Back to Learning Paths
Governance

FedRAMP Practitioner

Understand FedRAMP scope, baselines, High requirements, NIST control foundations, evidence, vulnerability management, and continuous monitoring.

FamilyGovernance and Emerging Risk
LevelFoundational to intermediate
Courses9
Estimated time2.25-3 hours
Audience

Cloud security teams, Compliance practitioners, Federal system owners

Outcome

Understand FedRAMP scope, baselines, High requirements, NIST control foundations, evidence, vulnerability management, and continuous monitoring.

Ordered sequence

Courses in this path

9 courses
Course 0110 modules
What Is FedRAMP?

Open course in the Explainers catalog: What Is FedRAMP?.

Launch Course
Course 0210 modules
What are FedRAMP Baselines?

Open course in the Explainers catalog: What are FedRAMP Baselines?.

Launch Course
Course 0310 modules
What is FedRAMP High?

Open course in the Explainers catalog: What is FedRAMP High?.

Launch Course
Course 0410 modules
What Is NIST SP 800-53?

Open course in the Explainers catalog: What Is NIST SP 800-53?.

Launch Course
Course 0513 modules
OWASP Top 10 2025 Mapped to NIST SP 800-53 Rev. 5

Open course in the Governance, Risk, and Compliance catalog: OWASP Top 10 2025 Mapped to NIST SP 800-53 Rev. 5.

Launch Course
Course 0610 modules
What Is RMF?

Open course in the Explainers catalog: What Is RMF?.

Launch Course
Course 0710 modules
FedRAMP Evidence and Documentation

Open course in the Governance, Risk, and Compliance catalog: FedRAMP Evidence and Documentation.

Launch Course
Course 0810 modules
FedRAMP Vulnerability Management

Open course in the Governance, Risk, and Compliance catalog: FedRAMP Vulnerability Management.

Launch Course
Course 0910 modules
What is Continuous Monitoring?

Open course in the Explainers catalog: What is Continuous Monitoring?.

Launch Course
Related routes
Next steps
Governance and Emerging Risk
Security Frameworks and Compliance

Move from framework orientation into detailed control, assurance, and continuous-monitoring requirements across major security programs.

View Path
Governance and Emerging Risk
Post-Quantum Security and Migration

Understand the quantum risk, current NIST standards, and practical migration implications for long-lived data and web services.

View Path
AI and Local Infrastructure
Sovereign AI Starter Kit

Build a working mental model of private AI, select suitable models, and launch a practical local assistant.

View Path