Certified Authorization Professional (CAP) - Japanese Version

Certified Authorization Professional (CAP) - Japanese Version

The CAP certification is designed for security professionals and authorizers to demonstrate their expertise in implementing the Risk Management Framework (RMF) and achieving Authorization.

Focus

The Certified Authorization Professional (CAP) - Japanese Version certification focuses on Authorization, Risk Management Framework, Information Security

Exam Duration

The Certified Authorization Professional (CAP) - Japanese Version exam duration is 3 hours

Num of Question

The exam contains a total of 90 questions

Exam Fee

The exam fee is $395 for (ISC)2 members, $595 for non-members.

Exam Validity

The CCRN-Pediatric certification is valid for 8 years.

Prior Certification

• CAP is not a prerequisite for any other (ISC)2 certification

Exam Format

The Certified Authorization Professional (CAP) - Japanese Version exam is a Multiple-choice and fill-in-the-blank questions

Passing Conditions

To pass Certified Authorization Professional (CAP) - Japanese Version exam, applicants must achieve a minimum score of Passing score is 65%

Who Should Take

Security professionals, authorizers, and anyone involved in the authorization process

• Risk Management Professional
• Security Analyst
• Information Security Officer
• System Administrator

Prerequisites

5 years of cumulative, paid work experience in information security

Or can substitute with certifications:

• 4-year college degree plus 3 years of work experience
• Regional credits: 1 year of work experience per credit, up to 3 years

Certification Process

• Meet the prerequisites and submit your application
• Pass the CAP exam
• Maintain your certification through continuing professional education (CPE)

Domains with Weights

• Risk Management Framework (RMF) (25%): The RMF is a framework for managing and mitigating risks in federal information systems. This domain focuses on the key steps in the RMF process, including categorizing systems, selecting security controls, and assessing security posture.
• System Authorization (30%): This domain covers the authorization process, including the steps involved in obtaining and maintaining authorization to operate (ATO). It also addresses the importance of authorization documentation, including the Authorization Package and the System Security Plan.
• Security Control Authorization and Accreditation (20%): This domain focuses on the authorization and accreditation of security controls, including the selection, implementation, and assessment of security controls. It also addresses the importance of continuous monitoring and security updates.
• Information System Security Engineering (15%): This domain covers the security aspects of system design, implementation, and maintenance, including the use of secure development life cycles and the importance of security in software development.
• Security Monitoring, Incident Response, and Continuous Improvement (10%): This domain focuses on the ongoing monitoring of authorized systems and the importance of incident response planning and continuous improvement to ensure that security posture remains effective and current.