(ISC)2 CAP – Certified Authorization Professional
Earning the CAP certification is a proven way to build your career and demonstrate your expertise within the risk management framework (RMF).
The CAP is the only certification under the DoD8570 mandate that aligns with each RMF step. It shows employers you have the advanced technical skills and knowledge to authorize and maintain information systems within the RMF.
The CAP exam evaluates your expertise across seven security domains. These domains cover the topics you need to master to be confidently ready to take the exam. The domains are: Information Security Risk Management Program, Categorization of Information Systems, Selection of Security Controls, Implementation of Security Controls, Assessment of Security Controls, Authorization of Information Systems, Continuous Monitoring.
CAP is beneficial for Security Control Assessors, Auditors, Information Security Analyst, Cybersecurity Analyst, Information System Security Officer, Risk Manager, Information System Security Manager, Chief Information Security Officer and contractors who use the RMF in government agencies and private sector organizations.
Prove your skills, advance your career, and gain support from a community of cybersecurity leaders to help you throughout your professional journey.




