ISSO & Security Assessor Path
Those targeting federal information-system security roles, running the NIST RMF and assessing controls toward an authorization.
Assessed work, a capstone and a verified credential
What the path adds
Membership covers foundation reading. A path is where the work is assessed and the credential is earned.
- Marked work
- Your written submissions are assessed against a rubric, not ticked off.
- Cumulative assessment
- One exam across the whole path, not a quiz per course.
- Capstone
- A final piece of real work, reviewed.
- Portfolio artefact
- Something you can put in front of a hiring manager.
- Verified credential
- A Professional Path Credential with a public verification page.
What this path makes you able to do.
- Run the NIST Risk Management Framework end to end (SP 800-37)
- Author SSP control implementation statements and a Security Assessment Report
- Perform ISSO duties: categorization, POA&Ms and continuous monitoring
The 4-step path.
- 1View course
Cybersecurity Foundations
The core concepts & landscape
- 2View course
NIST RMF Implementation
Categorize → authorize → monitor
- 3View course
ISSO Training
The day-to-day ISSO role
Capstone: RMF authorization package
Categorization memo, SSP sections, SAR finding and POA&M
Hands-on lab work.
Every step above is backed by real practice in Atlas, our simulated workbench. You do the work an employer would hand you, and you keep the artifacts as portfolio evidence.
RMF Authorization: Meridian
Step into the ISSO seat. Take Meridian through the full Risk Management Framework lifecycle and the continuous-monitoring grind: assess controls, gather evidence, work the POA&M, and keep the authorization honest.
Hands-on labs. A final exam & capstone. A real role.
You finish with a portfolio you can show, a cumulative exam, and the skills to land the ISSO / Security Control Assessor role.
Not sure this is the one? Take the free fit and aptitude check first: twelve short questions, instant answer.