NIST 800-37 Rev 2 and the CAP Exam

[Joro]

Does anyone know if the CAP exam will be updated to match the NIST 800-37 r2 release. There are major changes and so an exam update is called for. Just curious when and if that will happen.

[ddrake]

@Joro 

All of our exam items go through rigorous review and validation.  Any item that may have referenced the old version will have either been verified with the new, or returned for further work through our item development process to update it accordingly.  One of our standards for item writing is to use current, valid sources.  Superseded sources are on the "bad" list, and must not be used.

I hope this answers your question.

Damon

[Joro]

Damon,

Thanks for your great reply. While I know that you keep the exam updated in the most professional manner, I was more interested in knowing timing of updates. I am prepping for the CAP exam and with the changes to NIST 800-37r2 I was wondering how I should be studying is all. It a timing issue. Thanks for responding.

[Until_then]

The new CAP exam outline took effect this month. One of the differences between the old outline and the new is a more concentrated focus on privacy controls which is one of the major changes with the latest version of NIST SP 800-37. I would say the answer is yes. 

[ccboy981]

Hey, I just took the CAP and passed on 11/13/2021. The material is based off of 800-37 Rev 2.

[Creasy]

Thank you

[GDrake]

It's interesting that the exam is updated and the core study text is not. The CAP CBK 2nd Edition (as far as I can see that is the latest) is still based on an old version of the NIST 800-37 which has thrown me as it's all now out of date. I'm glad I found this forum. It would be useful to have a note on the ISC2 website when you're purchasing the book to say that you need to look at the new versions of the standards as they come out.