Part 1 of 15 covering NIST Risk Management Framework (RMF) and (ISC)2 Certified Authorization Professional (CAP).

2. 







5. See
DoHear

10. Categorize
Select
Implement
Assess
Authorize
Monitor

12. Out of Scope
Peripheral
Knowledge
Supporting
Knowledge
Core
Knowledge

13. Formerly the
Certification and Accreditation Professional

20. Certification Assessment
Accreditation Authorization

21. Exam Objectives

27. Country June 2009 June 2010 June 2011 Jan 2013
Canada 7 5 6 4
Germany 0 0 0 3
Guam 0 0 0 2
India 1 1 1 1
Korea, Republic
of
1 1 1 1
Puerto Rico 0 1 2 3
Viet Nam 1 0 0 0
United States 598 688 760 1,338

33. https://www.isc2.org/dod-8570-CAP-certification.aspx

36. Document Remember
NIST SP 800-37 C & A program, overall process, guidelines
FIPS 199 Standard to define criticality / sensitivity
NIST SP 800-60 Guideline to define criticality / sensitivity
FIPS 200 Standard to select controls
NIST SP 800-53 Guidelines to selecting controls, control catalog
NIST SP 800-53A Guidelines for assessing controls, audit
NIST SP 800-30 Risk Assessment guidelines
NIST SP 800-18 Guidelines for System Security Plans
NIST SP 800-64 Guidelines for Security and SDLC
NIST SP 800-70 Security Configuration Checklist Program
NIST SP 800-47 Guideline for System Interconnections (MOU/MOA)
NIST SP 800-34 Contingency Planning Guide
NIST SP 800-61 Computer Security Incident Handling Guide

42. "CPE" is an acronym for "Continuing Professional Education.” After
you become certified by (ISC)², you are required to perform
continuing education during each 3-year certification cycle to
become recertified. The CPE requirements are intended to ensure
members maintain their competencies following initial
certification. By developing and enhancing your skills through CPE
activities, you’re making an important investment in yourself and
increasing your value to your customers and employer. – (ISC)2

44. Failure to meet the minimum annual Continuing Professional Education credit
(CPE) and Annual Maintenance Fee (AMF) requirements will result in suspension
of your certification, which is the temporary loss of right of membership. Once
the suspension is in effect, your “good standing” rights will be immediately revoked.
Access to the Member Website will be restricted to entering only CPE credits and/or
paying AMFs.
Suspension of certification can only be lifted when the minimum annual CPE credit
and AMF requirements are met. From the date of suspension, you have a 90-day
grace period to get your previously earned CPE credits and AMFs up to date. Actions
resulting in suspension in the last year of your certification cycle will result in
decertification at the end of the 90 day grace period following your certification
expiration date. (ISC)2 will send you a notification by email to inform you that you
have been decertified.