Certified Authorisation Professional (CAP) OR Certified Information Systems Security Professional

[Rebeka]

Hello everyone,,

I just finished grad school with a major in information assurance and cybersecurity and i'm confused whether to take the CAP or CISSP. There is very little information on cap and a lot of information on SSCP and CISSP. I have 5 year of experience working in an IT field. Also there is a clause about an expert endorsing your after you've taking the exams. Can someone please help me?

[jonesdirect]

Both the CAP (Certified Authorization Professional) and CISSP (Certified Information Systems Security Professional) certifications are valuable in the field of cybersecurity, but they serve different purposes and have slightly different focuses.

njezpass

[FavianRau]

Hello everyone, I've recently completed my graduate studies in information assurance and cybersecurity, and I'm now trying to decide between pursuing the CAP or CISSP certification. I've noticed that there's a lot less detailed information available about the CAP compared to the SSCP and CISSP, which makes the decision a bit challenging. I have five years of experience in IT, and I also came across a requirement for an expert endorsement after passing the exam. Could anyone share their insights or advice on this? For more information on , please refer to the https://homeworkifyofficial.com/

[JMExamTeam]

Hello @FavianRau,

Thank you for reaching out to ISC2 through the Community Boards.

If you would like more information on the exams offered by ISC2 and the website does not answer your questions about our certifications, please feel free to reach out to examadministration@isc2.org, and the Exam team will be glad to assist you. If you have any questions about requirements for the certifications, please reach out to membersupport@isc2.org, and our Customer Experience team will be glad to assist you with any questions.

Regards,

JMExamTeam

[Pokrak]

Great job on completing your grad school—congrats! 🎓

Since you already have 5 years of experience in IT and a degree in information assurance and cybersecurity, you’re in a solid position to pursue either the CISSP or the CAP, depending on your career goals.

Here’s a quick breakdown:

• CISSP is broader and highly recognized across many industries. It covers a wide range of topics in cybersecurity and is ideal if you’re aiming for leadership roles like Security Manager, Architect, or Consultant. It’s great for people looking to validate deep knowledge across domains of security.

• CAP is more specialized and focused on risk management, information systems authorization, and compliance—specifically following the RMF (Risk Management Framework). If you’re targeting a career in federal government, DoD, or compliance-heavy environments, CAP might be a better fit.

Regarding the endorsement—yes, after passing the exam, you’ll need to be endorsed by another ISC2-certified professional (anyone holding a valid ISC2 certification like CISSP, SSCP, etc.). This is mainly a formality to verify your experience; ISC2 also allows you to request endorsement directly from them if you don’t know someone personally.

Hope this helps! Best of luck whichever path you choose. 👍

👉 You can also check out this helpful certification comparison calculator  calculatrice m2 । calcule en m2 । calculer le m2 ।  calculatrice। calculer m2 to make a more informed decision based on your goals.