NIST RMF Use Case Accelerator

The NIST RMF Use Case Accelerator gives customers an operational head-start when adopting the NIST RMF. When the accelerator is downloaded and activated in the GRC applications, pre-configured policies, scopes (profile, profile type recommendations), indicators, risks and other GRC elements appear.

Note:

Starting with version 10.1.0, the NIST RMF Use Case Accelerator will be supported only for customers who currently use the product. New and existing customers should consider using the GRC: Continuous Authorization Monitoring application. For details, Continuous Authorization and Monitoring.

Who uses the NIST RMF Use Case Accelerator

Persona	Description
Risk executive	Ensures that risks are identified and managed consistently across the organization. Defined access to the following sections: NIST RMF > Overview NIST RMF > Categorize NIST RMF > Select NIST RMF > Implement NIST RMF > Assess NIST RMF > Authorize NIST RMF > Monitor NIST RMF > Content
Authorizing officer	Confirms that a target is operating within an acceptable level of risk. Defined access to the following sections: All Modules in NIST RMF > Overview > NIST RMF > Authorize > Targets NIST RMF > Authorize > My Approvals
Security officer	Provides insight and understanding into the current security procedures and capabilities for a target and implements the controls, managing issues, and completing remediation tasks Defined access to the following sections: NIST RMF > Categorize NIST RMF > Select > Targets NIST RMF > Implement NIST RMF > Assess > Overview NIST RMF > Assess > Control Attestations NIST RMF > Assess > Control Effectiveness NIST RMF > Assess > Remediation Tasks NIST RMF > Authorize NIST RMF > Monitor
Control provider	Assists in the creation and tailoring of security controls within the organization. Defined access to the following sections: NIST RMF > Select > Review Baseline Controls NIST RMF > Select > Tailor Baseline Controls NIST RMF > Content
Sys admin	Access to the following sections: NIST RMF > Administration
GRC admin	Access to the following sections: NIST RMF > Administration

• Install the NIST RMF Use Case Accelerator
  The NIST RMF Use Case Accelerator is used with the GRC core applications: Policy and Compliance Management, Risk Management, and Audit Management applications.
• Verify the NIST RMF Use Case Accelerator
  After installing the GRC: NIST RMF Use Case Accelerator, review the NIST RMF application structure, core content, and demo data, if selected during installation.
• NIST RMF supporting concepts
  Familiarize yourself with these concepts, developed from the NIST RMF guidance.
• NIST RMF Use Case Accelerator dashboards and reports
  The NIST RMF Use Case Accelerator contains various reports displayed on different dashboards, available within each of the sections in the NIST RMF process: Categorize, Select, Implement, Assess, Authorize, and Monitor.
• NIST RMF process overview
  The NIST RMF navigation structure facilitates the management of the NIST security controls through activities of categorization, selection, implementation, assessment, authorization, and monitoring. These security controls are described in the NIST 800-37.r1 special publication.