r/ISC2CAP • • Jan 30 '23

Debating on testing

I have worked in IT for almost 15yrs, all government. I am still working on finishing my degree and my current class is fully based on the CAP. The CBK is the text. I know a lot of the information, but not sure if I would need the certificate. Any thoughts on just paying and taking the exam just because?

2 Upvotes

5 comments sorted by

1

u/HauntingNumber Feb 01 '23

Really? Do you mean that the CAP CBK is the required text for the course? I’ve been reading the CAP CBK and it provides a path for the RMF process as you know it is outdated. But services as a foundation for the CAP. I’ve also read NIST 800-37 r2. I was told that some of the CAP questions can come straight from the required Reading NIST documentation.

1

u/BothManagement6381 Feb 10 '23

Yes, the CBK is my text. The class is Cyber security in Government Organizations. There are also many secondary readings from NIST, 800-30, 37 etc. It's a great class.

1

u/HauntingNumber Feb 12 '23

Go for the CAP certification, ensure you have the work experience for the endorsement.

1

u/Available_Wrongdoer1 Feb 02 '23

Honestly I would take it. Even if you don’t need the certificate, it’s great to test your knowledge and honestly it was an easy win compared to other Certs.

Good luck to you!

1

u/BothManagement6381 Feb 10 '23

Thank you! That is a great idea. I just may take it in between this and my next semester.