Examining the relationship between formal RMF training and perceptions of RMF effectiveness, sustainability and commitment in RMF practitioners

Philip D. Schall and Oludotun Oni

Cyber Security: A Peer-Reviewed Journal, 2019, vol. 3, issue 1, 25-36

Abstract: The US Federal Information Systems Modernization Act (FISMA) included a mandate for the National Institute of Standards and Technology (NIST) to modernise and create new methods of strengthening the US Government’s cyber security posture. NIST answered this call with the creation of the risk management framework (RMF). RMF has received criticism and has been viewed as ineffective and a potential failure. This quantitative research investigated the relationship between receiving formal RMF training and perceptions of RMF effectiveness, RMF commitment and RMF sustainability. The research proposed that the receipt of formalised RMF training would increase the perceptions of RMF effectiveness, RMF commitment and RMF sustainability in RMF practitioners. A convenience sample of 81 RMF practitioners responded to an online survey assessing perceived competence of RMF effectiveness, RMF commitment and RMF sustainability as well as the amount of formal RMF training hours they had received. The data was analysed utilising statistical methods of descriptive statistics, analysis of variance (ANOVA) and Pearson’s correlations. Based on the results of this study, a significant, positive relationship exists between the receipt of formalised RMF training and perceptions of RMF effectiveness. Statistical significance can be seen in ANOVA tests where there was a significant difference in the mean effective perceived competency scales (PCS) scores among those with varied levels of formal RMF training (MS = 5.388), (F [2,78] = 3.645, p

Keywords: risk management framework (RMF); National Institute of Standards and Technology (NIST); risk management framework training; risk management framework research (search for similar items in EconPapers)
JEL-codes: M15 (search for similar items in EconPapers)
Date: 2019
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/5117/download/ (application/pdf)
https://hstalks.com/article/5117/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:csj000:y:2019:v:3:i:1:p:25-36

Access Statistics for this article

More articles in Cyber Security: A Peer-Reviewed Journal from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().