A tailored course, built for your situation
Mastering NIST 800-171 for State Government Cyber Security Leaders
Build compliant, cost-effective security architectures with precision and speed.
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Eliminate rework and accelerate compliance cycles with a proven methodology for NIST 800-171 implementation.
The situation this course is for
Even skilled teams waste weeks reconciling control mappings, evidence collection, and stakeholder feedback. The delay isn’t from lack of knowledge, it’s from lack of a repeatable, end-to-end implementation system.
Who this is for
Senior Cyber Security Leader in state government with responsibility for compliance, risk, and digital asset protection.
Who this is not for
This is not for entry-level analysts or auditors. It’s not for contractors focused only on documentation. It’s not for teams relying on legacy, siloed approaches to compliance.
What you walk away with
- Produce complete, audit-ready NIST 800-171 control documentation in under 10 business days
- Deploy a reusable template library for all 110 controls with precise implementation language
- Cut review cycles by 50% with stakeholder-aligned artefacts on first submission
- Turn policy updates into system changes within 48 hours using standardized playbooks
- Lead cross-functional teams without waiting for external consultants
The 12 modules (with all 144 chapters)
Module 1. NIST 800-171 Foundation and Scope
Establish clear boundaries for applicability across state systems and third-party vendors.
12 chapters in this module
- Understanding DFARS and FAR origins
- Mapping scope to Wyoming's digital assets
- Identifying non-federal systems in scope
- Control family overview
- Tailoring vs. full implementation
- Common misinterpretations
- Baseline control set
- Exemptions and justifications
- Documentation standards
- Version tracking
- Stakeholder alignment checklist
- First-week action plan
Module 2. Access Control Implementation
Deploy role-based access strategies that satisfy AC-1 through AC-6 requirements.
12 chapters in this module
- User role taxonomy
- Account provisioning workflow
- Remote access policy alignment
- Session timeout enforcement
- Access revocation triggers
- Privileged account management
- Role change validation
- Access review cadence
- Multi-factor authentication mapping
- Attribute-based access control
- Emergency access procedures
- Documentation artefact
Module 3. Awareness and Training Execution
Build annual training that meets AT-2 and AT-3 with minimal overhead.
12 chapters in this module
- Curriculum design for non-technical staff
- Phishing simulation integration
- Role-specific training modules
- Completion tracking system
- Annual attestation workflow
- Third-party contractor training
- Security policy acknowledgment
- Training content refresh cycle
- Documentation of delivery
- Employee onboarding integration
- Audit trail setup
- Evidence packaging
Module 4. Audit and Accountability
Implement logging and monitoring that satisfy AU-1 through AU-14.
12 chapters in this module
- Event identification criteria
- Log retention duration
- Centralized log management
- Log review frequency
- Unauthorized access detection
- Time synchronization
- Audit trail protection
- Session identification
- Audit storage capacity
- Log export procedures
- Incident correlation
- Audit readiness checklist
Module 5. Security Assessment and Authorization
Execute risk assessments and AO sign-off workflows that close faster.
12 chapters in this module
- Risk assessment template
- Control implementation validation
- Vulnerability scanning integration
- Penetration test coordination
- AO documentation package
- Plan of Action and Milestones
- Control gap tracking
- Mitigation timelines
- Evidence collection workflow
- Third-party assessment prep
- Reassessment cadence
- Stakeholder sign-off trail
Module 6. Configuration Management
Enforce baseline configurations across systems and networks.
12 chapters in this module
- Baseline definition process
- Configuration change control
- CM registry maintenance
- Baseline deviation tracking
- Automated compliance checks
- Patch management integration
- Software inventory sync
- Hardware inventory sync
- Secure configuration settings
- Non-production environment control
- CM plan documentation
- Change audit trail
Module 7. Identification and Authentication
Implement identity verification that meets IA-1 through IA-8.
12 chapters in this module
- Identity proofing levels
- Password complexity rules
- Cryptography-based authentication
- Group-based access control
- Device authentication
- Remote access authentication
- Credential management
- Authentication failure handling
- Session lock
- Cryptographic module standards
- Authentication protocol selection
- Multi-factor implementation
Module 8. Incident Response Planning
Develop and test incident response that satisfies IR-1 through IR-8.
12 chapters in this module
- Incident response policy
- Response team roles
- Incident handling procedures
- Reporting requirements
- Lessons learned process
- Incident plan testing
- Incident documentation
- Malicious code protection
- Incident analysis
- Incident monitoring
- Response coordination
- Recovery procedures
Module 9. Maintenance and Support
Document and manage system maintenance to satisfy MA-1 through MA-6.
12 chapters in this module
- Maintenance plan creation
- Scheduled maintenance process
- Maintenance provider controls
- Remote maintenance authentication
- Maintenance documentation
- Maintenance window tracking
- System availability planning
- Emergency maintenance policy
- Maintenance impact assessment
- Recovery after maintenance
- Third-party maintenance oversight
- Audit logging for maintenance
Module 10. Media Protection
Secure physical and digital media to meet MP-1 through MP-7.
12 chapters in this module
- Media labeling standards
- Storage controls
- Sanitization procedures
- Disposal certification
- Portable media restrictions
- Media access control
- Media transport security
- Media retention policy
- Removable media audit
- Cloud storage classification
- Encryption of stored media
- Media disposition record
Module 11. Personnel Security
Implement personnel controls for onboarding and termination.
12 chapters in this module
- Background checks
- Role-based security agreements
- Personnel screening
- Termination procedures
- Position sensitivity levels
- Re-authorization process
- Third-party personnel
- Personnel transfer controls
- Security training before access
- Personnel monitoring
- Financial interest review
- Personnel security file
Module 12. System and Communications Protection
Enforce network and data security across state systems.
12 chapters in this module
- Boundary protection
- Transmission confidentiality
- Network segmentation
- Encryption standards
- Session control
- Denial of service protection
- Remote access architecture
- Network monitoring
- Mobile device security
- Publicly accessible system controls
- Domain name filtering
- Secure protocol enforcement
How this maps to your situation
- Initial NIST 800-171 scoping
- Control implementation and documentation
- Cross-agency coordination
- AO submission and sign-off
Before vs. after
Before
Manual control mapping, inconsistent documentation, extended review cycles, stakeholder misalignment.
After
Standardized, reusable artefacts, half the review time, faster sign-off, stakeholder confidence.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 3 hours per week over 4 weeks to complete all modules and build your implementation playbook.
If nothing changes
Without a streamlined approach, compliance projects will continue to consume disproportionate time and resources, limiting your ability to lead on emerging security priorities.
How this compares to the alternatives
Unlike generic NIST 800-171 overviews, this course delivers state-specific implementation patterns, reusable templates, and a step-by-step path to first-time-right artefact creation , designed for practitioners who must deliver, not just understand.
Frequently asked
Is this course specific to state government requirements?
Yes. It includes adaptations for shared services, multi-agency systems, and cost-effective compliance strategies relevant to state-level operations.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Do I get practical templates?
Yes. Every module includes downloadable, ready-to-use templates and worked examples, plus a hand-built implementation playbook.
$199 one-time. Approximately 3 hours per week over 4 weeks to complete all modules and build your implementation playbook..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours