ISC2 Certified Authorisation Professional® (CAP®)

On this accelerated ISC2 Certified Authorisation Professional (CAP) course, you'll build knowledge in Governance, Risk and Compliance (GRC) and authorising and maintaining information systems utilising various risk management frameworks, as well as best practices, policies and procedures established in cyber security.

In just 3 days, you'll learn the principles of information security, the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF) and System Development Life Cycle (SDLC) integration. You'll also build knowledge in:

• Compiling required security documentation for Authorising Official (AO)
• Performing ongoing Security Control Assessments (SCA)
• Determining specific monitoring tasks and frequency based on the agency's strategy
• Performing ongoing Information System (IS) Risk Acceptance

At the end of this course, you'll sit the ISC2 Certified Authorisation Professional (CAP) exam exam, and achieve your certification. As an Official ISC2 Training Provider and through Firebrand's Lecture | Lab | Review methodology, you'll get access to official courseware, learn from certified instructors, and train in a distraction-free environment.

Audience

This course is ideal if you are in IT, information security and information assurance practitioners and work in Governance, Risk and Compliance (GRC) roles and have a need to understand, apply and/or implement a risk management program for IT systems within an organisation.

ISC2 Premier Training Partner

At Firebrand, we are proud to be an Official Training Premier Partner of ISC2 for 2025 in recognition of our commitment to delivering world-class training, certification, and professional development opportunities for Cybersecurity professionals.

• Domain 1: Information Security Risk Management Program
• Domain 2: Categorisation of Information Systems (IS)
• Domain 3: Selection of Security Controls
• Domain 4: Implementation of Security Controls
• Domain 5: Assessment of Security Controls
• Domain 6: Authorisation of Information Systems (IS)
• Domain 7: Continuous Monitoring

Before attending this accelerated course, you should have at least 2 years of experience in one or more of the seven domains.

Please note: If you don’t have enough experience yet, you can still pass the CAP exam and become an Associate of ISC2 while you earn the work experience needed.

At the end of this accelerated course, you’ll sit the following exam at the Firebrand Training centre, covered Certification Guarantee:

ISC2 CAP exam

• Duration: 3 hours
• Format: Multiple-choice
• Passing score: 700/1000 (70%)
• Domains:
1. Information Security Risk Management Program (15%)
2. Categorisation of Information Systems (IS) (13%)
3. Selection of Security Controls (13%)
4. Implementation of Security Controls (15%)
5. Assessment of Security Controls (14%)
6. Authorisation of Information Systems (IS) (14%)
7. Continuous Monitoring (16%)