Course Description
The Certified Authorization Professional (CAP) is an information security practitioner who advocates for security risk management in pursuit of information system authorization to support an organization’s mission and operations in accordance with legal and regulatory requirements.
The broad spectrum of topics included in the CAP Common Body of Knowledge (CBK) ensures its relevancy across all disciplines in the field of information security.
Program Objectives
- Information Security Risk Management Program
- Scope of the Information System
- Selection and Approval of Security and Privacy Controls
- Implementation of Security and Privacy Controls
- Assessment/Audit of Security and Privacy Controls
- Authorization/Approval of Information System
- Continuous Monitoring
After completing this course, the student will be able to:
- Identify and describe the steps and tasks within the NIST Risk Management Framework (RMF).
- Describe the roles associated with the RMF and how they are assigned to tasks within the RMF.
- Execute tasks within the RMF process based on assignment to one or more RMF roles.
- Explain organizational risk management and how it is supported by the RMF.
Prerequisites
To qualify for the CAP, candidates must pass the exam and have at least two years of cumulative, paid work experience in one or more of the seven domains of the (ISC)2 CAP Common Body of Knowledge (CBK®).
Exam Information
Length of exam – 3 hours
Number of items – 125
Item format – Multiple choice
Passing grade – 700 out of 1000 points
Exam availability – English
Testing center – Pearson VUE Testing Center
- Domains 7
- Syllabus Download
- Quizzes 0
- Duration 40 hours
- Skill level All levels
- Language English
- Students 583
- Certificate No
- Assessments Yes