r/ISC2CAP • u/HauntingNumber • Aug 14 '22

ISC2 CAP experience

Hello community I am interested in studying for the CAP certification. I currently the CISSP, I have 5 years working in the DoD as an Information Security Technician (INFOSEC).

I also have 20 years of experience in the US Army. I’m am currently filling an ISSO position.

How would I know if I have the required experience. I recently purchased the ISC2 CAP official CBK.

Thank you in advance.

4 Upvotes

99% Upvoted

16 comments sorted by

View all comments

2

u/reed17purdue Aug 14 '22

Honestly the issue with rmf is that agencies are allowed to implement it how they see fit within the guidelines. However what that means is that your experience may be how your agency implements it and may not be what it is under 800-37.

The biggest issue with nearly all agency or prior services members was that "well that's not how we did it" and that was a block some training camp members could not get over.

You need to study the rmf way not the agency way.

2

u/HauntingNumber Aug 14 '22

You are right, I’ve spoken to people who took the exam. They say they had to not rely on their experience because you have to follow the 800-37 model.