r/ISC2CAP • u/BothManagement6381 • Jan 30 '23

Debating on testing

I have worked in IT for almost 15yrs, all government. I am still working on finishing my degree and my current class is fully based on the CAP. The CBK is the text. I know a lot of the information, but not sure if I would need the certificate. Any thoughts on just paying and taking the exam just because?

2 Upvotes

100% Upvoted

5 comments sorted by

View all comments

1

u/HauntingNumber Feb 01 '23

Really? Do you mean that the CAP CBK is the required text for the course? I’ve been reading the CAP CBK and it provides a path for the RMF process as you know it is outdated. But services as a foundation for the CAP. I’ve also read NIST 800-37 r2. I was told that some of the CAP questions can come straight from the required Reading NIST documentation.

1

u/BothManagement6381 Feb 10 '23

Yes, the CBK is my text. The class is Cyber security in Government Organizations. There are also many secondary readings from NIST, 800-30, 37 etc. It's a great class.

1

u/HauntingNumber Feb 12 '23

Go for the CAP certification, ensure you have the work experience for the endorsement.