The Certification Assessment Process (CAP) is one of the main document’s assessors will use to conduct the assessments. The CAP is based on NIST 800-171a and includes appendix E.