Search
Follow Us: Facebook linkedin twitter
Course Description

Certified Authorization Professional Certification Preparation (CAP)

Course Code
CAPPrep
Description:
Instructor Led Preparation for the CAP Exam.
Syllabus:
The Certified Authorization Professional(CAP) credential is an objective measure of the knowledge, skills and abilities required for personnel involved in the process of certifying and accrediting security of information systems.

Audience:

    Those responsible for formalizing processes used to assess risk and establish security requirements.
    Anyone whose decisions ensure that information systems possess security commensurate with the level of exposure to potential risk, as well as damage to assets or individuals.
    This credential is great for civilian, state and local governments in the U.S., as well as commercial markets.
    Job functions such as authorization officials, system owners, information owners, information system security officers, and certifiers as well as all senior system managers apply.

Course Objectives

    This 3 day CAP Boot Camp will give you the knowledge and skills to:
    • Understanding the Purpose of Certification and Accreditation
    • Defining Systems Authorization
    • Describing and Decide When Systems Authorization Is Employed
    • Defining Roles and Responsibilities
    • Understanding the Legal and Regulatory Requirements for C&A
    • Initiating the C & A Process
    • Establishing Accreditation Boundaries
    • Determining Security Categorization
    • Performing Initial Risk Assessment
    • Selecting and Refining Security Controls
    • Documenting Security Control
    • Performing Certification Phase
    • Assessing Security Control
    • Documenting Results
    • Understanding Accreditation Phase
    • Conducting Final Risk Assessment
    • Generating and Presenting an Accreditation Report
    • Performing Continuous Monitoring
    • Monitoring Security Controls
    • Monitoring and Assessing Changes That Affect the Information System
    • Performing Security Impact Assessment As Needed
    • Documenting and Monitoring Results of Impact Assessments
    • Reentering C&A Process As Needed
    • Maintaining System’s Documentation (E.G., POA&M, SSP, Interconnection
    • Agreements