CompTIA SecurityX

The CompTIA SecurityX certification represents an advanced credential within the landscape of CompTIA certifications, designed for professionals with high-level responsibilities in organizational cybersecurity.

It is intended for industry experts such as security architects, senior security engineers, and other professionals with established experience in cybersecurity.

The course enables participants to acquire advanced skills in key areas such as enterprise security architecture, risk management, incident response, and the integration of security controls in complex environments.

Required Prerequisites

• No formal prerequisites: CompTIA does not strictly require any prior certifications to sit for the SecurityX course.
• Strong foundational IT knowledge: A solid understanding of networking, operating systems, and core security principles is necessary to follow the advanced course material.

Recommended Prerequisites

• To fully grasp the advanced and hands-on concepts of the SecurityX curriculum, candidates are strongly recommended to have:
• Professional Experience: Around 5 years years of professional IT experience, preferably within a cybersecurity role.
• Prior Certifications: Holding an active intermediate-level certification, such as CompTIA Security+, Network+, or equivalent knowledge, is highly recommended as a stepping stone.
• Technical Familiarity: Practical experience with cloud environments (AWS, Azure, or hybrid), network infrastructure configuration, and basic security automation tools.

Upon completion of the training program, participants will have acquired comprehensive skills in the following areas:

Security Architecture

• Hybrid Environment Requirements Analysis: Evaluating security needs in mixed infrastructure spanning on-premises and cloud environments.
• Zero Trust Model Implementation: Applying the "Zero Trust" security paradigm, based on strict controls and continuous verification.
• Advanced Cloud and Virtualization Solutions: Utilizing secure technologies for cloud and virtualized environments to design robust infrastructures.

Security Operations

• Advanced Threat Management: Detecting and countering complex threats using advanced response tools and strategies.
• Vulnerability Management: Establishing processes to identify, classify, and remediate system weaknesses.
• Risk Mitigation: Developing plans to reduce cyber risks.
• Incident Response and Digital Forensics: Managing critical security events and conducting digital investigations to reconstruct incidents.

Governance, Risk, and Compliance

• Cyber Resilience Assessment: Measuring an organization's preparedness level against cyberattacks.
• Regulatory Compliance: Demonstrating compliance with regulations such as GDPR, HIPAA, NIST, PCI-DSS, SOX, FISMA, CMMC, and others.

Security Engineering and Cryptography

• Endpoint Protection: Configuring security solutions for enterprise devices.
• Enterprise Mobility Management: Ensuring secure access to resources from mobile devices or remote locations.
• Cloud and Hybrid Environment Security: Applying protection practices across diverse technological contexts.
• PKI Infrastructure and Cryptographic Solutions: Designing and managing cryptographic systems and digital certificates to protect data.

• Security Architect
• Security Engineer
• SOC Analyst
• Incident Responder
• Cloud / Network Administrator
• Cloud / Network Engineer
• Cloud / Network Architect
• Application Security Engineer
• Cybersecurity Analyst

• Module 1: Preassessment
• Module 2: Summarizing Governance, Risk, and Compliance
• Lesson 2A: Implement Appropriate Governance Components
• Lesson 2B: Explain Legal Compliance
• Lesson 2C: Apply Risk Management Strategies
• Module 3: Implementing Architecture and Design
• Lesson 3A: Apply Software Development
• Lesson 3B: Integrate Software Architecture
• Lesson 3C: Support Operational Resilience
• Lesson 3D: Implement Cloud Infrastructure
• Lesson 3E: Integrate Zero Trust Concepts
• Lesson 3F: Troubleshoot using AAA and IAM
• Module 4: Understanding Security Engineering
• Lesson 4A: Enhance Endpoint Security
• Lesson 4B: Configure Network Infrastructure
• Lesson 4C: Initiate Security Automation
• Lesson 4D: Apply Cryptography Concepts
• Module 5: Applying Security Operations and Incident Response
• Lesson 5A: Perform Threat Modeling
• Lesson 5B: Examine Security Monitoring
• Lesson 5C: Analyze Known Attack Methods and Associated Mitigations
• Lesson 5D: Apply Threat Hunting Tools and Technologies
• Lesson 5E: Evaluate Incident Analysis and Response