Pass the Certified Authorization Professional (CAP) exam from ISC2. This makes study efficient and comprehensive. Use this manual to study the items you need to pass. As part of every risk management process relating to systems and software, this is a must-have.