CAP Course

Select Language

Select Country

ENQUIRE NOW

training

Domain / Vendor

certified authorization professional cap certification

Hands-on training experience

Pre-and post-assessment questions

Test-taking recommendations

Unique guidance

Overview Who Should Attend Prerequisite Outline

Certified Authorization Professional Course Overview

CAP certification prep. is a 05-days duration course that aims at preparing the learners to gain CAP certification. The course has proven to be an effective way of building your career through developing skills and knowledge of various real-time risk management steps and frameworks. You can gain the attention of the employer through your CAP certification, which will vouch for your expertise and advanced technical skills in governance, risk, and compliance. After successful competition of the course, you will be equipped to authorize and maintain information systems with the implementation of the suitable risk management framework along with the security policies, practices, and procedures. The instructor-led CAP certification training will make you industry ready.
Information security professionals looking to enhance their risk tolerance understanding and experience while taking into account the legal and regulatory standards, then this course will provide security control benefits to you. CAP certification Prep. Training complies with 8570.01-M training requirements, ensuring Information Assurance (IA) Workforce Improvement Program manual is still in effect. Upon successful training in the course, you will be able to describe the roles associated with RMF and execute them within the RMF process to explain organizational risk management.

Audience

Individuals with a minimum of one year experience in RMF
IT security professional
Information assurance professionals
Systems administration
Information risk manager
Auditing professionals within the government
General technical expertise of one or two years
Information security policy professional
Anyone pursuing a CAP certification
Individuals having a solid understanding and experience of NIST documentation
The military, civilian roles, federal contractors, and local government professionals

Eligibility Criteria

To obtain quality CAP certification, you need to have the following:

Full-time experience of a minimum of 35hours/week for four weeks to ensue one month of work experience
Minimum one year experience in database or systems development
Part-time experience cannot be less than 20 hours a week and not more than 34 hours a week. 6months of full-time experience consisting of 1040 hours part-time is justified, or it should be 12 months of full-time experience consisting of 2080 hours of part-time.
A minimum of two years of cumulative paid work experience in one or more of the seven domains of the CAP Common Body Knowledge.
- Domain 1. Information Security Risk Management Program
- Domain 2. Categorization of information Systems (IS)
- Domain 3. Selection of Security Controls
- Domain 4. Implementation of Security Controls
- Domain 5. Assessment of Security Controls
- Domain 6. Authorization of Information Systems (IS)
- Domain 7. Continuous Monitoring

Course Outline

Module 1: Prepare

Explain the purpose and value of preparation
Identify references associated with the preparation step
Identify other risk management frameworks and their relationship to RMP tasks
Identify relevant security and privacy regulations
List the references, processes, and outcomes that define:
- RMF Task P1: Risk management roles
- RMF Task P-2: Risk Management Strategy
- RMF Task P-3: Risk Assessment – Organization
- RMF Task P-14: Risk Assessment – System
- RMF Task P-4: Organizationally Tailored Control Baselines and Cybersecurity Framework Profiles
- RMF Task P-5: Common Control Identification
- RMF Task P-6: Impact-Level Prioritization
- RMF Task P-7: Continuous Monitoring Strategy – Organization
- RMF Task P-8: Mission or Business Focus
- RMF Task P-9: System Stakeholders
- RMF Task P-10: Asset Identification
- RMF Task P-11: Authorization Boundary
- RMF Task P-12: Information Types
- RMF Task P-13: Information Life Cycle
- RMF Task P-15: Requirements Definition
- RMF Task P-16: Enterprise Architecture
- RMF Task P-17: Requirements Allocation
- RMF Task P-18: System Registration
Complete selected prepare Tasks for the example system

Module 2: Categorize

Explain the purpose and value of categorization.
Identify references associated with the Categorize step.
List the references, processes, and outcomes that define the Risk Management Framework (RMF). Task C-1: System Description.
Describe a system's architecture.
Describe an information system's purpose and functionality.
Describe and document a system's characteristics.
List the references, processes, and outcomes that define RMF Task C-2: Security Categorization.
Categorize an information system.
List the references, processes, and outcomes that define RMF Task C-3: Security Categorization Review and Approval.
Describe the review and approval process for security categorization.
Categorize the example systems.

Module 3: Select

Explain the purpose and value of control selection and allocation.
Identify references associated with the Select step.
Relate the ISO 27001 Statement of Applicability to the NIST RMF.
List the references, processes, and outcomes that define RMF Task S-1: Control Selection.
List the references, processes, and outcomes that define RMF Task S-2: Control Tailoring.
Select appropriate security control baselines based on organizational guidance.
Tailor controls for a system within a specified operational environment.
List the references, processes, and outcomes that define RMF Task S-3: Control Allocation.
List the references, processes, and outcomes that define RMF Task S-4: Documentation of Planned Control Implementations.
Allocate security and privacy controls to the system and the environment of operation.
Document the controls for the system and environment of operation in security and privacy plans.
List the references, processes, and outcomes that define RMF Task S-5: Continuous Monitoring Strategy - System.
Develop and implement a system-level strategy for monitoring control effectiveness consistent with and supplements the organizational continuous monitoring strategy.
List the references, processes, and outcomes that define RMF Task S-6: Plan Review and Approval.
Review and approve the security and privacy plans for the system and the environment of operation.
Allocate security controls for the example system.
Tailor security controls for the example system.
Draft a continuous monitoring plan for the example system.

Module 4: Implement

Explain the purpose and value of implementation.
Identify references associated with the Implement step.
List the references, processes, and outcomes that define RMF Task I-1: Control Implementation.
Identify appropriate implementation guidance for control frameworks.
Integrate privacy requirements with system implementation.
List the references, processes, and outcomes that define RMF Task I-2: Update Control Implementation Information.
Update a continuous monitoring strategy.
Update a control implementation plan.

Module 5: Assess

Explain the purpose and value of assessment.
Identify references associated with the Assess step.
Understand and identify common elements of the NIST process that are included in other frameworks and processes.
List the references, processes, and outcomes that define RMF Task A-1: Assessor Selection.
List the references, processes, and outcomes that define RMF Task A-2: Assessment Plan.
List the references, processes, and outcomes that define RMF Task A-3: Control Assessment.
List the references, processes, and outcomes that define RMF Task A-4: Assessment Reports.
List the references, processes, and outcomes that define RMF Task A-5: Remediation Actions.
List the references, processes, and outcomes that define RMF Task A-6: Plan of Action and Milestones.
Develop an assessment plan for identified controls in the example system.
Develop a remediation plan for unsatisfied controls in the example system.

Module 6: Authorize

Explain the purpose and value of authorization.
Identify references associated with the Authorize step.
Relate system approvals under organizational processes to the concepts applied in the NIST RMF.
List the references, processes, and outcomes that define RMF Task R-1: Authorization Package.
List the references, processes, and outcomes that define RMF Task R-2: Risk Analysis and Determination.
List the references, processes, and outcomes that define RMF Task R-3: Risk Response.
List the references, processes, and outcomes that define RMF Task R-4: Authorization Decision.
List the references, processes, and outcomes that define RMF Task R-5: Authorization Reporting.
Develop a risk determination for the example system on the system risk level.
Authorize the system for operation.
Determine appropriate elements for the Authorization decision document for the example system.

Module 7: Monitor

Explain the purpose and value of monitoring.
Identify references associated with the Monitor step.
List the references, processes, and outcomes that define RMF Task M-1: System and Environment Changes.
(Coordinate) Integrate cybersecurity risk management with organizational change management.
List the references, processes, and outcomes that define RMF Task M-2: Ongoing Assessments.
Monitor risks associated with the supply chain.
List the references, processes, and outcomes that define RMF Task M-3: Ongoing Risk Response.
Understand elements for communication surrounding a cyber event.
List the references, processes, and outcomes that define RMF Task M-4: Authorization Package Updates.
List the references, processes, and outcomes that define RMF Task M-5: Security and Privacy Reporting.
List the references, processes, and outcomes that define RMF Task M-6: Ongoing Authorization.
List the references, processes, and outcomes that define RMF Task M-7: System Disposal.
Discuss Monitor step activities in the example system.

Module 8: CAP Certification Information

CAP Certification Information

Choose Your Preferred Mode

ONLINE TRAINING

Instructor led Online Training
Experienced Subject Matter Experts
Approved and Quality Ensured training Material
24*7 leaner assistance and support

Enroll Now

CORPORATE TRAINING

Customized Training Across Various Domains
Instructor Led Skill Development Program
Ensure Maximum ROI for Corporates
24*7 Learner Assistance and Support

Enroll Now

FAQ’s

What is the course duration?

The course duration is five days (40 hours).

What is the number of questions included in the exam?

The exam will comprise 125 multiple-choice questions.

What is the language the course is offered in?

CAP certification is conducted in the English language.

Does the course include lab sessions?

Yes, lab sessions are included in the course.

Do Vinsys offer career/course guidance?

Yes, unique guidance with required material is provided to enrolled learners.

Why choose Vinsys for this course?

We aim to provide high-quality education with regular tests, mock practice sessions, hands-on-trainings, and instructor-led courses to learners helping them crack their certification tests in a single attempt.

Will I get access to the course material after completion of the course?

You will get access to the pdf and other course material after completion. However, access to class recordings is limited only to the course duration.

Can I cancel the course after paying the course fees?

Yes, you can cancel the course and get the refund only when cancellation is made 48 hours before the start of the course.

Can I pay from a website?

Yes, you can pay from the course page

Is my information secure with Vinsys?

We assure information security as no data is shared with third parties.

Why Vinsys

Seasoned Instructors

Official Vendor Partnerships

Authorized Courseware

3,000+ Courses & 2,000+ Modules

In Synch with Tech-advancements

Customizable Blended Learning Options

Related Courses For You

Reviews

The course content was very nicely designed, which was easy to grasp. There is no online course providing information in-depth about all the domains of CAP CBK. I have primarily benefited from this course and would highly recommend it to learners looking for risk management-related courses. Grateful to Vinsys!

Noah GonzalezEstimator

My team enrolled in this course, which has been a practical learning experience. The course has very well covered steps involved in risk management and evaluation of organizational risk management supported by RMF, wherein each step was further dealt with in depth. Thanks, Vinsys!

Sahil PawarEstimator

Need Help Finding The Right Training Solution

Our Training Advisors Are Here For You

Certified Authorization Professional (CAP) Certification Training