Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

View Schedule & Pricing
Get a Quote
Book a Meeting

Popular Searches

CISSP Security+ AWS Azure CCNA CompTIA Cloud Cybersecurity

Quick Links

Training Camp's 3-day Risk Management Framework V2.0 for DoD/IC boot camp covers RMF implementation, authorization processes, and continuous monitoring for Defense and Intelligence Community systems with a

Award-Winning Training Experience

Master RMF V2.0 for DoD/IC

Official RMF V2.0 Boot Camp. Expert cybersecurity framework training, with proprietary courseware, sample RMF process documents, lab guide, and instructor support included. Train like your career depends on it.

Verified for 2026 RMF-DOD-2 Exam
View Price & Schedules Get Team Quote
Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Certified Instructors

Learn from the Best

Expert Designed

For Real-World Success

Learn from the Experts

Learn Real-World Hands-on Skills. Hands-On. ATO-Ready.

3 intensive days for DoD and Intelligence Community personnel responsible for getting systems through Authorization to Operate (ATO).

Program Abstract

REF: RMF-DOD-2 6
Curriculum aligned to the latest Exam Outline.
Format Live, Instructor-Led
Duration 3

RMF for DoD and IC, Built Around the ATO.

This intensive 3-day boot camp covers the Risk Management Framework as DoD and Intelligence Community organizations actually run it. You’ll work through the complete authorization lifecycle, categorization, control selection, implementation, assessment, and authorization, specifically for systems under CNSSI 1253. Coverage includes eMASS workflow, RMF Knowledge Service, DoD 8510.01, DFARS 252.204-7012, ICD 503, and FedRAMP touchpoints. Hands-on labs walk realistic DoD system scenarios so you leave knowing how to move a package forward, not just describe one.

DoD and IC Specific.

Curriculum addresses CNSSI 1253, eMASS, DoD 8510.01, ICD 503, and the authorization workflows used by DoD components and IC elements. Not the generic federal civilian version with a sticker on it.

Full ATO Lifecycle.

From categorization through continuous monitoring, every step gets a lab. You see what ISSO, ISSM, security control assessor, and AO roles each contribute, and where packages typically stall.

Aligned to CGRC.

Curriculum aligns with the ISC2 CGRC certification domains, so if you decide to certify later, the foundation is already in place. A strong starting point whether or not you pursue the cert.

·
Training materials including official courseware and study guides
Practitioner Led
Instructors are working security professionals, not just trainers.

"I don't teach from a textbook. I teach what happens in the SOC when the alert fires."

Jeff Porch

VP Ed. Services • CISSP, CISM CISSP: Certified Information Systems Security Professional. CISM: Certified Information Security Manager.

Choose Your Delivery Mode.

Same Curriculum
In-person classroom training session
A

In-Person

Immersive classroom instruction with direct instructor access, hands-on labs and peer collaboration.

  • Face-to-face instruction
  • On-site exam option
Student attending live online training
B

Live Online

The same instructors and curriculum, delivered live from anywhere on our virtual learning platform.

  • Zero travel required
  • Interactive breakout rooms
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Trusted by Thousands

Learn RMF from practitioners who have moved real packages through authorization, with training backed by 25 years of Training Camp boot camp experience.

Clock icon

Certificate and CPE Credits

Leave with a Training Camp certificate of completion and CPE credits for certifications you already hold. RMF is a federal process, not a certification.

Flower icon

Free Course Retake

Retake the RMF course free within one year, and keep 180 days of instructor access while you apply RMF to your own authorization packages.

Light bulb icon

DoD and IC Focus

Master the full authorization lifecycle for Defense and Intelligence Community systems under CNSSI 1253. Day 2 targets DoD-specific overlays and continuous monitoring scenarios.

Stars icon

RMF in Demand

Every DoD and IC system requires RMF authorization, putting practitioners in critical demand. The 3-day RMF boot camp trains contractors, military personnel, and analysts.

Sunglasses icon

Ongoing Mentoring

Support continues after class ends. RMF graduates retain access to their instructor and valuable RMF resources while moving their own packages through authorization.

Risk Management Framework V2.0 for DoD/IC Boot Camp

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    RMF Certification
    Syllabus

    A structured path designed for working professionals.
    Each day builds on the last—momentum is everything.

    Request Info

    MODULE_ID: PREP

    Live Training QS: ~5
    BEFORE CLASS
    Critical Path

    Before Class

    Before class, review NIST SP 800-37 Rev.
    L.prep.1
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: RMF-DOD-01

    Live Training QS: ~5
    DAY 1
    Critical Path

    Introduction to RMF 2.0 and Risk Analysis

    NIST SP 800-37 Rev. 2 Seven Steps and DoD Adoption
    L.01.1
    DoDI 8510.01 Risk Management Framework for DoD Systems
    L.01.2
    DoDI 8500.01 Cybersecurity and DoD 8140 Workforce Requirements
    L.01.3
    CNSSI 1253 Categorization and Control Selection for National Security Systems
    L.01.4
    ICD 503 and IC Reciprocity for Intelligence Community Systems
    L.01.5
    DFARS 252.204-7012, NIST SP 800-171, and CMMC Touchpoints
    L.01.6
    The 2025 Cybersecurity Risk Management Construct (CSRMC) and RMF Transition
    L.01.7
    Lab: Identifying Governing Policy for a Sample DoD System
    L.01.8
    DoD RMF Roles: AO, AODR, SCA, ISSM, ISSO, and Program Manager
    L.01.9
    DoD CIO, Component CISO, and DISA Governance Structure
    L.01.10
    Risk Management Strategy and Organizational Risk Tolerance
    L.01.11
    NIST SP 800-30 Risk Assessment in a DoD Context
    L.01.12
    Prepare System Level: Mission, Boundary, Information Types, and Registration
    L.01.13
    Cybersecurity Strategy and Program Protection Plan Alignment
    L.01.14
    Lab: Assigning RMF Roles and Drafting a Cybersecurity Strategy
    L.01.15
    Lab: Registering a System and Defining Its Authorization Boundary
    L.01.16
    Progress Buffer 20% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: RMF-DOD-02

    Live Training QS: ~6
    DAY 2
    Critical Path

    The RMF 2.0 Process Steps

    CNSSI 1253 Confidentiality, Integrity, and Availability Impact Values
    L.02.1
    Selecting Baselines and DoD Overlays: Privacy, Classified, Cross Domain, Space
    L.02.2
    Tailoring Controls and Assigning Common and Inherited Controls
    L.02.3
    Implementing Controls With DISA STIGs, SRGs, and SCAP Scans
    L.02.4
    Documenting Implementation in the eMASS System Security Plan
    L.02.5
    Control Correlation Identifiers (CCIs) and Assessment Procedures
    L.02.6
    Lab: Categorizing a System in eMASS Using CNSSI 1253
    L.02.7
    Lab: Tailoring a Baseline and Applying a DoD Overlay
    L.02.8
    Security Assessment Plan and SCA Independent Assessment
    L.02.9
    ACAS Vulnerability Scans and STIG Checklists as Evidence
    L.02.10
    Security Assessment Report and Risk Assessment Report
    L.02.11
    POA&M Development, Risk Scoring, and Milestone Tracking
    L.02.12
    AO Authorization Decisions: ATO, ATO With Conditions, IATT, Denial
    L.02.13
    Reciprocity Under the DoD Cybersecurity Reciprocity Playbook
    L.02.14
    Lab: Assembling an eMASS Authorization Package for AO Review
    L.02.15
    Lab: Writing a POA&M From Assessor Findings
    L.02.16
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: RMF-DOD-03

    Live Training QS: ~6
    DAY 3
    Critical Path

    Continuous Monitoring and DoD-Specific RMF 2.0 Areas

    DoD Continuous Monitoring Strategy and Ongoing Authorization
    L.03.1
    eMASS Continuous Monitoring Workflow and Control Reassessment
    L.03.2
    RMF Knowledge Service, CYBER.MIL, and DISA STIG Library
    L.03.3
    Continuous ATO (cATO) Memo and DevSecOps Reference Design
    L.03.4
    Cyber Hygiene Reporting and Vulnerability Management With ACAS
    L.03.5
    JSIG for Special Access Programs and Cross Domain Solution Considerations
    L.03.6
    Lab: Building a Continuous Monitoring Plan With Assessment Frequencies
    L.03.7
    Lab: Processing a Change Request and Reassessing Affected Controls
    L.03.8
    Cloud Authorizations: FedRAMP, DoD Cloud Computing SRG, and Impact Levels
    L.03.9
    Platform IT, Weapon Systems, and Operational Technology Authorizations
    L.03.10
    Where Packages Stall: Common ISSM and SCA Pitfalls
    L.03.11
    Aligning RMF Work With ISC2 CGRC Domains
    L.03.12
    Lab: eMASS Package Walkthrough From Registration to ATO
    L.03.13
    Capstone: Authorizing a DoD System From Prepare Through Monitor
    L.03.14
    Key Concept Review, Best Practices, and Course Wrap-Up
    L.03.15
    Progress Buffer 40% ALLOCATED
    09:00
    End 17:00

    MODULE_ID: POST

    Live Training QS: ~7
    AFTER CLASS
    Critical Path

    After Class

    Progress Buffer 60% ALLOCATED
    09:00
    End 17:00
    COURSE PROGRESS Day 0 of 3
    FREQUENTLY ASKED QUESTIONS

    RMF Certification
    FAQ

    Real questions from real professionals who passed.
    Here's how we answer them.

    This course is ideal for cybersecurity professionals, risk managers, Information System Security Officers (ISSOs), system administrators, engineers, and compliance officers who want to deepen their knowledge of RMF 2.0 and learn how to implement it within their organizations.

    The RMF 2.0 course aligns with key knowledge areas covered in the ISC2 CGRC certification. It provides a solid foundation for those preparing for the CGRC exam by covering essential governance, risk management, and compliance concepts that are integral to both RMF 2.0 and the CGRC certification.

    While there are no strict prerequisites, having a foundational knowledge of cybersecurity principles and previous experience in DoD/IC environments will enhance your learning experience.

    The course covers the following topics:

    • Overview and updates of RMF 2.0, including integration with the NIST Cybersecurity Framework (CSF)
    • Organizational preparation and risk management strategies
    • Detailed steps of the RMF 2.0 process, including categorization, selection, implementation, assessment, authorization, and continuous monitoring
    • DoD-specific RMF 2.0 areas, such as eMASS, CYBER.MIL, and RMF Knowledge Service (RMFKS)
    • Hands-on labs and real-world scenarios for practical application

    This course is available in both live online and in-person formats. Participants can choose the delivery method that best suits their needs and preferences.

    Training Camp accepts GI Bill® benefits, GSA Schedule, GPC and SF-182 purchases, and the DoD and service COOL programs for many of its courses. Contact our enrollment team to confirm which funding paths apply to this boot camp.

    Yes, participants will receive a certificate of completion at the end of the course, demonstrating their knowledge and understanding of RMF 2.0.

    Yes, this course may be eligible for CPE credits. Please check with your certification body to determine the exact number of credits you can earn by attending this course.

    The course includes interactive lab sessions and practical exercises where participants will apply RMF 2.0 concepts, such as categorizing information systems, selecting security controls, and developing a continuous monitoring strategy. You will also have the opportunity to work with DoD-specific tools like eMASS in a simulated environment.

    Get the Free
    RMF-DOD Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    RMF V2.0 DoD/IC Study Tools
    & Resources

    Expert insights to guide your certification journey.
    Real strategies from professionals who passed.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    Featured Story
    ★★★★★

    The intent of the training was to help us pass the exam, and make us familiar with the material and types of questions. The instructor did a good job of getting ...

    J
    JA N**throp Grumman
    ★★★★★

    I love the Training Camp format which handles all of the logistics of the training and allowing the student to focus on the course material and certification tes...

    LF
    Lon*** Fle**** N**C
    ★★★★★

    I left the class with a new-found confidence.

    MN
    Mar* N B**z Allen Hamilton
    ★★★★★

    I was pleasantly surprised by Training Camp. The topic were presented in an easily understandable way. They have a high success rate. What else is there to say

    Continue Your Journey

    RMF V2.0 DoD/IC Related Courses

    Advance your career with these recommended certifications

    Featured on