FISMA Compliance
In this course, you will be introduced to Federal Information Security Modernization Act (FISMA) Compliance. You will learn about the NIST Risk Management Framework (RMF), FISMA reporting and metrics, roles and responsibilities, as well as continuous monitoring and maturity.

Course Content
Upon completing this course, you should be able to:
- Define cardholder data (CHD) and its significance within the PCI DSS framework
- Describe the scope and applicability of PCI DSS, including merchant levels and service provider roles
- Identify and explain the 12 core PCI DSS requirements and their control objectives
- Differentiate the types of security controls required (network, access, encryption, logging) and when they apply
- Summarize PCI DSS assessment methods, including SAQs, RoCs, and the roles of QSAs and ASVs
- Identify best practices for ongoing PCI compliance, including segmentation, vendor oversight, and continuous monitoring














