security Analyst

Security Consultant

A security consultant advises organizations on how to improve their security posture, implement security policies, and mitigate risks. They often need a deep knowledge of security frameworks and standards. The course, which centers on the NIST Risk Management Framework, is directly applicable to this work. The ability to assess, remediate, and monitor security controls as described in the course is essential for a security consultant. A consultant will find the training in selection, documentation and implementation of security controls to be particularly helpful.

See salaries and explore the career path for Security Consultant

Security Architect

A security architect designs and plans security systems and infrastructure for an organization. This requires a strong background in security frameworks and techniques. The course can be valuable when determining how the NIST Risk Management Framework can be applied to building secure systems. The training on control selection, implementation, and assessment can directly help a security architect design robust security solutions, and the course can help them address compliance and risk mitigation.

See salaries and explore the career path for Security Architect

Information Security Manager

An information security manager directs an organization’s security strategy and oversees the implementation of security policies and procedures. They must have a broad understanding of security frameworks and risk management principles, and this course directly addresses these topics. The course's modules on control selection, implementation, and continuous monitoring help a manager set up a comprehensive security program. An information security manager will appreciate this course’s lessons on change management techniques.

See salaries and explore the career path for Information Security Manager

Risk Analyst

A risk analyst evaluates and identifies potential risks that could impact an organization. They develop strategies to mitigate those risks and ensure that organizations remain compliant with industry regulations. The course directly aligns with the responsibilities of this role, especially in regard to the NIST Risk Management Framework. The course will be useful for learning how to select, implement, assess, and monitor security controls, all of which are crucial for a risk analyst. The course helps build a foundation for the risk assessment process, risk response, and continuous monitoring techniques that are essential for effective risk management.

See salaries and explore the career path for Risk Analyst

IT Auditor

An IT auditor examines an organization's information systems to ensure they are secure, reliable, and compliant with industry regulations. This role demands a thorough understanding of security control frameworks and the ability to assess their effectiveness. The course can be particularly valuable, as it emphasizes control selection, documentation, and assessment, all essential for an IT auditor. Skills in risk remediation and continuous monitoring also align well with an IT auditor’s need to verify ongoing security measures.

See salaries and explore the career path for IT Auditor

Data Security Analyst

A data security analyst focuses on protecting sensitive data from unauthorized access and breaches. They implement data security protocols, monitor data systems for vulnerabilities, and respond to security incidents related to data. The course's content on control implementation, assessment, and remediation can be directly applied to data security. The focus on continuous monitoring will also help an analyst maintain data integrity. This course is relevant for anyone who is responsible for ensuring data security.

See salaries and explore the career path for Data Security Analyst

Cybersecurity Engineer

A cybersecurity engineer designs, implements, and maintains security systems and networks. They need a strong understanding of security protocols and frameworks. This course may be helpful as it provides practical knowledge on selecting, implementing, assessing, and monitoring security controls based on the NIST Risk Management Framework. A cybersecurity engineer will also gain from the course's content on configuration management, which is a necessary tool for engineers to deploy and maintain security systems.

See salaries and explore the career path for Cybersecurity Engineer

Network Security Engineer

A network security engineer specializes in securing an organization’s network infrastructure. This includes designing security architectures, deploying security solutions, and monitoring network traffic for threats. The course’s comprehensive coverage of security controls within the NIST framework can help build a foundation for this role. Also the topics of change management, configuration control, and system disposal can assist an engineer maintain secure network operations. The course will be useful for anyone working to protect organizational networks against threats.

See salaries and explore the career path for Network Security Engineer

Security Operations Specialist

A security operations specialist is responsible for managing day-to-day security functions, including monitoring security systems, responding to alerts, and implementing security measures. The training provided by this course may be useful for understanding of the NIST framework for selecting, implementing, and monitoring security controls. A security operations specialist may also find the techniques for change management and continuous monitoring particularly relevant to their daily responsibilities.

See salaries and explore the career path for Security Operations Specialist

Application Security Specialist

An application security specialist focuses on protecting software applications from security vulnerabilities. This might include vulnerability testing, code reviews, and implementing security controls in applications. The course's coverage of the NIST Risk Management Framework can help a specialist implement and monitor security controls. The focus on assessment and remediation helps improve application security posture. This course is well-suited for individuals who need a thorough control and assessment methodology.

See salaries and explore the career path for Application Security Specialist

Cloud Security Analyst

A cloud security analyst specializes in securing cloud-based environments and infrastructure. They monitor cloud systems for vulnerabilities and ensure compliance with security standards. The course may be useful for this role as it covers security control selection, implementation, assessment, and monitoring. The continuous monitoring and change control information from the course will further help a cloud security analyst maintain a secure cloud environment.

See salaries and explore the career path for Cloud Security Analyst

Compliance Officer

A compliance officer ensures that an organization adheres to all applicable laws, regulations, and internal policies. This includes security and data protection standards, and thus is an appropriate area for those trained in the NIST framework. The course may be useful as it provides a comprehensive overview of selecting, implementing, and monitoring security controls, which directly ties to compliance efforts. This course may also help a compliance officer design, implement, and verify policies to ensure an organization remains compliant with relevant security standards.

See salaries and explore the career path for Compliance Officer

System Administrator

A system administrator is in charge of maintaining and operating computer systems and networks. They implement and monitor security measures as well as manage system configurations. The course may be helpful to a system administrator as it covers the essential topics of implementing and monitoring security controls. A system administrator will be able to use the knowledge of change management, configuration control, and secure system disposal discussed in the course.

See salaries and explore the career path for System Administrator

Security Awareness Trainer

A security awareness trainer educates employees on security policies, procedures, and best practices. The course, while not directly a training course, can help a trainer more fully understand the NIST framework. The course will give the trainer a more detailed understanding for teaching the selection, implementation, and monitoring security controls, thereby providing more robust training. A trainer will better be able to give instruction on the importance of risk remediation and continuous monitoring procedures.

See salaries and explore the career path for Security Awareness Trainer

Advanced Risk Management, Security Controls & Monitoring

Here's a deal for you

What's inside

Syllabus

Good to know

Save this course

Activities

Career center

Reading list

Share

Similar courses