Become a Certified Authorization Professional (CAP)

The Certified Authorization Professional (CAP) certification path builds your expertise around the NIST Risk Management Framework (RMF). You'll learn best practices, policies and procedures used to authorize and maintain information systems.

12 courses  //   63 videos  //   4 hours of training

Free training week — 700+ on-demand courses and hands-on labs

Certified Authorization Professional (CAP) training

This learning path provides you with the knowledge and skills necessary to pass the Certified Authorization Professional (CAP) exam. As you progress through 12 courses tied to the seven CAP domains, you’ll learn the details of the NIST RMF, the legal requirements connected to risk management and a variety of advanced technical skills, such as categorizing information systems, selecting and implementing security controls, and assessing and monitoring systems. Upon completion you’ll be prepared to earn your CAP certification and validate your expertise within the risk management framework.

Learning path components

CAP Custom Practice Exam
Practice Exam
CAP Custom Practice Exam

CAP Custom Practice Exam

Prepare for your CAP exam and test your domain knowledge.

Number of questions: 162

CAP Skill Assessment
Assessment
CAP Skill Assessment

CAP Skill Assessment

See how your CAP skills stack up against other professionals in your field.

Number of questions: 20

Introduction to CAP
Course
Introduction to CAP

Introduction to CAP

Start off your exploration of CAP, or Certified Authorization Professional, with this introductory course looking at the basics of your education path.

2 videos
3 minutes of training

Information Security Risk Management Program
Course
Information Security Risk Management Program

Information Security Risk Management Program

This course on risk management in a CAP context covers security objectives, risk management programs, essential laws and documents, key roles (including federal entities) and more. Includes vocabulary and diagrams.

10 videos
40 minutes of training

Risk Management Program Processes
Course
Risk Management Program Processes

Risk Management Program Processes

In this course you'll explore the details of the risk management framework, including vocabulary, objectives and tasks.

2 videos
10 minutes of training

Regulatory and Legal Requirements
Course
Regulatory and Legal Requirements

Regulatory and Legal Requirements

Take a closer look at the regulatory and legal requirements connected to risk management, including federal laws, NIST documents and the Committee on National Security.

6 videos
40 minutes of training

Categorization of Information Systems
Course
Categorization of Information Systems

Categorization of Information Systems

Dive into CAP Domain 2 with this course on Categorization of Information Systems. Take a look at system security plans, categorization documents, examples, exercises and more.

8 videos
22 minutes of training

Selection of Security Controls
Course
Selection of Security Controls

Selection of Security Controls

Get to grips with CAP Domain 3, Selection of Security Controls. Explore control tailoring, control selection, monitoring strategy and more.

4 videos
10 minutes of training

Risk Assessment
Course
Risk Assessment

Risk Assessment

Refresh your knowledge of how bad things can get with this course on the four steps of risk assessment: Prepare, Conduct the Assessment, Report and Communicate and Maintain.

4 videos
16 minutes of training

Implementation of Security Controls
Course
Implementation of Security Controls

Implementation of Security Controls

Get ready to implement security controls with this course covering applying, implementing and tailoring controls. Includes vocabulary and diagrams.

7 videos
27 minutes of training

Assessment of Security Controls
Course
Assessment of Security Controls

Assessment of Security Controls

Prepare for security control assessment with this course covering the six key areas of control assessment, conducting the assessment and more.

4 videos
11 minutes of training

Authorization of Information Systems
Course
Authorization of Information Systems

Authorization of Information Systems

In this course, you'll take a closer look at the authorization of information systems. Refresh your knowledge of assembling a security authorization package, determining information system risk and more.

5 videos
11 minutes of training

Continuous Monitoring
Course
Continuous Monitoring

Continuous Monitoring

Review what you need to know to keep an eye on your new controls with this course on information security continuous monitoring.

8 videos
22 minutes of training

Preparing for the CAP Exam
Course
Preparing for the CAP Exam

Preparing for the CAP Exam

Get ready to earn your CAP with this short course on exam preparation and study tips.

3 videos
6 minutes of training

 

What you’ll learn.

The CAP certification exam covers seven domain areas:

  • Information security risk management program
  • Categorization of information systems (IS)
  • Selection of security controls
  • Implementation of security controls
  • Assessment of security controls
  • Authorization of information systems (IS)
  • Continuous monitoring

Who is this for?

You need two years of cumulative work experience in at least one of the CAP domains to achieve the CAP, but you can become an Associate of (ISC)² by passing the exam without experience.

This certification path is designed for:

  • Information systems analysts
  • Cybersecurity analysts
  • Information security managers
  • Information technology auditors
  • Information security specialists
  • Cybersecurity engineers
  • Anyone with a desire to build their knowledge around the NIST Risk Management Framework!

Train on your schedule

Personal
Teams

Infosec Skills subscription

Monthly
Annually
  • 80+ role-based learning paths (Ethical Hacking, Threat Hunting, etc.)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (CISSP, Security+, etc.)
  • Skill assessments
  • Infosec peer community support
  • Create custom learning paths from 100s of courses

Infosec Skills boot camp

Request a quote for pricing

 

Request Quote Browse Boot Camps
  • Exam Pass Guarantee
    If you don’t pass your exam on the first attempt, you'll get a second attempt for free. Includes the ability to re-sit the course for free for up to one year.
  • 100% Satisfaction Guarantee
    If you’re not 100% satisfied with your training at the end of the first day, you may withdraw and enroll in a different online or in-person course.
  • Live, instructor-led training (available in-person or online)
  • 90 day extended access to recordings of daily lessons
  • Certification exam voucher
  • Learn by doing with hundreds of additional hands-on courses and labs Infosec Skills Annual

Infosec Skills subscription

Annual

$599 per learner / year

Request Quote Free Team Trial
  • Team administration and reporting
  • Transferable licenses
  • 80+ role-based learning paths (Ethical Hacking, Threat Hunting, etc.)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (CISSP, Security+, etc.)
  • Skill assessments
  • Create and assign custom learning paths
  • Dedicated client success manager

Infosec Skills boot camp

Request a quote for pricing

 

Request Quote Browse Boot Camps
  • Team boot camp administration and reporting
  • Exam Pass Guarantee
    If you don’t pass your exam on the first attempt, you'll get a second attempt for free. Includes the ability to re-sit the course for free for up to one year.
  • 100% Satisfaction Guarantee
    If you’re not 100% satisfied with your training at the end of the first day, you may withdraw and enroll in a different online or in-person course.
  • Knowledge Transfer Guarantee
    If an employee leaves within three months of obtaining certification, Infosec will train a different employee at the same organization tuition-free for up to one year.
  • Certification exam vouchers
  • Live, instructor-led training (available onsite, in-person or online)
  • 90 days extended access to recordings of daily lessons
  • Build your team's skills with hundreds of additional hands-on courses and labs

Award-winning training that you can trust

Best Software - Highest Satisfaction

Best Software - Highest Satisfaction

Infosec Skills

Best IT Security-related Training Program

Best IT Security-related Training Program

Infosec Skills

Best Cybersecurity Education Provider & Best Security Education Platform

Best Cybersecurity Education Provider & Best Security Education Platform

Infosec Skills

Most Innovative Product - Cybersecurity Training for Infosec Professionals

Most Innovative Product - Cybersecurity Training for Infosec Professionals

Infosec Skills

Global Excellence - Cyber Security Education & Training

Global Excellence - Cyber Security Education & Training

Infosec Skills

Exceptional learning experiences powered by LX Labs cyber expertise

Infosec Skills courses and labs are powered by LX Labs — our elite team of cyber SMEs, learning specialists and community of top-ranked security instructors, published authors and sought-after industry leaders. We rigorously vet all Infosec Skills training resources to guarantee they meet certification and compliance requirements and align with recognized guidelines like the NICE Cybersecurity Workforce Framework.

LX Labs

SC Media names Infosec Skills Best IT Security Training

See for yourself why Infosec Skills leads the cybersecurity training industry.