The vendor-neutral CAP credential confirms knowledge, skill, and experience required for authorizing and maintaining information systems within the new Risk Management Framework as outlined in NIST SP 800-37 Rev 1. CAP validates that an  authorization professional has the competence to ensure that information systems possess security commensurate with the level of exposure to potential risk, as well as damage to assets or individuals.