CERTIFIED AUTHORIZATION PROFESSIONAL (CAP)
The RMF was developed by the National Institute for Standards and Technology (NIST) to help DoD and Federal agencies manage risks and form Information Technology (IT) systems more quickly, efficiently, and effectively. The Risk Management Framework provides a structured yet flexible approach for managing the portion of risk resulting from incorporating information systems into the organization's mission and business processes and processes to help Federal and DoD agencies pass FISMA, CCRI Inspections, and OIG Audits. Students will grasp application-based concepts by participating in exercises and real-time learning to managing risk for the confidentiality, availability, and integrity of information systems. The course will introduce adult learning principles that enhance information systems' authorization and the RMF tasks that support the selection, development, implementation, assessment, authorization, and ongoing monitoring of common controls inherited by organizational information systems. The course can also be used as test preparation for the (ISC)², Certified Authorization Professional (CAP), and the Center for Development of Security Excellence (CDSE) examination. To qualify for the CAP, you must have a minimum of two years of cumulative paid work experience in one or more of the seven domains of the CAP Common Body of Knowledge (CBK).
Core Learning Skills Obtained
Security Assessment Procedures
Performing Risk Analysis
Understand Risk Management Program Processes
Determine the impact level on CIA for systems
Implementing Security Controls
Security Documentation
System Monitoring of Controls
Assembling an Authorization Package
Core Domains
Risk Management Framework (RMF)
Categorization of Information Systems
Selection of Security Controls
Security Control Implementation
Security Control Assessment
Information System Authorization
Monitoring of Security Controls
The RMF was developed by the National Institute for Standards and Technology (NIST) to help DoD and Federal agencies manage risks and form Information Technology (IT) systems more quickly, efficiently, and effectively. The Risk Management Framework provides a structured yet flexible approach for managing the portion of risk resulting from incorporating information systems into the organization's mission and business processes and processes to help Federal and DoD agencies pass FISMA, CCRI Inspections, and OIG Audits. Students will grasp application-based concepts by participating in exercises and real-time learning to managing risk for the confidentiality, availability, and integrity of information systems. The course will introduce adult learning principles that enhance information systems' authorization and the RMF tasks that support the selection, development, implementation, assessment, authorization, and ongoing monitoring of common controls inherited by organizational information systems. The course can also be used as test preparation for the (ISC)², Certified Authorization Professional (CAP), and the Center for Development of Security Excellence (CDSE) examination. To qualify for the CAP, you must have a minimum of two years of cumulative paid work experience in one or more of the seven domains of the CAP Common Body of Knowledge (CBK).
Core Learning Skills Obtained
Security Assessment Procedures
Performing Risk Analysis
Understand Risk Management Program Processes
Determine the impact level on CIA for systems
Implementing Security Controls
Security Documentation
System Monitoring of Controls
Assembling an Authorization Package
Core Domains
Risk Management Framework (RMF)
Categorization of Information Systems
Selection of Security Controls
Security Control Implementation
Security Control Assessment
Information System Authorization
Monitoring of Security Controls
The RMF was developed by the National Institute for Standards and Technology (NIST) to help DoD and Federal agencies manage risks and form Information Technology (IT) systems more quickly, efficiently, and effectively. The Risk Management Framework provides a structured yet flexible approach for managing the portion of risk resulting from incorporating information systems into the organization's mission and business processes and processes to help Federal and DoD agencies pass FISMA, CCRI Inspections, and OIG Audits. Students will grasp application-based concepts by participating in exercises and real-time learning to managing risk for the confidentiality, availability, and integrity of information systems. The course will introduce adult learning principles that enhance information systems' authorization and the RMF tasks that support the selection, development, implementation, assessment, authorization, and ongoing monitoring of common controls inherited by organizational information systems. The course can also be used as test preparation for the (ISC)², Certified Authorization Professional (CAP), and the Center for Development of Security Excellence (CDSE) examination. To qualify for the CAP, you must have a minimum of two years of cumulative paid work experience in one or more of the seven domains of the CAP Common Body of Knowledge (CBK).
Core Learning Skills Obtained
Security Assessment Procedures
Performing Risk Analysis
Understand Risk Management Program Processes
Determine the impact level on CIA for systems
Implementing Security Controls
Security Documentation
System Monitoring of Controls
Assembling an Authorization Package
Core Domains
Risk Management Framework (RMF)
Categorization of Information Systems
Selection of Security Controls
Security Control Implementation
Security Control Assessment
Information System Authorization
Monitoring of Security Controls