Updated in May 2025.

This course now features Coursera Coach! A smarter way to learn with interactive, real-time conversations that help you test your knowledge, challenge assumptions, and deepen your understanding as you progress through the course. This comprehensive course delves into the NIST Risk Management Framework, guiding you through the process of selecting, implementing, and monitoring security controls. Beginning with an overview of control selection, you will explore various control frameworks, assess applicable laws and standards, and learn how to tailor control baselines to organizational needs. The course then transitions to implementing these controls, emphasizing the importance of documentation and approval processes to ensure compliance and system security. Next, the course covers the crucial steps involved in assessing and remediating security controls. You will learn to develop assessment plans, conduct thorough evaluations, and analyze results to identify compliance gaps. The course also provides insight into effective risk remediation strategies, helping you understand how to prioritize, and address identified risks to maintain a robust security posture. Finally, the course addresses continuous monitoring and change management, teaching you how to maintain control effectiveness over time. You will explore change management techniques, configuration controls, and best practices for handling system disposal. This advanced training equips you with the necessary skills to manage complex security environments and ensure continuous risk mitigation. This course is designed for cybersecurity professionals, risk managers, and IT auditors who have a foundational understanding of cybersecurity principles. Familiarity with basic risk management concepts and the NIST framework is recommended.