ConvoCourses

Cybersecurity Consulting vs GRC (ISSO) and Clearance

https://convocourses.net
 
video version here:
https://youtube.com/live/vRYMrtzf5ms
 

Convocourses Mini Podcast: Security+ and Azure Fundamentals what next

check out https://www.convocourses.com for more

Convocourses Podcast: Finding Job that will give a clearance

http://convocourses.net
The keywords you are looking for are "eligible for a clearance"
https://youtube.com/live/px9FDENHrvc
 

Convocourses Mini Podcast: RMF Security Control Assessor book

 
This book will be released for free on the convocourses newsletter. Join now at convocourses.com

Convocourses Podcast: How I was able to work internationally and Open topics

Here is the video:
https://youtube.com/live/1uyRVmqULFo
Join us at convocourses.com
huge discounts at https://convocourses.net

Convocourses Podcast: Open Topics about cybersecurity jobs

http://www.convocourses.net

What Cybersecurity Deep Dive Should We Get Into

contact@convocourses.com 
waiting for your suggestions

Convocourses Podcast: Plan of Action and Milestone (POAM content)

To download the POAM in this podcast go to convocourses.com
 
A Plan of Action and Milestones (POA&M) is a document that identifies tasks needing to be accomplished to remediate or mitigate risks to a system. It is a requirement under NIST 800-53, which is a guideline for federal agencies and contractors to follow when managing their information security programs. A NIST 800 POA&M, therefore, is a POA&M that is developed in compliance with NIST 800-53 standards.
The NIST 800 POA&M details the resources required to accomplish the elements of the plan, any milestones for meeting the tasks, and scheduled milestone completion dates [1]. The document is continuously updated as progress is made towards remediation, making it a living, dynamic document [2]. The POA&M is a critical tool for anyone responsible for tracking and reporting compliance issues or risks identified for a system [3].
NIST 800-53r5 recommends the use of security automation software to support the POA&M process. This software can help with tracking POA&M items and milestones, and integrate with ticketing systems for streamlined management of remediation activities [2].
 
 
 

Convocourses Podcast: What is GRC Example using CIS and NIST

GRC is governance, risk and compliance. The governments framework for GRC is NIST 800-37, but there are other ways to implement GRC.
For more about the NST 800 check out:
https://securitycompliance.thinkific.com/courses/rmf-isso-foundations
 

Convocourses Podcast: Cybersecurity GRC questions

We answer some GRC questions.