Certified Authorization Professional (CAP)
Credential: Certified Authorization Professional (CAP)
Credentialing Agency: International Information Systems Security Certification Consortium, Inc. (ISC 2)
Renewal Period: 3 years
The Certified Authorization Professional (CAP) is a certification for individuals involved in the process of certifying and accrediting the security of information systems. Specifically, the credential applies to professionals responsible for formalizing processes used to assess risk and establish security requirements, as well as ensure information systems possess security commensurate with the level of exposure to potential risk. Candidates must have two years of experience in any of the following areas: IT security, information assurance, information risk management, certification, system testing and continuous monitoring, systems administration, information security policy, database/systems development, or technical or auditing experience.
More information can be found on the certifying agency's website.
Certified Authorization Professional (CAP)
The following DOD Civilian Occupations provide training and/or experience that contributes to attaining this credential:
The following Federal Occupations provide training and/or experience that contribute to attaining this credential:
| Federal Occupation | Related As | |
|---|---|---|
| 2210 Information Technology Management Series |  Some |
MINIMUM REQUIREMENTS
Eligibility Requirements (View Details)
- Credential Prerequisite
- Experience: 2 years
- Education
- Training
- Membership
- Other
- Fee
Note: This credential may have multiple options for becoming eligible. Listed are the minimum requirements based on the minimum degree required. To view other options, see the Eligibility tab.
Exam Requirements (View Details)
- Exam
- Written Exam
- Oral Exam
- Practical Exam
- Performance Assessment
RECERTIFICATION SUMMARY
Renewal Period: 3 years
AGENCY CONTACT INFORMATION
International Information Systems Security Certification Consortium, Inc. (ISC 2)
311 Park Place Blvd
Suite 400
Clearwater, FL 33759
Phone: (866) 331-4722
Fax: (703) 356-7977
Email: membersupport@isc2.org
Experience REQUIREMENTS
- Candidates must have a minimum of two years of cumulative paid full-time work experience in one or more of the seven domains of the CAP exam.
- Valid professional experience includes the direct application of appropriate Certification and Accreditation, knowledge in certification and accreditation-related work performed as a practitioner, auditor, consultant, vendor, investigator or instructor.
Other REQUIREMENTS
The Certified Authorization Professional (CAP) credential has the following other requirements:
- Candidates must subscribe to the International Information Systems Security Certification Consortium, Inc. (ISC)2 Code of Ethics.
- Anyone who passes a CAP exam must have their qualifications endorsed by another (ISC2) credential holder.
- Passing candidates will be randomly selected and audited by (ISC2) Services prior to issuance of any certification. Multiple certifications may result in a candidate being audited more than once.
Written Exam
- Risk Managment Framwork (RMF)
- Categorization of Information Systems
- Selection of Security Controls
- Security Control Implementation
- Security Control Assessment
- Information Security Authorization
- Monitoring of Security Controls
Exam Preparation Resources
There are a number of resources available to help you prepare for the Certified Authorization Professional (CAP) examination:
- Best Sources
- General References
Testing Information
Testing for this credential is handled by Pearson VUE. The test centers are located in the U.S. They also have some test centers on military bases.
To find out more, use the following links on the Pearson VUE website:
For more information on the International Information Systems Security Certification Consortium, Inc. (ISC 2) testing process, visit the agency website.
RECERTIFICATION
Certified Authorization Professional (CAP)
Renewal Period: 3 years
Additional considerations for the Certified Authorization Professional (CAP) include:
- Candidates who do not have the required experience may still sit for the exam and become an Associate of (ISC)2 until they have gained the required experience. Once the required experience for the CAP certification is reached, the Associate of (ISC)2 can be converted to CAP status. Annual maintenance fees and continuing education requirements apply while working towards the experience requirement.
MOST
OTHER