EP 80: Risk Management Framework with Drew Church

EP 80: Risk Management Framework with Drew Church

Author: Kip Boyle September 30, 2022 Duration: 1:06:26
Your Cyber Path: How to Get Your Dream Cybersecurity Job
BusinessCareersEducationHow ToSelf ImprovementTechnology

https://www.yourcyberpath.com/80/

In this episode, Kip and Jason, along with special guest Drew Church, take a closer look at the NIST risk management framework to help facilitate selecting the right kind of security for your system and help clarify how to direct resources towards the right controls.

Drew Church, RMF expert and global security strategist at Splunk, is here to talk about the different steps of RMF, the importance of preparation work, and understanding the bigger picture of what you want your system to accomplish.

They also go through the seven steps of RMF in detail: prepare, categorize, select, implement, assess, authorize, and monitor, highlighting the best procedures and ways of going about completing each step, as RMF is highly structured. They also call attention to soft skills and how invaluable they are throughout your cybersecurity career.

Drew and Jason also explain different terms, including STIGS, DIKW pyramid, and POAM, and their importance while developing the RMF.

Finally, they go over various tips and tricks to make sure you are ready for your assessment, like knowing what your system is going to be graded on and maybe also testing beforehand, as well as having in mind that the assessors are not going to be experts in your system. 

What You’ll Learn

●     What is RMF (and what it’s not)?

●     Are RMF and CSF the same?

●     What are the seven steps of the RMF?

●     How important is the DIKW pyramid in RMF?

●     What is the secret to success of system assessments against RMF controls?

Relevant Websites For This Episode

●     www.YourCyberPath.com

●     www.nist.gov

●   www.splunk.com

Other Relevant Episodes

●     Episode 62 - The NIST Cybersecurity Framework

●     Episode 56 - Cybersecurity Careers in the Defense Sector

●    Episode 22 - Impress Us with Your Resume Skills Section


Navigating a career in cybersecurity can feel like a maze without a clear map. Your Cyber Path: How to Get Your Dream Cybersecurity Job, hosted by Kip Boyle, cuts through the noise by focusing on the perspective of the people who actually make hiring decisions. This isn't just generic advice; it's a direct line to understanding what employers are truly looking for in candidates, from entry-level roles to advanced positions. Each episode delves into the practical, often unspoken, steps needed to build your skills, craft your resume, and ace interviews in this competitive field. You'll hear concrete strategies for bridging the gap between where you are now and that ideal job, all framed within the broader contexts of business, technology, and personal growth. Tune into this podcast for honest conversations that translate complex career pathways into actionable plans, helping you move forward with confidence. Whether you're considering a pivot or aiming to advance, the guidance here is rooted in real-world hiring dynamics, making it a valuable resource for anyone serious about building a future in cybersecurity.
Author: Language: English Episodes: 100

Official website RSS
Your Cyber Path: How to Get Your Dream Cybersecurity Job
Podcast Episodes
EP 25: Evaluating Team Fit and Shared Direction [not-audio_url] [/not-audio_url]

Duration: 31:02
You’ve found a great looking job. Now: How do you evaluate whether you’ll fit into the team? Do you want to go in the same direction as them? And, how do hiring managers evaluate candidates for fit and direction? Listen…
EP 24: How to Navigate a Skills Gap [not-audio_url] [/not-audio_url]

Duration: 20:09
What if you have a gap between your current skills and the employer’s required skills for your dream cybersecurity job? How do you navigate that gap? Listen in to find out. Want to get your dream cybersecurity job? Our h…
EP 23: On Your Resume - Job History [not-audio_url] [/not-audio_url]

Duration: 35:05
What goes in the job history section of your resume? How much detail should you include? And, how do hiring managers evaluate that section? Want to get your dream cybersecurity job? Our highly rated masterclass will put…
EP 21: Your Reputation Matters to Us [not-audio_url] [/not-audio_url]

Duration: 35:02
Your reputation is so important to the hiring manager. And one of the biggest drivers of your reputation is your personal brand. On a related note, how did you left your last job. Did you leave it well? Want to get your…
EP 22: Impress Us With Your Resume Skills Section [not-audio_url] [/not-audio_url]

Duration: 21:38
The Skills Section of your resume needs to match up to the job you're pursuing. What goes in there? How much detail should there be? How do cybersecurity hiring managers evaluate that section? What common mistakes should…
EP 20: See you next week! [not-audio_url] [/not-audio_url]

Duration: 1:40
As we announced in the last episode, Wes and I have switched to an every-other-week schedule. Unfortunately, this is the first "off week" so there's no full episode today. We appreciate you and we’ll see you next week! -…
EP 19: Fascinate Us With Your Resume Summary Statement [not-audio_url] [/not-audio_url]

Duration: 24:33
Your Summary Statement at the top of your resume is the most important section. It’s your chance to hook us into reading the rest of your resume. Here’s how we’re hoping you’ll write it. Want to get your dream cybersecur…
EP 18: Cybersecurity Job Market During COVID-19 Quarantine [not-audio_url] [/not-audio_url]

Duration: 20:55
What's it like to try and get a cybersecurity job during the COVID-19 pandemic? It's clear the hiring market has shifted. But how? And what does it mean to you? My guest Wes Shriner is a manager on the cybersecurity team…

«1...678910