CompTIA SecurityX (CAS-005)
$399.00
CompTIA SecurityX (CAS-005) prepares senior security staff for CompTIA’s expert-level exam in security architecture, engineering, operations and GRC. Built for security architects and senior engineers.
- Login details sent straight after payment
- Self-paced. Study on any device
- StemBoss Certificate of Completion
- 14-day refund promise
Secure checkout. Pay by card, Apple Pay or Google Pay.
CompTIA SecurityX (CAS-005) prepares you for CompTIA’s expert-level SecurityX certification, exam code CAS-005, which replaced CASP+. It is for experienced security architects and senior security engineers who design and run security across large, complex organisations. The course follows CompTIA’s four exam domains: governance, risk and compliance, security architecture, security engineering and security operations.
What you will learn
- Build security programmes, policies and governance frameworks
- Assess and manage risk, and meet privacy laws across borders
- Model threats and map an organisation’s attack surface
- Recognise the security risks that AI brings
- Design resilient systems and secure CI/CD pipelines
- Apply zero trust, access control models and PKI
- Secure cloud services using the shared responsibility model
- Harden endpoints, servers, networks, DNS and email
- Use automation and advanced cryptography in the enterprise
- Run SIEM, threat hunting, threat intelligence and malware analysis
Course outline
- Governance, risk and compliance: security programme management, governance frameworks, change management, risk assessment, industry standards, privacy rules, threat actors, attack frameworks, attack surface and AI security challenges
- Security architecture: resilient design, hardware and software assurance, CI/CD, secure design, access control models, PKI, cloud security, shared responsibility and zero trust
- Security engineering: identity and access management, secrets management, conditional access, endpoint and network security, DNS and email security, legacy and specialised systems, automation, SCAP and cryptography
- Security operations: SIEM, data analysis, behaviour baselines, alerting and reporting, attacks and mitigations, threat hunting, threat intelligence and malware analysis
Who this course is for
- Security architects and senior security engineers
- Security consultants who design enterprise solutions
- IT and security managers who lead technical teams
- Holders of CASP+ CAS-004 who want the current version
- Experienced analysts ready to move into architecture
Before you start
This is an advanced course. CompTIA recommends around ten years of hands-on IT experience, with at least five years in security, plus knowledge at the level of Network+, Security+, CySA+, Cloud+ and PenTest+. If you are newer to security, start with Security+ and CySA+ first.
This course is best used to sharpen and organise what you already know. Map each lesson to your own work, for example by comparing your current risk process or cloud set-up with what the course describes. That makes it easier to spot gaps before exam day.
About the CAS-005 exam
CAS-005 is the exam for CompTIA SecurityX, the new name for the certification once called CASP+. CompTIA says it proves you can design, build and put in place secure solutions across complex environments. It is aimed at security architects and senior security engineers, and it includes performance-based questions as well as multiple choice. The four domains are governance, risk and compliance, security architecture, security engineering and security operations.
Jobs this course supports
- Cybersecurity Architect
- Senior Security Engineer
- Information Security Analyst
- Risk and Compliance Manager
- Enterprise Security Consultant
- Threat Intelligence Analyst
| Skill level | Advanced |
|---|---|
| Certification | CompTIA SecurityX |
| Exam code | CAS-005 |
| Certification body | CompTIA |
| Prerequisites | Several years of hands-on IT and security work. Security+, CySA+ or PenTest+ level knowledge is expected. |
| Best for | Security architects, senior security engineers, security consultants, IT security managers |
| Topics covered | Governance, risk and compliance, security architecture, zero trust, cloud security, PKI and cryptography, security engineering, SIEM and threat hunting, malware analysis |
| Format | Online video lessons, self-paced |
| Language | English |
| Closed captions | Yes |
| Certificate | StemBoss Certificate of Completion |
What is inside this course
4 modules and 56 lessons. Here is the full outline.
Module 1 - Governance, Risk, and Compliance15 lessons
- CompTIA Security (CAS-005) Course Intro
- 1.1 Security Program Management and Documentation
- 1.2 Governance Frameworks
- 1.3 Change and Configuration Management
- 1.4 Data Governance in Staging Environments
- 1.5 Risk Assessment and Management
- 1.6 Risk Considerations
- 1.7 Industry Information Security Standards
- 1.8 Security and Reporting Frameworks
- 1.9 Privacy Regulations
- 1.10 Cross-Jurisdictional Compliance Requirements
- 1.11 Threat Actors and Characteristics
- 1.12 Attack Frameworks and Models
- 1.13 Attack Surface Determination
- 1.14 Security Challenges with Artificial Intelligence
Module 2 - Security Architecture12 lessons
- 2.1 Resilient System Design
- 2.2 Software and Hardware Assurance Methods
- 2.3 Continuous Integration-Continuous Deployment
- 2.4 Secure Architecture Design
- 2.5 Access Control Technologies
- 2.6 Access Control Models
- 2.7 Public Key Infrastructure
- 2.8 Implementing Secure Cloud Capabilities
- 2.9 Cloud Data Security Considerations
- 2.10 Cloud Shared Responsibility Model
- 2.11 Cloud Control Strategies
- 2.12 Integrating Zero Trust in Secure Architecture
Module 3 - Security Engineering17 lessons
- 3.1 Subject Access Control
- 3.2 Secrets Management
- 3.3 Conditional Access
- 3.4 Identity and Access Management Components
- 3.5 Endpoint and Server Security
- 3.6 Network Infrastructure Security Issues
- 3.7 Network Misconfigurations
- 3.8 IDS and IPS Issues
- 3.9 Domain Name Security
- 3.10 Email Security
- 3.11 Hardware Security Technologies and Techniques
- 3.12 Securing Specialized and Legacy Systems
- 3.13 Using Automation to Implement Security in the Enterprise
- 3.14 Security Content Automation Protocol
- 3.15 Examining Advanced Cryptographic Concepts
- 3.16 Identifying Cryptographic Use Cases
- 3.17 Applying Cryptographic Techniques
Module 4 - Security Operations12 lessons
- 4.1 Security Information and Event Management
- 4.2 Data Aggregation Analysis
- 4.3 Behavior Baselines and Analytics
- 4.4 Incorporating Data Sources
- 4.5 Alerting, Reporting and Metrics
- 4.6 Attacks and Vulnerabilities
- 4.7 Mitigating Attacks and Vulnerabilities
- 4.8 Threat-hunting and Threat Intelligence
- 4.9 Threat Intelligence Sources
- 4.10 Analyzing Data and Artifacts
- 4.11 Malware Analysis
- 4.12 CompTIA SecurityX (CAS-005) Course Outro
Your learning path
Where CompTIA SecurityX (CAS-005) fits. Build your skills one step at a time.
Frequently asked questions
Is CompTIA SecurityX the same as CASP+?
SecurityX is the new name for CASP+. CAS-005 is the first exam released under the SecurityX name.
What are the CAS-005 exam domains?
CompTIA groups the exam into four domains: governance, risk and compliance; security architecture; security engineering; and security operations.
How much experience do I need for SecurityX?
CompTIA recommends about ten years of hands-on IT experience, including at least five years in security.
Does the course cover AI and zero trust?
Yes. It covers security challenges raised by artificial intelligence and how to build zero trust into a secure architecture.
What should I study before SecurityX?
Security+ and CySA+ build the base most learners need. PenTest+ and Cloud+ knowledge also helps with the engineering and cloud topics.
Do I get a certificate?
Yes. You get a StemBoss Certificate of Completion when you finish the course.
Can I get a refund?
Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.
