Certified Authorization Professional (CAP) Certification

1. Focus on RMF: Emphasizes the Risk Management Framework (RMF) established by NIST.
2. Risk Management: Develops proficiency in identifying, assessing, and mitigating information system risks.
3. Security Control Implementation: Covers the selection, implementation, and management of security controls.
4. Compliance: Ensures understanding and adherence to regulatory requirements and standards, especially for U.S. government and federal agencies.

Before pursuing the Certified Authorization Professional (CAP) certification, you should have the following skills:

1. Basic Understanding of Information Security: Knowledge of fundamental information security concepts and principles.
2. Risk Management: Familiarity with risk management processes and practices.
3. Security Controls: Understanding of various security controls and their implementation.
4. Compliance: Awareness of regulatory requirements and standards related to information security, especially NIST guidelines and FISMA.

By learning the Certified Authorization Professional (CAP) certification, you gain the following skills:

1. Risk Management: Proficiency in identifying, assessing, and mitigating information system risks.
2. Security Control Implementation: Ability to select, implement, and manage security controls in accordance with the Risk Management Framework (RMF).
3. Compliance Knowledge: Understanding of regulatory requirements and standards, particularly those set by NIST and related to FISMA.
4. Authorization Process: Skills in authorizing and maintaining information systems based on risk-based decisions.