Summary

In this chapter, we refreshed ourselves on the stages of the NIST RMF, readying ourselves for our own implementation. We took it a step further beyond the foundational aspects covered previously, focusing on the dynamic nature of risk management in cybersecurity. We then examined a detailed case study of the University of Florida’s implementation of the NIST RMF in managing CUI. It outlined the background, collaborative efforts, technical implementation, and security goals of the project, providing a practical example of the RMF’s application in a specialized context.

Throughout the chapter, we placed an emphasis on understanding organizational context, stakeholder engagement, training, and the importance of documentation and communication in successfully implementing and adapting the RMF. This chapter aims to guide you in applying the RMF, no matter the organizational setting, ensuring that your own cybersecurity efforts will align with your organization&...