Certified Authorization Professional (CAP) is an information security practitioner who advocates for security risk management in pursuit of information system authorization to support an organization's mission and operations in accordance with legal and regulatory requirements.