CAP Training Boot Camp

Learn how to maintain and authorize information systems within the NIST Risk Management Framework (RMF). You’ll leave this boot camp with the knowledge and domain expertise needed to pass the Certified Authorization Professional (CAP) exam the first time you take it.

Earn your CAP, guaranteed!

Boot camp overview

Infosec’s CAP Boot Camp teaches you best practices, policies and procedures used to authorize and maintain information systems. You’ll learn how to use the RMF to support your organization’s operations while complying with legal and regulatory requirements.

The CAP certification is sought after by civilian, state and local governments, as well as system integrators supporting these organizations. You’ll leave with the knowlege and skills necessary to earn your (ISC)² CAP certification, which verifies your ability to set up the formal processes used to assess risk and establish security requirements.

What's included?

93% pass rate — the best in the industry

• Three days of training with an expert instructor
• Infosec digital courseware (physical textbooks available to purchase)
• CAP exam voucher
• 90-day access to course replays (Flex Pro)
• Curated videos from other top-rated instructors (Flex Pro)
• 100% Satisfaction Guarantee
• Exam Pass Guarantee (Flex Pro)

Course objectives

This boot camp prepares you to pass the (ISC)² CAP exam, which covers seven domain areas required for information system authorization practitioners:

• Information security risk management program
• Categorization of information systems
• Selection of security controls
• Implementation of security controls
• Assessment of security controls
• Authorization of information systems
• Continuous monitoring

Who should attend?

• Information system security officers
• Senior system managers
• System administrators
• IT and information security professionals who use the RMF
• Anyone looking to learn more about the NIST-based information systems security authorization process

Prerequisites

In order to obtain the CAP certification, you must have at least two years of paid work experience in at least one of the seven domains listed in the (ISC)² CAP Common Body of Knowledge (CBK).

However, you can become an Associate of (ISC)² by passing the exam without the required work experience.

What you'll learn

This boot camp prepares you to pass the ISACA CGEIT exam, which covers four

• Understanding the purpose of information systems security authorization
• Defining systems authorization
• Describing and decide when systems authorization is employed
• Defining roles and responsibilities
• Understanding the legal and regulatory requirements for A&A
• Initiating the authorization process
• Establishing authorization boundaries
• Determining security categorization
• Performing initial risk assessment
• Selecting and refining security control
• Documenting security control

• Performing certification phase
• Assessing security control
• Documenting results
• Conducting final risk assessment
• Generating and presenting an authorization report
• Performing continuous monitoring
• Monitoring security controls
• Monitoring and assessing changes that affect the information system
• Performing security impact assessment as needed
• Documenting and monitoring results of impact assessments
• Maintaining system’s documentation (e.g., POA&M, SSP, interconnection agreements)

Can’t get away for a week?
Learn CAP on on-demand

Get the cybersecurity training you need at a pace that fits your schedule with a subscription to Infosec Skills. Includes unlimited access to hundreds of additional on-demand courses — plus cloud-hosted cyber ranges where you can practice and apply knowledge in real-world scenarios — all for just $34 a month!

• 70+ learning paths
• 500+ courses
• Cloud-hosted cyber ranges and hands-on projects
• Skill assessments and certification practice exams
• Infosec community peer support