Building and Implementing a Security Certification and Accreditation Program: Official (ISC)2 Guide to the CAP CBK demonstrates the practicality and effectiveness of certification and accreditation (C&A) as a risk management methodology for IT systems in both public and private organizations. It provides an overview of C&A components, enabling security professionals to learn how to secure systems via standard, repeatable processes. The book begins with a description of what it takes to build a C&A program, followed by an analysis of C&A processes and how they interrelate. The text provides a case study of a successful implementation in a major U.S. government department.