Learn RMF — Interactive Courses for Every Role

Short, interactive RMF courses built from the NIST source — the RMF lifecycle, SP 800-53, FedRAMP 20x, and nine role paths. Educational training.

• FedRAMP 20x & the Consolidated Rules for 2026 — FedRAMP Consolidated Rules for 2026 (rules release 2026.10.13.01; site release 2026.10.14.01); 3 modules, 8 lessons.
• The FedRAMP Key Security Indicators (KSIs) — FedRAMP Consolidated Rules for 2026 — KSI set (46 KSIs, 10 categories); 3 modules, 11 lessons.
• GRC Tools in Practice — RMF Practice · GRC Tooling; 3 modules, 11 lessons.
• Be the 3PAO (FedRAMP Recognized Assessor) — RMF Role Path · FedRAMP 20x / CR26; 3 modules, 11 lessons.
• Be the Authorizing Official (AO) — RMF Role Path · SP 800-37 Rev 2; 3 modules, 12 lessons.
• Be the Common Control Provider (CCP) — RMF Role Path · SP 800-37 Rev 2; 3 modules, 11 lessons.
• Be the ISSM — RMF Role Path · SP 800-37 Rev 2; 3 modules, 11 lessons.
• Be the ISSO — RMF Role Path · SP 800-37 Rev 2; 3 modules, 11 lessons.
• Be the Privacy Officer — RMF Role Path · SP 800-37 Rev 2; 3 modules, 11 lessons.
• Be the Risk Executive — RMF Role Path · SP 800-39 / 800-37 Rev 2; 3 modules, 10 lessons.
• Be the Security Control Assessor (SCA) — RMF Role Path · SP 800-37 Rev 2; 3 modules, 11 lessons.
• Be the System Owner (SO) — RMF Role Path · SP 800-37 Rev 2; 3 modules, 12 lessons.
• NIST SP 800-18r2: System Plans — Security, Privacy & C-SCRM — NIST SP 800-18 Rev 2 (final, June 2026); 3 modules, 8 lessons.
• NIST SP 800-37: The Risk Management Framework (RMF) — NIST SP 800-37 Rev 2; 3 modules, 20 lessons.
• NIST SP 800-53: The Security & Privacy Control Catalog — NIST SP 800-53 Rev 5; 2 modules, 10 lessons.
• NIST SP 800-53A: Assessing Security & Privacy Controls — NIST SP 800-53A Rev 5; 2 modules, 13 lessons.
• NIST SP 800-53B: Control Baselines & Tailoring — NIST SP 800-53B; 2 modules, 7 lessons.

RMF Coach is an educational simulation and training product — not an authorization, and not affiliated with or endorsed by NIST or FedRAMP.