NIST SP 800-171 Rev. 3 Access Control Family
Work through all 16 NIST SP 800-171 Rev. 3 Access Control requirements: what each one asks for, how to put it in place, and the evidence that proves it. Self-paced, 15 minutes or less per requirement.
Sixteen requirements, ninety-two things to prove
Access Control is the largest family in NIST SP 800-171 Rev. 3. Its 16 active requirements break into 92 determination statements in SP 800-171A, and 18 of those are organization-defined parameters your organization has to set before anyone can assess them. Six numbers in the family are now withdrawn, with their content moved into other requirements, so an old Revision 2 mapping won't line up one to one.
This course takes every requirement through the same three steps. First you learn what it asks for and the risk behind it. Then you see a practical way to put it in place that fits your environment. Last, you learn how it gets assessed and what evidence proves it. A running case, Harbor Point Machining (a fictional company), shows each step on a system that looks like yours.
This course takes every requirement through the same three steps. First you learn what it asks for and the risk behind it. Then you see a practical way to put it in place that fits your environment. Last, you learn how it gets assessed and what evidence proves it. A running case, Harbor Point Machining (a fictional company), shows each step on a system that looks like yours.
By the end, you'll be able to
-
Explain what each Access Control requirement asks for and the risk it addresses
-
Set the family's 18 organization-defined parameter values and record who approved each one
-
Plan practical controls for accounts, privilege, logons, sessions, and remote, wireless, mobile, and external access
-
Choose evidence for each determination statement and spot the gaps that lead to "other than satisfied"
-
Roll up your Access Control readiness with your top gaps, owners, and dates
Leave with your Access Control rows filled in, not just notes
In the Overview you'll download the Master Readiness Workbook, the one spreadsheet you'll use across every family course, along with a Control Reference Guide for each of the 16 requirements. Every chapter ends with you recording that requirement's parameter values, evidence, owners, and gaps. In the Wrap-Up you roll the family up into one readiness view, with your top three gaps and an owner and date for each. Use sanitized descriptions only, and never enter CUI. The workbook is a working record. It moves the work forward, but it isn't proof of compliance.
Course curriculum
-
-
Access Control Overview | Family Overview
FREE PREVIEW -
Access Control Overview | Your Downloads
-
-
-
03.01.01 | Control Reference Guide
-
03.01.01 | Lesson 1: Understand the Requirement
FREE PREVIEW -
03.01.01 | Lesson 2: Implement the Requirement
-
03.01.01 | Lesson 3: Assess and Prove the Requirement
-
03.01.01 | Knowledge Check
-
03.01.01 | Requirement Summary
-
-
-
03.01.02 | Control Reference Guide
-
03.01.02 | Lesson 1: Understand the Requirement
-
03.01.02 | Lesson 2: Implement the Requirement
-
03.01.02 | Lesson 3: Assess and Prove the Requirement
-
03.01.02 | Knowledge Check
-
03.01.02 | Requirement Summary
-
-
-
03.01.03 | Control Reference Guide
-
03.01.03 | Lesson 1: Understand the Requirement
-
03.01.03 | Lesson 2: Implement the Requirement
-
03.01.03 | Lesson 3: Assess and Prove the Requirement
-
03.01.03 | Knowledge Check
-
03.01.03 | Requirement Summary
-
-
-
03.01.04 | Control Reference Guide
-
03.01.04 | Lesson 1: Understand and Implement the Requirement
-
03.01.04 | Lesson 2: Assess and Prove the Requirement
-
03.01.04 | Knowledge Check
-
03.01.04 | Requirement Summary
-
-
-
03.01.05 | Control Reference Guide
-
03.01.05 | Lesson 1: Understand the Requirement
-
03.01.05 | Lesson 2: Implement the Requirement
-
03.01.05 | Lesson 3: Assess and Prove the Requirement
-
03.01.05 | Knowledge Check
-
03.01.05 | Requirement Summary
-
About this course
- $249.00
Instructor(s)
Brian Hubbard
Lead CCA
[email protected]
Brian Hubbard is President of Evolved Cyber and has more than 40 years of cybersecurity experience supporting federal contractors, the defense community, and the intelligence community. A Lead Certified CMMC Assessor and CMMC instructor, he has led certification assessments and helped organizations prepare to demonstrate how their security programs work in practice. Brian also contributed to the original NIST Cybersecurity Framework. In this course, he brings that experience to NIST SP 800-171 Revision 3, helping leaders understand its implications for governance, systems, documentation, suppliers, and assessment readiness.
FAQ
-
Do I need to take Foundations first?
It's recommended, not required. Foundations teaches the method for reading Revision 3 requirements, parameters, and assessment objectives that every family course builds on.
-
Which requirements and values apply to my organization?
The agreements that cover your system determine which requirements and parameter values apply. The course shows you how to find and record them.
-
Is the certificate a professional certification?
No. It confirms you completed this course and passed its final assessment.
-
Can I enter real system details in the workbook?
Use sanitized descriptions only. Never put CUI in the workbook.
-
How long do I have access?
12 months from the day you enroll.
-
Is this course part of a bundle?
Yes. Access Control is in the Starter bundle ($399), the Technical Safeguards bundle ($999), and Complete Control Mastery ($1,495). Every bundle includes Foundations.
One requirement at a time, from reading it to proving it.
Fifteen minutes or less per requirement, and every one ends with something real in your workbook.