INT-2685 Security Certification & Accreditation Professional

Credits 3
This course is designed for the information security students who design policies to ensure an organization’s mission and risk tolerance, while meeting legal and regulatory requirements. The course conceptually mirrors the National Institute of Standards and Technology’s (NIST) system authorization process. It provides a comprehensive review of information systems security concepts and industry best practices, in addition to covering the seven domains of the Certification and Accreditation Professional (CAP) Common Body of Knowledge (CBK).
Job functions such as authorization officials, system owners, information owners, information system security officers, certifiers, and system managers are appropriate fits for the CAP certification.
Prerequisite(s): INT-1620
Course Outcomes

Explain the Risk Management Framework.
Describe the Federal Information Security Management Act and the National Institute of Standards and Technology processes for authorizing information IT systems.
Explain key roles and responsibilities outlined in the risk management framework.
Explain cybersecurity statutory and regulatory requirements.
Apply principles of the risk management framework to real-world activities and situations.
Explain the selection, implementation, documentation, assessment of cyber security controls.
Explain the process for developing and implementing a continuous information system monitoring program.