Certified Authorization Professional Exam Preparation Training

CAP Exam Preparation is a one-day supplemental training program that focuses on solidifying (ISC)² CAP exam concepts covered in the RMF for DoD IT (or RMF for Federal Agencies) Training Program.  It includes a review of the CAP Common Body of Knowledge (CBK).  Practical “how to” guidance and sample questions are provided to enhance the students’ readiness.

Backed by (ISC)2, CAP credentialing aligns with the Risk Management Framework (RMF). The CAP recognizes knowledge, skills and abilities to authorize and maintain information systems within RMF. It demonstrates the ability to formalize processes to assess risk and establish security documentation.

The CAP is the only certification under the DoD8570 mandate that aligns with each RMF step. It shows employers you have the advanced technical skills and knowledge to authorize and maintain information systems within the RMF using best practices, policies and procedures established by the cybersecurity experts at (ISC)².  CAP is compliant with ISO 17024 standards and approved by the US DoD to meet directive 8140/8570.01-M requirements.

The broad spectrum of topics included in the CAP Common Body of Knowledge (CBK) ensure its relevancy
across all disciplines in the field of information security. Successful candidates are competent in the following
7 domains:

• Information Security Risk Management Program
• Scope of the Information System
• Selection and Approval of Security and Privacy Controls
• Implementation of Security and Privacy Controls
• Assessment/Audit of Security and Privacy Controls
• Authorization/Approval of Information System
• Continuous Monitoring