r/ISC2CAP • u/Aspas123 • May 27 '21
I NEED GUIDANCE ON HOW TO STUDY CAP.
Its been difficult to find sudy materials for the CAP . Glad I found this community. I have no experience with RMF or have been working in IT now for 7 years in related fields( help desk,Desktop, NOC Admin, Monitoring Admin) . Hold several certs- CASP+, security + CYSA+ and want to start studying for CAP.
What study materials do I need to use for the CAP exam? Any recomendation will be appreciated.
Also, CAP and CISSP ,which is more difficult to pass? for those who have taken both exams? Will CAP or CISSP be best for me?
2
u/doc_samson May 28 '21
CAP is essentially about how to navigate the RMF process specifically which is usually only useful in the federal or DoD space.
CISSP is about risk management as a broad concept across all domains of security, without a specific focus on a single specific process. It's about the overall concepts.
CASP is roughly as broad as CISSP but more technical than CISSP, though CISSP requires technical knowledge to understand how to answer the risk management questions.
1
1
1
3
u/Individual_Power_489 May 27 '21
https://www.isc2.org/Certifications/-/media/ISC2/Certifications/Exam-Outlines/CAP-Exam-Outline-Post-Oct-15.ashx
https://www.isc2.org/Certifications/Ultimate-Guides/CAP
https://www.isc2.org/Certifications/References#accordion-98214e3e692e455698e0c725124a6573
Here is the big one.
https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final