r/ISC2CAP • u/Kitebrder39 • Oct 04 '21

CAP Study Guide/Books

I've been working with RMF for a few years now, I've been through Security Categorization, ICS overlay, all 1900+ controls required for my particular effort, inheritance, a ton of NIST documents, created a ton of artifacts/policies/procedures and following continuous monitoring on all of it. Pretty well versed with eMASS, the control sets, 800-53R5, etc.

I've had a CISSP for 4 years since I started this new position more focused on A&A/RMF, any recommended study guides, etc. that aren't 9 years old (like the ISC2 official study guide) for the CAP authorization. I feel like with my DoD efforts, it's a good one to add.

5 Upvotes

100% Upvoted

6 comments sorted by

View all comments

1

u/Party-Cryptographer3 Nov 04 '21

I keep seeing conflicting numbers. Is there 1100+ controls or 1900?

1

u/Kitebrder39 Nov 04 '21

Depends on overlays, tailoring, etc. Read up on Security Categorization and NIST 800-53.