Course Description

Becoming a Certified Authorization Professional (CAP) proves your cybersecurity expertise within the Risk Management Framework (RMF). It is the only certification under the DoD 8570 mandate that aligns to each of the RMF steps. Whether you’re in DoD cybersecurity or you protect a private company, CAP certification can advance your career.

Course Outline

This course covers the seven domains of the CAP Common Body of Knowledge:

• Information Security Risk Management Program
• Categorization of Information Systems
• Selection of Security Controls
• Implementation of Security Controls
• Assessment of Security Controls
• Authorization of Information Systems
• Continuous Monitoring

Learner Outcomes

At the end of this course, you will be able to:

• Understand the RMF process and how it relates to the organizational structure

• Determine the security impact of changes to system and environment

• Develop a plan of action and milestones (POAM) including resources, scheduling an requirements)

• Develop a security assessment report (SAR)

• Document and implement selected security controls

• Develop a security control monitoring strategy

• Describe the information system (including the security authorization boundaries)
• Take the CAP exam
• Become a member of the International Information Systems Security Certification Consortium (ISC)²

Notes

This course helps the participant prepare for (ISC)² CAP exam and includes an exam voucher. The voucher is valid for 12 months after the course at a Pearson VUE testing center.

Learn about more cybersecurity topics here

Recommendations

To qualify for the CAP certification, you must have a minimum of 2 years cumulative, paid, full-time work experience in one or more of the seven domains of the (ISC)² CAP Common Body of Knowledge.

Accrediting Associations

• Information Systems Audit and Control Association (ISACA) 28.0 CPE