Skip to content
UdemyHackingPaid courseAll LevelsCertificate

Implementing the NIST Risk Management Framework (RMF) (Udemy.com)

A practitioner's guide to using the NIST Risk Management Framework (RM) to protect your business or organization

Created by: Jason Dion

Last updated June 2025

icon
What you will learn

  • Understand the foundations of the NIST Risk Management Framework
  • Manage organizational risk in your IT systems
  • Categorize systems and select controls to minimize risk
  • Continuously monitor control implementation and risks to the system

How it compares

Against the other 523 rated Udemy courses in Hacking on CourseDuck:

  • Rating4.6 out of 5higher than 72% of them
  • Reviews1,558#134 of 524 by number of reviews
  • Length5.6 hourslonger than 54% of them
  • Last updatedJune 2025earlier than 51% of them

icon
Course Description

Have you ever wondered how to actually use the NIST Risk Management Framework and apply it to your business or organization?

In this course, you will get an inside look at how cybersecurity, information technology (IT), and business professionals use the NIST Risk Management Framework (RMF) to understand and actively manage their risk posture.

You will begin by learning the fundamentals of the 7-step NIST Risk Management Framework (RMF) process, including:

  • PREPARE

    • Essential activities to prepare the organization to manage security and privacy risk

  • CATEGORIZE

    • Categorize the system and information processes, stored, and transmitted based on an impact analysis

  • SELECT

    • Select the set of NIST SP 800-53 controls to protect the system based on a risk assessment

  • IMPLEMENT

    • Implement the controls and document how controls are deployed

  • ASSES

    • Assess to determine if the controls are in place, operating as intended, and producing the desired results

  • AUTHORIZE

    • The senior official makes a risk-based decision to authorize the system (to operate)

  • MONITOR

    • Continuously monitor control implementation and risks to the system


Then, you will dive deeper into the framework to fully understand each of the seven steps, how they are applied in the real world and other considerations for using RMF and eMass in your career.

The NIST Risk Management Framework (RMF) provides a process that integrates security, privacy, and cyber supply chain risk management activities into the system development lifecycle.


This risk-based approach to control selection and specification considers the effectiveness, efficiency, and constraints available due to applicable laws, directives, Executive Orders, policies, standards, or regulations.


By using the NIST Risk Management Framework (RMF), you can better manage organizational risk and ensure the success of your information security and privacy programs when operating within the government and defense industries.


Upon completion of this course, you will earn 4 CEUs towards the renewal of your CompTIA A+, Network+, Security+, Linux+, Cloud+, PenTest+, CySA+, or CASP+ certifications.


icon
Udemy Discount

The discount is applied through our link. Open the course from here and Udemy's current promotional price is applied at checkout on most courses, no code to type.

Some courses are excluded from Udemy's promotions. If the price does not drop, clear your browser cookies and use the button again.

icon
Instructor Details

Jason Dion

Jason Dion, CISSP No. 349867, is a former college professor and the lead instructor at Dion Training Solutions. He has multiple information technology professional certifications, including Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), Certified Network Defense Architect (CNDA), Digital Forensic Examiner (DFE), Digital Media Collector (DMC), CySA+, Security+, Network+, A+, PRINCE2 Practitioner, and ITIL. With networking experience dating back to 1992, Jason has been a network engineer, Director of a Network Operations and Security Center, and an Information Systems Officer for large organizations around the globe. 

He holds a Master’s of Science degree in Information Technology with a specialization in Information Assurance.

icon
More courses by Jason Dion

$16.99

$159.99

$99.99

$119.99

$124.99

$119.99

icon
More Hacking courses

$109.99

$27.99

$14.99

$84.99

$15.99

$11.99

icon
Reviews

4.6

1,558 ratings on Udemy

Select a bar to show only those reviews.Select the bar again to show every rating.

By Dennes Zorrilla on 4/25/2025

Great introduction into RMF. I think a fake organization(s) going through the RMF process as they were going along the steps would have been helpful to imagine how an organization would go through the steps and what can be expected of the processes to receiving an ATO and continuous monitoring.

By David Yan on 3/10/2025

I would have liked a demonstration of a scenario, of how the RMF process would work in actual practice. But, overall it was a very good course, very well presented. The two podcasts at the end was very helpful in providing some of that insight. However, the documentation, I find, could have been better written and formatted. A bit of side note, not one reflecting this course per se, but I was not allowed to take screenshots during the presentation, which is how I take quick notes. So, had the documentation, or resources, provided the charts and images, that would have helped a lot. Hence, not a perfect score. But, I hardly ever give perfect scores anyway. Always room to improve. Going to purchase a lot more course from this company, they offer CEU credits to satisfy CompTIA recertification.

By Elizabeth Best on 3/7/2025

I work daily in eMASS and am very familiar with RMF, and I thought this course was well done. I especially enjoyed the 2 podcasts at the end: "RMF in the Real World (Interview with Drew Church)" and "Automating RMF using eMASS (Interview with Rebecca Onuskanich) as both conversations really brought RMF and eMASS to life. Talking real world scenarios and making the topics easier for someone new or even experienced to understand. I would definitely recommend!

By Akwo-Fese Efimba on 12/31/2024

An illuminating introduction to world of risk management by large bureaucratic organisations such as US DoD. It was useful to know the degree of overlap between the NIST RMF and CSF, although I will be a practitioner of the CSF. Insightful examples of the practical applications of the RMF, which has given me better appreciation of the NIST CSF. Thank-you!

By Bernard Devroe on 9/4/2024

It was a great class. It addressed things that I questioned and reinforced my thinking in some areas. I love that you not only discussed theory but also took the time to discuss real-life applications, and the value of that is immeasurable.

By Evelin Pires Zego on 12/14/2023

The course is excellent for those who need to have their first contact with the framework. It's very well-detailed, with practical examples, quizzes, and, most interestingly, expert interviews. Congrats for your work. I highly recommend it.

By Yannick on 8/31/2023

An interesting course and well-detailed. As a cybersecurity professional wanting to transition to GRC I found this lesson helpful to the fact I am now feeling confident for any GRC-related interview or if hired I have an idea of what to expect and what relevant questions I can ask as a new GRC employee.

By Mike Harvey on 4/5/2023

As with the other courses I've taken by Jason, Very well thought out training videos that bring out the good point to know and understand. As a new CISSP doing my first RMF package for the USAF this was very helpful to bring out some of the items to be aware of.

By Anonymized User on 2/13/2023

Excellent course, providing both the textbook explanation and real-life examples about NIST RMF. Also, linking the steps in NIST RMF to NIST CSF is really helpful. Both Instructors have done a great job in terms of explaining the content. Looking forward to listening to their NIST CSF course.

By Fedelis Andonganyung on 1/18/2023

Teaching IT related courses and performing technical operations have been part of my work in the IT field for quite some time. In addition to holding a postgraduate diploma in information resource management, I am currently completing a dissertation in the field of information technology management. Besides Security+, Network+ Server+, MCSA Server 2012, and MCSE, CCNA R&S, I am passionate about networking. As an IT Network Engineer, I strongly believe that being able to build networks without knowing the critical part of the network that is securing the network won't make me successful. That is why I am planning on enrolling in a few more courses or having enough knowledge when it comes to information security and cyber security.

Showing all 10 reviews on CourseDuck

Read all 1,558 reviews on Udemy

icon
Quality Score

No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 92 / 100