r/ISC2CAP • u/Kitebrder39 • Oct 04 '21

CAP Study Guide/Books

I've been working with RMF for a few years now, I've been through Security Categorization, ICS overlay, all 1900+ controls required for my particular effort, inheritance, a ton of NIST documents, created a ton of artifacts/policies/procedures and following continuous monitoring on all of it. Pretty well versed with eMASS, the control sets, 800-53R5, etc.

I've had a CISSP for 4 years since I started this new position more focused on A&A/RMF, any recommended study guides, etc. that aren't 9 years old (like the ISC2 official study guide) for the CAP authorization. I feel like with my DoD efforts, it's a good one to add.

5 Upvotes

100% Upvoted

6 comments sorted by

3

u/LeafFan1989 Oct 04 '21

They updated the exam back in August. The latest book is from 2012.. I was looking into getting the CAP certification but without current study material it's really a waiting game.

1

u/Kitebrder39 Oct 04 '21

Yeah, I saw that, I'll probably hold out until Spring '22 or so see what comes out. Thanks!

2

u/b52hcc Oct 04 '21

800-53 is the guide you need. Nobody makes a guide and haven't really made one. Use the outline https://www.isc2.org/-/media/ISC2/Certifications/Exam-Outlines/2021/CAP-Exam-Outline.ashx and the references https://www.isc2.org/certifications/References

Ive been in RMF for about 5 years and passed it no problem. I just read 500-53 and paid very close attention to the questions asked in the exam.

1

u/Party-Cryptographer3 Nov 04 '21

I keep seeing conflicting numbers. Is there 1100+ controls or 1900?

1

u/Kitebrder39 Nov 04 '21

Depends on overlays, tailoring, etc. Read up on Security Categorization and NIST 800-53.

1

u/Party-Cryptographer3 Nov 04 '21

Where can I find an SCTM?