Categorization of Information Systems (11%):

• Information System Definition – The applicants should be able to explain the architecture as well as information system functionality and purpose. They should also be able to categorize the border of the information system;
• Establish Information System Categorization – This requires that the students have the competence in identifying information types processed, transmitted, or stored by the IS, determining IS document results and categorization, determining the impact level on availability, integrity, and confidentiality for each of the information types.

The SecOps Group CAP Exam Syllabus Topics:

Reference: https://secops.group/product/certified-application-security-practitioner/

How to book CAP Exam

Register for Certified Authorization Professional (CAP) Certification Exam on Pearson VUE

Resources to Prepare for This Exam

Several self-study materials are available online to help you prepare for your CAP validation confidently. The vendor itself has some wonderful assets, such as classroom-based training, online instructor-led training, and private on-site training. In addition to this, there are some top-rated books that you can refer to while studying for your CAP:

• Certified Authorization Professional (CAP) Last Minute Review by David Boone

  This book covers 100% of all seven domains in the CAP exam and is ideal for specialists with expertise in cloud computing and security. Also, it clearly outlines the processes of OMB/FISMA/NIST and more. The purpose of such a material is to gather the essential components that are required for the success of the CAP test, which is appropriate for the final squeezing minutes.

• 2nd Edition of the Official (ISC)2 Guide to the CAP CBK by Patrick D. Howard

  The book investigates the wide spectrum of system security authorization processes and discusses how they interact. Also, the author elaborates on different types of IT authorization and security controls, such as the selection and adaptation of security controls, the development of security monitoring strategies, and the implementation of selected security controls. Moreover, such a manual provides a case study on the implementation of an effective system authorization program in the major U.S. government agency.

• 3rd Edition of the CISSP and CAP Guide by Ronald L. Krutz and Russell Dean Vines

  This guide provides value-added coverage for the CAP test. It will prepare you for the CAP with a revised overview of each of the seven domains and support modern methods, specifically in the context of cyber-terrorism prevention and disaster recovery. Moreover, such a book accompanies you on various CAP topics such as RMF and System Development Life Cycle (SDLC) integration, roles and responsibilities in the authorization processes, enterprise program management controls, and understanding regulatory & legal requirements.

• Certified Authorization Professional (CAP) by Valintine Tata and George Nformi

  This study guide is an operational catalog intended for those candidates who want to pass the CAP certification exam in one go. The book comprises 250 multiple-choice questions with four answer alternatives. The authors cover key concepts and domains for the CAP review, including the study of known vulnerabilities or weaknesses in the protection system, the comprehension of configuration management systems, the assembling of security authorization packages, and the identification of information system (IS) risks.