This certification preparation program for the Certified Authorization Professional (CAP) is targeted at professionals with at least 2 years of experience in information systems security certification and accreditation. The certification training program is designed to give new skills and tools to authorization officials, information owners, system owners, information system security officers and certifiers, senior system managers, and other professionals.  Specifically, this credential applies to those responsible for formalizing processes used to assess risk and establish security requirements and documentation. Their decisions will ensure that information systems possess security commensurate with the level of exposure to potential risk, as well as damage to assets or individuals.  CAP is a credential that is often highly sought after by levels of government, as well as private sector employers and contractors.

Course Duration

12 weeks, 15 hours a week

Credit to be Awarded

Certified Authorization Professional (CAP) Certification

Learning method

“Blended”

General Requirement

Students must be 18 years of age, and possess a high school diploma, General Equivalency Diploma (GED), or Home School Diploma.

1. Risk Management Framework (RMF) 
2. Categorization of Information Systems, and Selection of Security Controls 
3. Security Control Implementation, and Security Control Assessment 
4. Information System Authorization 
5. Monitoring of Security Controls

Domain 1: Information Security Risk Management Program

Domain 2: Scope of the Information System

Domain 3: Selection and Approval of Security and Privacy Controls

Domain 4: Implementation of Security and Privacy Controls

Domain 5: Assessment/Audit of Security and Privacy Controls

Domain 6: Authorization/Approval of Information System

Domain 7: Continuous Monitoring