Certified Authorization Professional

Course Description

The Certified Authorization Professional (CAP) is an information security practitioner who advocates for security risk management in pursuit of information system authorization to support an organization’s mission and operations in accordance with legal and regulatory requirements.

The broad spectrum of topics included in the CAP Common Body of Knowledge (CBK) ensures its relevancy across all disciplines in the field of information security.

Program Objectives

• Information Security Risk Management Program
• Scope of the Information System
• Selection and Approval of Security and Privacy Controls
• Implementation of Security and Privacy Controls
• Assessment/Audit of Security and Privacy Controls
• Authorization/Approval of Information System
• Continuous Monitoring

After completing this course, the student will be able to:

• Identify and describe the steps and tasks within the NIST Risk Management Framework (RMF).
• Describe the roles associated with the RMF and how they are assigned to tasks within the RMF.
• Execute tasks within the RMF process based on assignment to one or more RMF roles.
• Explain organizational risk management and how it is supported by the RMF.

Prerequisites

To qualify for the CAP, candidates must pass the exam and have at least two years of cumulative, paid work experience in one or more of the seven domains of the (ISC)2 CAP Common Body of Knowledge (CBK®).