About this Course:

As attackers have learned to evade traditional signature-based solutions, such as firewalls and anti-virus software, an analytics-based approach within the IT security industry is increasingly important for organizations. CompTIA CySA+ applies behavioral analytics to networks to improve the overall state of security through identifying and combating malware and advanced persistent threats (APTs), resulting in an enhanced threat visibility across a broad attack surface. It will validate an IT professional’s ability to proactively defend and continuously improve the security of an organization. CySA+ will verify the successful candidate has the knowledge and skills required to:

• Leverage intelligence and threat detection techniques
• Analyze and interpret data
• Identify and address vulnerabilities
• Suggest preventative measures
• Effectively respond to and recover from incidents

CompTIA CySA+ meets the ISO 17024 standard and is approved by U.S. Department of Defense to fulfill Directive 8570.01-M requirements. It is compliant with government regulations under the Federal Information Security Management Act (FISMA). Regulators and government rely on ANSI accreditation because it provides confidence and trust in the outputs of an accredited program. 

Course Objectives:

• Assess and respond to security threats and operate a systems and network security analysis platform.
• Assess information security risk in computing and network environments.
• Analyze reconnaissance threats to computing and network environments.
• Analyze attacks on computing and network environments.
• Analyze post-attack techniques on computing and network environments.
• Implement a vulnerability management program.
• Collect cybersecurity intelligence.
• Analyze data collected from security and event logs.
• Perform active analysis on assets and networks.
• Respond to cybersecurity incidents.
• Investigate cybersecurity incidents.
• Address security issues with the organization's technology architecture.

Prerequisites:

While there is no required prerequisite, the CompTIA CySA+ certification is intended to follow CompTIA Security+ or equivalent experience. It is recommended for CompTIA CySA+ certification candidates to have the following:

• 3-4 years of hands-on information security or related experience
• Network+, Security+, or equivalent knowledge