Uncertain Times — Infosec's here to help. Learn about remote testing and other COVID-19 resources.

Become a Certified Authorization Professional (CAP)

The Certified Authorization Professional (CAP) certification path builds your expertise around the NIST Risk Management Framework (RMF). You'll learn best practices, policies and procedures used to authorize and maintain information systems.

12 courses  //   63 videos  //   4 hours of training

Free training week — 600+ on-demand courses and hands-on labs

Certified Authorization Professional (CAP) training

This learning path provides you with the knowledge and skills necessary to pass the Certified Authorization Professional (CAP) exam. As you progress through 12 courses tied to the seven CAP domains, you’ll learn the details of the NIST RMF, the legal requirements connected to risk management and a variety of advanced technical skills, such as categorizing information systems, selecting and implementing security controls, and assessing and monitoring systems. Upon completion you’ll be prepared to earn your CAP certification and validate your expertise within the risk management framework.

Learning path components

CAP Custom Practice Exam
Practice Exam
CAP Custom Practice Exam

CAP Custom Practice Exam

Prepare for your CAP exam and test your domain knowledge.

Number of questions: 162

CAP Skill Assessment
Assessment
CAP Skill Assessment

CAP Skill Assessment

See how your CAP skills stack up against other professionals in your field.

Number of questions: 20

Introduction to CAP
Course
Introduction to CAP

Introduction to CAP

Start off your exploration of CAP, or Certified Authorization Professional, with this introductory course looking at the basics of your education path.

2 videos
3 minutes of training

Information Security Risk Management Program
Course
Information Security Risk Management Program

Information Security Risk Management Program

This course on risk management in a CAP context covers security objectives, risk management programs, essential laws and documents, key roles (including federal entities) and more. Includes vocabulary and diagrams.

10 videos
40 minutes of training

Risk Management Program Processes
Course
Risk Management Program Processes

Risk Management Program Processes

In this course you'll explore the details of the risk management framework, including vocabulary, objectives and tasks.

2 videos
10 minutes of training

Regulatory and Legal Requirements
Course
Regulatory and Legal Requirements

Regulatory and Legal Requirements

Take a closer look at the regulatory and legal requirements connected to risk management, including federal laws, NIST documents and the Committee on National Security.

6 videos
40 minutes of training

Categorization of Information Systems
Course
Categorization of Information Systems

Categorization of Information Systems

Dive into CAP Domain 2 with this course on Categorization of Information Systems. Take a look at system security plans, categorization documents, examples, exercises and more.

8 videos
22 minutes of training

Selection of Security Controls
Course
Selection of Security Controls

Selection of Security Controls

Get to grips with CAP Domain 3, Selection of Security Controls. Explore control tailoring, control selection, monitoring strategy and more.

4 videos
10 minutes of training

Risk Assessment
Course
Risk Assessment

Risk Assessment

Refresh your knowledge of how bad things can get with this course on the four steps of risk assessment: Prepare, Conduct the Assessment, Report and Communicate and Maintain.

4 videos
16 minutes of training

Implementation of Security Controls
Course
Implementation of Security Controls

Implementation of Security Controls

Get ready to implement security controls with this course covering applying, implementing and tailoring controls. Includes vocabulary and diagrams.

7 videos
27 minutes of training

Assessment of Security Controls
Course
Assessment of Security Controls

Assessment of Security Controls

Prepare for security control assessment with this course covering the six key areas of control assessment, conducting the assessment and more.

4 videos
11 minutes of training

Authorization of Information Systems
Course
Authorization of Information Systems

Authorization of Information Systems

In this course, you'll take a closer look at the authorization of information systems. Refresh your knowledge of assembling a security authorization package, determining information system risk and more.

5 videos
11 minutes of training

Continuous Monitoring
Course
Continuous Monitoring

Continuous Monitoring

Review what you need to know to keep an eye on your new controls with this course on information security continuous monitoring.

8 videos
22 minutes of training

Preparing for the CAP Exam
Course
Preparing for the CAP Exam

Preparing for the CAP Exam

Get ready to earn your CAP with this short course on exam preparation and study tips.

3 videos
6 minutes of training

 

What you’ll learn.

The CAP certification exam covers seven domain areas:

  • Information security risk management program
  • Categorization of information systems (IS)
  • Selection of security controls
  • Implementation of security controls
  • Assessment of security controls
  • Authorization of information systems (IS)
  • Continuous monitoring

Who is this for?

You need two years of cumulative work experience in at least one of the CAP domains to achieve the CAP, but you can become an Associate of (ISC)² by passing the exam without experience.

This certification path is designed for:

  • Information systems analysts
  • Cybersecurity analysts
  • Information security managers
  • Information technology auditors
  • Information security specialists
  • Cybersecurity engineers
  • Anyone with a desire to build their knowledge around the NIST Risk Management Framework!

Train on your schedule

Personal

Infosec Skills

  • 600+ courses
  • 100s of hands-on labs and projects
  • 70+ role-based learning paths
  • Skill assessments
  • Custom learning paths
  • Custom certification practice exams
  • Cloud-hosted cyber ranges
  • Infosec peer community support

Infosec Skills boot camp

  • Live, instructor-led training
  • Available in-person or live online
  • All Infosec Skills content from the minute you enroll to 90 days following your boot camp
  • Certification exam voucher
  • 100% Satisfaction Guarantee
  • Exam Pass Guarantee

Team

Infosec Skills Teams

$599 per learner / year

  • All Infosec Skills content for the year
  • Team boot camp discounts — online or onsite (not included with subscription)
  • Team administration and reporting
  • Custom team learning paths
  • Transferable licenses
  • Dedicated client success manager

Award-winning training that you can trust

Best Software - Highest Satisfaction

Infosec Skills

Best IT Security-related Training Program

Infosec Skills

Best Cybersecurity Education Provider & Best Security Education Platform

Infosec Skills

Most Innovative Product - Cybersecurity Training for Infosec Professionals

Infosec Skills

Global Excellence - Cyber Security Education & Training

Infosec Skills

Exceptional learning experiences powered by LX Labs cyber expertise

Infosec Skills courses and labs are powered by LX Labs — our elite team of cyber SMEs, learning specialists and community of top-ranked security instructors, published authors and sought-after industry leaders. We rigorously vet all Infosec Skills training resources to guarantee they meet certification and compliance requirements and align with recognized guidelines like the NICE Cybersecurity Workforce Framework.

LX Labs

SC Media names Infosec Skills Best IT Security Training

See for yourself why Infosec Skills leads the cybersecurity training industry.