NIST Risk Management Framework (RMF) - FOR BEGINNERS (Udemy.com)
Go from Zero to Hero | Master the RMF via Simulated Learning | Learn How to Become FISMA Compliant
Created by: Paul Oyelakin
Last updated September 2025
What you will learn
- Gain True to life experience of how to complete a system Assessment and Authorization (A&A) through simulated learning
How it compares
Against the other 1,210 rated Udemy courses in Business on CourseDuck:
- Rating4.6 out of 5higher than 74% of them
- Reviews2,754#244 of 1,211 by number of reviews
- Length4.9 hourslonger than 69% of them
- Last updatedSeptember 2025more recently than 50% of them
Course Description
In this course, I will teach you the Risk Management Framework (RMF). My goal is to show you how to complete a security Assessment and Authorization process (also known as system A&A). If you don’t know what all those terms mean, don’t worry, we will break it all down in this course.
I like to cater to beginners, because well… I used to be one. So before we get into FISMA compliance, chapter 1 will teach you some foundation IT concepts. I do this by getting you to understand what an enterprise network is and what is takes to support one.
After that I’m going to show you how to draft an System Security Plan (SSP), How to assess the SSP, document your POA&M and submit your authorization package. These are key components to completing the RMF process.
This course is taught from a true to life approach. That means that I put you in a simulated work environment where you’re the security analyst working with me on our system A&A project. I did this because I think that’s the best way for you retain the information you will learn in this course.
Oh! And since we’re dealing with security compliance, it can start to feel a bit monotone at times, so I try to throw in a few jokes here and there to make sure you’re alert and keeping up. Some people call my jokes corny, others call them dad jokes. I call them funny! You be the judge.
Ok, enough talking let’s get to work. Fasten your keyboard, we’re blasting off to FISMA!
Instructor Details
- 4.6 Rating
2,754 Reviews
Paul Oyelakin
Paul Oyelakin, founder of PJ Pros, is an experienced IT Security Professional with a broad-range of technical and management skills. He has more than 10 years of Information Security experience.
Past accomplishments include but is not limited to: application development (SDLC), Cloud migrations, risk management, data analytics, continuance of operations plans (COOP), system accreditation (A&A), disaster recovery, contingency planning, and security awareness training
His educational accomplishments are: Master’s of Cybersecurity (M.S.), Masters of Business Administration (MBA), Certified Ethical CEH, Cisco Certified Entry Network Technician (CCENT), Project Management Professional (PMP), Certified Information System Security Professional (CISSP), Professional Scrum Master I (PSM I)
More Business courses
Hiring and Interview Skills to Recruit Top Talent as Manager (2026)
5.0 (267 Reviews)
Provider: Udemy
Time: 5.9h
$10.99
Directing the Actor: A USC course with Nina Foch (2016)
4.9 (1,379 Reviews)
Provider: Udemy
Time: 4h
$13.99
Lean Management: Just-In-Time JIT Certification (Accredited) (2026)
4.9 (1,219 Reviews)
Provider: Udemy
Time: 2.2h
$13.99
LinkedIn Marketing And Personal Branding Masterclass (2026)
4.9 (137 Reviews)
Provider: Udemy
Time: 1.4h
$19.99
Personal Branding Mastery: Elevate Your Career and Business (2026)
4.9 (134 Reviews)
Provider: Udemy
Time: 3.9h
$19.99
Reviews
By Sonia Ayabarreno on 9/23/2026
Great training! The lessons were easy to understand. I like the fact that the quizzes are right after almost each lesson when the information is still fresh on your mind. This was a beginners for sure and I really appreciated that.
By Michael Valcicak on 9/15/2026
I have been searching for an RMF course that would finally go hands on to actually show you the filling out an SPP and other documentation, but also how to find the information you NEED. Some information is a touch out of date, but everything is still applicable. This feels like THE course if you want an actual understanding of RMF and A&A processes at a high level. Thank you, sir!
By Pedro Perez on 9/10/2026
This is good training material. I learned a lot and I am better prepared. To improve this course, it would be better to redo the videos and remove information that don't apply such as links, out of order videos and documents, also, the quizzes are too much and some of the questions were not needed or just too easy and the simulation could be better at the end of the course. Overall, the course has everything I needed and would follow the instructor for other courses.
By Caroline Torres Marin on 7/15/2026
I’m very thankful for this beginner‑friendly class. I’m learning a lot, and I appreciate the instructor’s effort to break down complex topics. One thing that would help me even more is having a clear anchor or recap at the end of each video. With the many substeps and tasks mentioned, I sometimes lose track of which RMF step we’re in. The AI assistant has been great for clarifying examples. I also noticed that the sound levels vary between videos.
By Gerrid Pete on 7/6/2026
I've taken several RMF courses on different training platforms but this is by far the best. It explained every concept as if I was a beginner and the instructor provided real-world context that bridged the gap between complex theoretical guidelines and actual day-to-day execution. Unlike other courses that simply read NIST Special Publications verbatim, this course breaks down the RMF process into highly digestible, practical phases.
By SHIVKUMAR RAMAMURTI on 4/6/2026
Lots of spelling mistakes In one of the lessons the tutor says Gender is not PII Vendors and ISPs are unique to US geography GDPR or California Data protection not covered
By Rolando Muchanga on 3/3/2026
Curso bem explicado e facil de saber e aprender
By Corey Dyke on 2/11/2026
Paul does an excellent job of using a fake org in order to consistently mimic the FISMA compliance lifecycle. The practice sections on implementation statements are invaluable and help illuminate the core efforts needed.
By Tony Prusa on 1/5/2026
too basic, but i guess i asked for the beginners course.... thought that meant nist beginners .... not what's that tv doing sitting on my desk? why's there a keyboard attached to it
By Tuan Gormican on 12/22/2025
I really like how basic the information is. I feel like the training is starting at the lowest building block and building up from there.
By Adedamola on 12/20/2020
Very explanatory and user friendly
By Rachel Carmichael on 12/20/2020
Engaging and easy to follow
Quality Score
No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.
Overall Score : 92 / 100






