Published: 6/6/2024
CMS FISMA Continuous Tracking System (CFACTS) training announcement
This is an introductory course designed for junior ISSOs and CRAs new to the CMS Cybersecurity program.
CFACTS Training:
Join us for a two-day training session designed to provide and enhance your knowledge and skills. This is an introductory course designed for junior ISSOs and CRAs new to the CMS Cybersecurity program. This course will use the CMS FISMA Continuous Tracking System (CFACTS) mapped to the steps within the Risk Management Framework (RMF). This is NOT a “HANDS ON” course using the CFACTS tool.
Training will cover:
• NIST Special Publication 800-37; Risk Management Framework for Information Systems
• NIST Special Publication 800-53; Security and Privacy Controls for Federal Information Systems
• Understanding Roles and Responsibilities
• Categorizing and Implementing Security Controls
• Security Assessment Remediation Plan of Action Milestones
• System Security and Privacy Plan (SSPP)
• Authorization to Operate (ATO) Packages to Request for Certification of the FISMA System
How to Register:
Secure your spot by sending an email to cmsispgtrainers@cms.hhs.gov with the following information.
Subject Line: CFACTS Training Registration
Your Name
Date of Training Course
• June 25 and June 26
• August 20 and August 21
• October 29 and October 30
Once you send your email, our team will confirm your registration and provide you with further details.
We look forward to your participation in CFACTS Training!
About the publisher:
The Training and Awareness Team works to build a more resilient and knowledgeable cybersecurity workforce at CMS by connecting people to helpful information and training opportunities.
