CERTIFIED AUTHORIZATION PROFESSIONAL (CAP)

The RMF was developed by the National Institute for Standards and Technology (NIST) to help DoD and Federal agencies manage risks and form Information Technology (IT) systems more quickly, efficiently, and effectively. The Risk Management Framework provides a structured yet flexible approach for managing the portion of risk resulting from incorporating information systems into the organization's mission and business processes and processes to help Federal and DoD agencies pass FISMA, CCRI Inspections, and OIG Audits. Students will grasp application-based concepts by participating in exercises and real-time learning to managing risk for the confidentiality, availability, and integrity of information systems. The course will introduce adult learning principles that enhance information systems' authorization and the RMF tasks that support the selection, development, implementation, assessment, authorization, and ongoing monitoring of common controls inherited by organizational information systems. The course can also be used as test preparation for the (ISC)², Certified Authorization Professional (CAP), and the Center for Development of Security Excellence (CDSE) examination. To qualify for the CAP, you must have a minimum of two years of cumulative paid work experience in one or more of the seven domains of the CAP Common Body of Knowledge (CBK).

Core Learning Skills Obtained

• Security Assessment Procedures

• Performing Risk Analysis

• Understand Risk Management Program Processes

• Determine the impact level on CIA for systems

• Implementing Security Controls

• Security Documentation

• System Monitoring of Controls

• Assembling an Authorization Package

Core Domains

• Risk Management Framework (RMF)

• Categorization of Information Systems

• Selection of Security Controls

• Security Control Implementation

• Security Control Assessment

• Information System Authorization

• Monitoring of Security Controls