CAP Study Guide 2026

The CAP's key responsibility in coordinating between the accrediting body and internal departments is to act as a central conduit for information. This involves ensuring that all requirements, updates, and expectations from the accrediting body are clearly and accurately communicated to every relevant department. Effective communication prevents misunderstandings, promotes consistent compliance, and facilitates a smooth accreditation process.

Integrating security requirements and controls from the earliest SDLC phases (shifting left) is more effective and less costly than retrofitting security later.

NIST SP 800-60 Volume II contains the tables that map federal information types to recommended security impact levels.

To effectively communicate the purpose and structure of a new training program to staff, a kickoff session is highly beneficial. This interactive approach allows the CAP to directly explain the program's objectives, its relevance to accreditation standards, and logistical details. It also provides a valuable opportunity for staff to ask questions and receive immediate clarification, fostering engagement and ensuring a clear understanding of the training's importance.

Documented implementation evidence gives the security control assessor and Authorizing Official the basis they need to evaluate whether controls are effective and make sound authorization decisions.

NIST SP 800-53A provides the assessment procedures used to evaluate whether security controls have been correctly implemented and are operating effectively.