Benchmark Development Course
Through our work producing XCCDF benchmarks for the U.S. National Security Agency’s (NSA) System Security Analysis project, MITRE has learned that the use of certain security data standards and security content management tools can help anyone produce good benchmarks more efficiently. To share this knowledge and experience, MITRE has developed a free course to teach vendors and security content developers how to create security guidance that is standards-based, structured, and automatable.
Free and Open to the Public
MITRE’s one-day Benchmark Development Course is free and open to the public. Vendors and security guidance professionals from industry, government, and academia are all welcome to attend. Register now!
Course Overview
MITRE created the Benchmark Development Course to help vendors and security content developers produce good guidance more efficiently using standards and a suite of security content management tools that can help anyone attempting to develop security guidance.
The course covers five phases for creating good benchmarks: Phase 1: Writing Good Guidance, Phase 2: Augmenting Rules, Phase 3: Automating Assessment, Phase 4: Benchmark Structure & Tailoring, and Phase 5: Manage Compliance.
Topics covered:
- Best practices for developing security guidance
- How the new benchmarking technology applies to security guidance
- How to use established information security standards to facilitate guidance development
- How to use publicly available tools to facilitate guidance development
- Showcase completed benchmarks
Who Should Attend
Vendors, security content developers, subject matter experts, tool developers, business managers who make strategic decisions, etc.
Register Today!
Visit the Schedule page to view upcoming course dates or register now.
Page Last Updated: November 12, 2009