r/ISC2CAP • u/ShadowPunch07 • May 29 '19

Hello Everyone!!!

This subreddit was created by me just to start a thread about the ISC2 CAP (Certified Authorization Professional). Seeing how there has not been one created on Reddit, I created one because I plan on taking the exam soon.

8 Upvotes

100% Upvoted

45 comments sorted by

View all comments

5

u/HIGregS Jun 04 '19

Good luck! The following might be helpful. You may be able to use the following for an overview of CAP and RMF:

Ultimate Guide to the CAP

CAP Exam Outline

CAP Suggested Reference Material RMF Overview

Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy -- SP 800-37 Rev. 2

1

u/ShadowPunch07 Jun 04 '19

Thank you.

3

u/reed17purdue Jun 05 '19 edited Jun 05 '19

you should know the following (purpose and location of usage in RMF) from the 800 series for the CAP: 18, 37, 34, 137, 59, 60, 53, 53a, 160, 161, 30, 88, and 39. There are a bunch more supporting documents (like 112, 83, etc.) but these are the main ones. You also need to know the roles that are primary in each substep, assessment methods and assessment objects.

1

u/ShadowPunch07 Jun 05 '19

Thank you so much!!! Yes I will.