CASP+ Certification Boot Camp Outline
Our courses are boosted with Training Camp’s exam prep methodology so your course content will always be up-to-date with the most current version of the exam. The following topics are general guidelines for the content. In order to better reflect the contents of the exam and for clarity purposes, the outline below may change at any time without notice.
Risk Management
•Summarize business and industry influences and associated security risks.
•Compare and contrast security, privacy policies and procedures based on organizational requirements.
•Given a scenario, execute risk mitigation strategies and controls.
•Analyze risk metric scenarios to secure the enterprise.
Security Architecture
•Given a scenario, analyze the security requirements and objectives to ensure an appropriate, secure network architecture for a new or existing network.
•Given a scenario, analyze the organizational requirements to determine the proper infrastructure security design.
•Given a scenario, integrate software applications securely into an enterprise architecture.
•Given a scenario, implement data security techniques for securing enterprise architecture.
•Given a scenario, analyze the security requirements and objectives to provide the appropriate authentication and authorization controls.
•Given a set of requirements, implement secure cloud and virtualization solutions.
•Explain how cryptography and public key infrastructure (PKI) support security objectives and requirements.
•Explain the impact of emerging technologies on enterprise security and privacy.
Security Operations
•Given a scenario, perform threat management activities.
•Given a scenario, analyze indicators of compromise and formulate an appropriate response.
•Given a scenario, perform vulnerability management activities.
•Given a scenario, use the appropriate vulnerability assessment and penetration testing methods and tools.
•Given a scenario, analyze vulnerabilities and recommend risk mitigations.
•Given a scenario, use processes to reduce risk.
•Given an incident, implement the appropriate response.
•Explain the importance of forensic concepts
•Given a scenario, use forensic analysis tools.
Security Engineering and Cryptography
•Given a scenario, apply secure configurations to enterprise mobility.
•Given a scenario, configure and implement endpoint security controls
•Explain security considerations impacting specific sectors and operational technologies.
•Explain how cloud technology adoption impacts organizational security.
•Given a business requirement, implement the appropriate PKI solution.
•Given a business requirement, implement the appropriate cryptographic protocols and algorithms.
•Given a scenario, troubleshoot issues with cryptographic implementations.
Governance, Risk, and Compliance
•Given a set of requirements, apply the appropriate risk strategies.
•Explain the importance of managing and mitigating vendor risk.
•Explain compliance frameworks and legal considerations, and their organizational impact
•Explain the importance of business continuity and disaster recovery concepts.
Is CompTIA CASP+ certification right for me?
Individuals who hold CASP+ have proven they can design and implement effective cybersecurity solutions on complex enterprise networks. This cybersecurity certification communicates the mastery-level skills of an enterprise-level security architect and senior security engineer. IT pros who pass the CASP+ performance exam can design, assess, mitigate and operate a secure enterprise network and lead the technical teams responsible for these tasks.
What makes CASP+ certification different?
CASP+ is the only hands-on, performance-based certification for practitioners – not managers – at the advanced skill level of cybersecurity. While cybersecurity managers help identify what cybersecurity policies and frameworks could be implemented, CASP+ certified professionals figure out how to implement solutions within those policies and frameworks.
CASP+ is compliant with ISO 17024 standards and approved by the US DoD to meet directive 8140/8570.01-M requirements. Regulators and governments rely on ANSI accreditation because it provides confidence and trust in the outputs of an accredited program.
