Certified Authorization Professional (CAP)

CAP Certified Authorization Professional

The exam has been Retired and Replaced by the Certified in Governance, Risk and Compliance (CGRC)

CAP Certified Authorization Professional Certification Exam is a proven way to build career and demonstrate expertise within the risk management framework (RMF). The Certified Authorization Professional (CAP®) is an information security practitioner who advocates for security risk management in pursuit of information system authorization to support an organization’s mission and operations in accordance with legal and regulatory requirements. 

Who should take the exam?

The CAP is ideal for IT, information security and information assurance practitioners who work in Governance, Risk and Compliance (GRC) roles and have a need to understand, apply and/or implement a risk management program for IT systems within an organization.

Experience Requirements

Candidates must have a minimum of two years cumulative work experience in one or more of the seven domains of the CAP CBK.

A candidate that doesn’t have the required experience to become a CAP may become an Associate of (ISC)² by successfully passing the CAP examination. The Associate of (ISC)² will then have three years to earn the two year required experience.

CAP Exam Domains

The Certified Authorization Professional (CAP) exam covers the following topics - 

• Domain 1 Information Security Risk Management Program (16%)
• Domain 2 Categorization of Information Systems (IS) (11%)
• Domain 3 Selection of Security Controls (15%)
• Domain 4 Implementation of Security Controls (16%)
• Domain 5 Assessment of Security Controls (16%)
• Domain 6 Authorization of Information Systems (IS) (16%)
• Domain 7 Continuous Monitoring (16%)

Become a CAP Certified Authorization Professional with the latest and updated practice test. Start preparing with Free Practice TEst Now!