ConvoCourses

What Cybersecurity Deep Dive Should We Get Into

contact@convocourses.com 
waiting for your suggestions

Convocourses Podcast: Plan of Action and Milestone (POAM content)

To download the POAM in this podcast go to convocourses.com
 
A Plan of Action and Milestones (POA&M) is a document that identifies tasks needing to be accomplished to remediate or mitigate risks to a system. It is a requirement under NIST 800-53, which is a guideline for federal agencies and contractors to follow when managing their information security programs. A NIST 800 POA&M, therefore, is a POA&M that is developed in compliance with NIST 800-53 standards.
The NIST 800 POA&M details the resources required to accomplish the elements of the plan, any milestones for meeting the tasks, and scheduled milestone completion dates [1]. The document is continuously updated as progress is made towards remediation, making it a living, dynamic document [2]. The POA&M is a critical tool for anyone responsible for tracking and reporting compliance issues or risks identified for a system [3].
NIST 800-53r5 recommends the use of security automation software to support the POA&M process. This software can help with tracking POA&M items and milestones, and integrate with ticketing systems for streamlined management of remediation activities [2].
 
 
 

Convocourses Podcast: What is GRC Example using CIS and NIST

GRC is governance, risk and compliance. The governments framework for GRC is NIST 800-37, but there are other ways to implement GRC.
For more about the NST 800 check out:
https://securitycompliance.thinkific.com/courses/rmf-isso-foundations
 

Convocourses Podcast: Cybersecurity GRC questions

We answer some GRC questions. 

Convocourses Podcast: GRC tasks and information system security officer

Here are some of these tasks you will do as a GRC professional.

Convocourses Podcast: 2023 Goals

Here is what I want to do in 2023. HOw about you!!?

Convocourses Podcast: Sexism does happen in IT

 
The first step of getting better is the recognize a problem. Sexism is a problem in IT and cybersecurity. 

Convocourses Podcast: NIST 800 PL and open topics

We talk about NIST 800 PL and then about 2 hours of open topics on cybersecurity jobs, GRC and so much more. 
 
join us: http://convocourses.com
Follow along: https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search#/controls?version=5.1&security_baseline=High
Buy my F%# book: https://www.amazon.com/dp/B0B6PWGXJZ?binding=paperback&searchxofy=true&ref_=dbs_s_aps_series_rwt_tpbk&qid=1670091918&sr=8-1 
 
video:
https://youtu.be/Fa_XxdVlMfo
 

Convocourses Podcast: NIST 800 SA Controls and Open Topics

 
https://linktr.ee/convocourses
 
free resume template:
https://securitycompliance.thinkific.com/courses/resume
amazon:
https://www.amazon.com/Cybersecurity-Jobs-Resume-Marketing-Book-ebook/dp/B0BJC3ZTMF
 

Convocourses Podcast: NIST 800 PE (Physical Security and Environmental) Controls

http://convocourses.com