Energy Huntsville

Speaker: Stephen Brewster, Cybersecurity Manager

Johnson Controls

Subject: Risk Management Framework: Made Simple.

This is will be an interactive overview of the Risk Management Framework. The presentation will entail the following discussions:

• What are the Steps? (RMF Steps 1-6) Risk Management Framework

We will take a cursory look into the 6 Steps of the RMF. Our perspective will be that of the vendor or contractor. Our discussion will provide key lessons learned which have proven valuable to overcoming RMF hurdles.

• Who’s job is it anyway? (Roles and Responsibilities)

Often time it is unclear as to who is responsible for executing key activities during the 6 RMF Steps. This discussion will attempt to shed light on the RMF roles and responsibility at the contract execution level.

• What is in the RMF Package (Path to ATO) Authority to Operate

Our ultimate goal as a vendor is to provide highest quality of services and work products to ensure the success of the customers mission. This discussion will provide a cursory look at the key documents included in an RMF package from a contractors perspective.

• Let’s get an ATO (Energy Widget 6.0)

This is will be an interactive exercise in which the participants will execute the RMF process and obtain and ATO.