Skip to content
UdemyBusinessPaid courseAll LevelsCertificate

NIST Risk Management Framework (RMF) - FOR BEGINNERS (Udemy.com)

Go from Zero to Hero | Master the RMF via Simulated Learning | Learn How to Become FISMA Compliant

Created by: Paul Oyelakin

Last updated September 2025

icon
What you will learn

  • Gain True to life experience of how to complete a system Assessment and Authorization (A&A) through simulated learning

How it compares

Against the other 1,210 rated Udemy courses in Business on CourseDuck:

  • Rating4.6 out of 5higher than 74% of them
  • Reviews2,754#244 of 1,211 by number of reviews
  • Length4.9 hourslonger than 69% of them
  • Last updatedSeptember 2025more recently than 50% of them

icon
Course Description

In this course, I will teach you the Risk Management Framework (RMF). My goal is to show you how to complete a security Assessment and Authorization process (also known as system A&A). If you don’t know what all those terms mean, don’t worry, we will break it all down in this course. 

I like to cater to beginners, because well… I used to be one. So before we get into FISMA compliance, chapter 1 will  teach you some foundation IT concepts. I do this by getting you to understand what an enterprise network is and what is takes to support one.

After that I’m going to show you how to draft an System Security Plan (SSP), How to assess the SSP, document your POA&M and submit your authorization package. These are key components to completing the RMF process.

This course is taught from a true to life approach. That means that I put you in a simulated work environment where you’re the security analyst working with me on our system A&A project. I did this because I think that’s the best way for you retain the information you will learn in this course.

Oh! And since we’re dealing with security compliance, it can start to feel a bit monotone at times, so I try to throw in a few jokes here and there to make sure you’re alert and keeping up. Some people call my jokes corny, others call them dad jokes. I call them funny! You be the judge.

Ok, enough talking let’s get to work. Fasten your keyboard, we’re blasting off to FISMA!

icon
Udemy Discount

The discount is applied through our link. Open the course from here and Udemy's current promotional price is applied at checkout on most courses, no code to type.

Some courses are excluded from Udemy's promotions. If the price does not drop, clear your browser cookies and use the button again.

icon
Instructor Details

Paul Oyelakin

Paul Oyelakin, founder of PJ Pros, is an experienced IT Security Professional with a broad-range of technical and management skills. He has more than 10 years of Information Security experience.

Past accomplishments include but is not limited to: application development (SDLC), Cloud migrations, risk management, data analytics, continuance of operations plans (COOP), system accreditation (A&A), disaster recovery, contingency planning, and security awareness training

His educational accomplishments are: Master’s of Cybersecurity (M.S.), Masters of Business Administration (MBA), Certified Ethical CEH, Cisco Certified Entry Network Technician (CCENT), Project Management Professional (PMP), Certified Information System Security Professional (CISSP), Professional Scrum Master I (PSM I) 

icon
More Business courses

$10.99

$13.99

$13.99

$59.99

$19.99

$19.99

icon
Reviews

4.6

2,754 ratings on Udemy

Select a bar to show only those reviews.Select the bar again to show every rating.

By Sonia Ayabarreno on 9/23/2026

Great training! The lessons were easy to understand. I like the fact that the quizzes are right after almost each lesson when the information is still fresh on your mind. This was a beginners for sure and I really appreciated that.

By Michael Valcicak on 9/15/2026

I have been searching for an RMF course that would finally go hands on to actually show you the filling out an SPP and other documentation, but also how to find the information you NEED. Some information is a touch out of date, but everything is still applicable. This feels like THE course if you want an actual understanding of RMF and A&A processes at a high level. Thank you, sir!

By Pedro Perez on 9/10/2026

This is good training material. I learned a lot and I am better prepared. To improve this course, it would be better to redo the videos and remove information that don't apply such as links, out of order videos and documents, also, the quizzes are too much and some of the questions were not needed or just too easy and the simulation could be better at the end of the course. Overall, the course has everything I needed and would follow the instructor for other courses.

By Caroline Torres Marin on 7/15/2026

I’m very thankful for this beginner‑friendly class. I’m learning a lot, and I appreciate the instructor’s effort to break down complex topics. One thing that would help me even more is having a clear anchor or recap at the end of each video. With the many substeps and tasks mentioned, I sometimes lose track of which RMF step we’re in. The AI assistant has been great for clarifying examples. I also noticed that the sound levels vary between videos.

By Gerrid Pete on 7/6/2026

I've taken several RMF courses on different training platforms but this is by far the best. It explained every concept as if I was a beginner and the instructor provided real-world context that bridged the gap between complex theoretical guidelines and actual day-to-day execution. Unlike other courses that simply read NIST Special Publications verbatim, this course breaks down the RMF process into highly digestible, practical phases.

By SHIVKUMAR RAMAMURTI on 4/6/2026

Lots of spelling mistakes In one of the lessons the tutor says Gender is not PII Vendors and ISPs are unique to US geography GDPR or California Data protection not covered

By Rolando Muchanga on 3/3/2026

Curso bem explicado e facil de saber e aprender

By Corey Dyke on 2/11/2026

Paul does an excellent job of using a fake org in order to consistently mimic the FISMA compliance lifecycle. The practice sections on implementation statements are invaluable and help illuminate the core efforts needed.

By Tony Prusa on 1/5/2026

too basic, but i guess i asked for the beginners course.... thought that meant nist beginners .... not what's that tv doing sitting on my desk? why's there a keyboard attached to it

By Tuan Gormican on 12/22/2025

I really like how basic the information is. I feel like the training is starting at the lowest building block and building up from there.

By Adedamola on 12/20/2020

Very explanatory and user friendly

By Rachel Carmichael on 12/20/2020

Engaging and easy to follow

Showing 12 of 139 reviews

icon
Quality Score

No CourseDuck member has rated this course yet. Taken it? Give each part a thumbs up or down.

Content Quality
/
Video Quality
/
Qualified Instructor
/
Course Pace
/
Course Depth & Coverage
/

Overall Score : 92 / 100