About this bundle

8 courses · 8 Foundations chapters and 20 requirement chapters · About 8.5 hours · Self-paced · 12 months of access

The Governance and Risk bundle covers how a security program is run. Foundations explains how NIST SP 800-171 Rev. 3 is built, how to read a requirement, and how assessments work. Planning, Risk Assessment, Security Assessment and Monitoring, System and Services Acquisition, Supply Chain Risk Management, Personnel Security, and Awareness and Training then cover 20 requirements, including Supply Chain Risk Management, which is new in Revision 3. Each requirement chapter takes you through the same three steps: understand it, implement it, then assess and prove it, in 15 minutes or less.

Who it is for: compliance managers, security program leads, contracts and HR partners, consultants, and internal assessors who own the policies, plans, risk decisions, and supplier rules that protect Controlled Unclassified Information (CUI) in nonfederal systems.

Bought separately, these eight courses cost $1,242. The bundle is $499.

The eight courses

• NIST SP 800-171 Rev. 3 Foundations: 8 chapters, about 2 hours
• NIST SP 800-171 Rev. 3 Planning Family: 3 requirement chapters, about 1 hour
• NIST SP 800-171 Rev. 3 Risk Assessment Family: 3 requirement chapters, about 55 minutes
• NIST SP 800-171 Rev. 3 Security Assessment and Monitoring Family: 4 requirement chapters, about 65 minutes
• NIST SP 800-171 Rev. 3 System and Services Acquisition Family: 3 requirement chapters, about 55 minutes
• NIST SP 800-171 Rev. 3 Supply Chain Risk Management Family: 3 requirement chapters, about 1 hour
• NIST SP 800-171 Rev. 3 Personnel Security Family: 2 requirement chapters, about 45 minutes
• NIST SP 800-171 Rev. 3 Awareness and Training Family: 2 requirement chapters, about 50 minutes

You will be able to
• Read each requirement and its assessment objectives the way an assessor does
• Set organization-defined parameter values and record where each one comes from
• Implement policies, a system security plan, risk assessments, a POA&M and monitoring, acquisition and supply chain rules, screening, and training
• Name the evidence to keep and the gaps that lead to an "other than satisfied" finding
• Roll up your readiness with owners and dates for your top gaps

Included
• A 3-page Control Reference Guide for every requirement, plus a compiled guide for each family
• The Foundations Readiness Workbook and the Master Readiness Workbook
• A knowledge check after every requirement
• A final assessment in each course (80% to pass, unlimited retries)
• A certificate of completion for each course you finish, 9.75 CPE hours in total
• A running case example, Harbor Point Machining (a fictional company)

Bundle includes

8 courses · 42 chapters · 187 lessons · about 8.5 hours

View all

Instructor

Brian Hubbard

Lead CCA

Brian Hubbard is President of Evolved Cyber and has more than 40 years of cybersecurity experience supporting federal contractors, the defense community, and the intelligence community. A Lead Certified CMMC Assessor and CMMC instructor, he has led certification assessments and helped organizations prepare to demonstrate how their security programs work in practice. Brian also contributed to the original NIST Cybersecurity Framework. In this course, he brings that experience to NIST SP 800-171 Revision 3, helping leaders understand its implications for governance, systems, documentation, suppliers, and assessment readiness.

FAQ

  • Which course should I take first?

    Start with Foundations. Then take Access Control, or take Planning first if your policies and system security plan are thin.

  • I already own Foundations. Do I pay for it again?

    No. Contact us and we will send a coupon for the amount you paid for Foundations.
    [email protected]

  • Which requirements and values apply to my organization?

    The agreements that cover your system determine which requirements and parameter values apply. The courses show you how to find and record them.

  • Is the certificate a professional certification?

    No. Each certificate confirms you completed that course and passed its final assessment.

  • Can I enter real system details in the workbooks?

    Use sanitized descriptions only. Never put CUI in a workbook.

  • How long do I have access?

    12 months from the day you start each course, for all eight courses.

Eight courses, one price

Bought separately, Foundations and the seven governance and risk family courses cost $1,242. The bundle is $499, with 12 months of access to each course.

Already own Foundations? Contact us for a coupon worth what you paid for it.
[email protected]