CompTIA CySA+® Certification Training

Course 2047

Duration: 5 days
Exam Voucher: Yes
Language: English
Level: Intermediate

CompTIA CySA+ CSO-004 Training prepares cybersecurity professionals to proactively defend and monitor modern IT environments through behavioral analytics, threat detection, and incident response. The course focuses on the skills needed to identify vulnerabilities, analyze threats, secure applications and systems, and respond effectively to cybersecurity incidents. Participants learn how to use security tools and data to investigate suspicious activity, assess risk, and strengthen an organization’s overall security posture. Ideal for security analysts, SOC team members, and IT security professionals, this training helps build the practical knowledge needed to support the responsibilities covered by the CompTIA CySA+ certification.

U.S. DoDM 8140.03 APPROVED BY DEPARTMENT OF DEFENSE

CompTIA CySA+ Certification Training Delivery Methods

In-Person
Online

CompTIA CySA+ Certification Training Information

In this course, you will learn how to:
- Identify vulnerabilities, assess risk, and prioritize remediation activities
- Analyze logs, alerts, and behavioral indicators to detect suspicious or malicious activity
- Investigate security events, support response efforts, and apply best practices for containment and recovery
- Use data from security tools and monitoring platforms to strengthen an organization’s security posture
- Evaluate and improve defensive controls across modern IT environments
- Document findings, communicate risks, and support decision-making with actionable security insights
Prerequisites

Candidates should have Network+ and Security+ level knowledge or equivalent experience, along with approximately 3–4 years of hands-on experience in information security, security operations, vulnerability management, or incident response.
Who should attend

This course is designed for cybersecurity professionals who are responsible for threat detection, monitoring, vulnerability management, and incident response within an organization. It is well suited for security analysts, SOC analysts, vulnerability analysts, incident responders, threat intelligence analysts, and IT security professionals who want to strengthen their ability to analyze threats, secure systems, and respond effectively to security events.

CompTIA CySA+® Certification Training Course Outline

Module 1: Identifying Security Operations Fundamentals

1.1 Cybersecurity Foundations

1.2 Governance, Policies, and Controls

1.3 Introduction to Incident Response in the SOC

Module 2: Applying Risk Management Strategies

2.1 Risk Concepts

2.2 Threat Modeling Frameworks

Module 3: Managing System Security Configurations

3.1 Attack Surface Management

3.2 System Hardening

Module 4: Comparing System Architectures

4.1 Infrastructure and System Architecture

4.2 Modern Network Architectures

4.3 Critical Infrastructure and Industrial Controls

Module 5: Applying Access Management

5.1 Identity and Access Management

5.2 Device and Endpoint Management

5.3 Data Protection and Cryptography

Module 6: Threat Intelligence and Threat Hunting

6.1 Threat Actor Concepts

6.2 Threat Intelligence Sources

6.3 Threat Hunting

Module 7: Assessing Network Vulnerabilities

7.1 Vulnerability Scanning Foundations

7.2 Vulnerability Scan Types

7.3 Select Vulnerability Tools

Module 8: Managing Incident Response and Communication

8.1 Manage Logs

8.2 Incident Escalation

8.3 Post-Incident Actions

8.4 Incident Response Metrics

Module 9: Executing Incident Response Plans

9.1 Attack Methodology Frameworks

9.2 The Incident Response Process

9.3 Incident Response Techniques

Module 10: Analyzing Malicious Activity

10.1 Threat Detection and Analysis Tools

10.2 Host Indicators of Compromise

10.3 Network Indicators of Compromise

10.4 Application and Web-based Indicators

Module 11: Automating Data Analysis

11.1 Scripting Fundamentals

11.2 Scripting Languages

11.3 Security Analytics and Pattern Recognition

11.4 Technology and Tool Integration

Module 12: Improving Processes with Automation

12.1 Standardization and Team Coordination

12.2 Automation, Orchestration, and Enrichment

12.3 AI Risks and Governance

12.4 AI in Security Operations

Module 13: Assessing Application Vulnerabilities

13.1 Web and Application Vulnerability Analysis

13.2 Cloud Vulnerability Assessment

Module 14: Securing Applications

14.1 Secure Software Development and Testing

14.2 Application Attack Identification and Mitigation

Select Commercial or Government Pricing

$3,990

5-day instructor-led training course
CompTIA-approved CySA+ training programs
Earn 29 CompTIA CEUs
Exam voucher included
One-on-one after-course instructor coaching

Would you like to take this course as a team?

Oct. 26 - 30 10:00 a.m. - 5:30 p.m. EDT

Austin or Virtual
Nov. 16 - 20 9:00 a.m. - 4:30 p.m. EST

Ottawa or Virtual
Jan. 11 - 15 9:00 a.m. - 4:30 p.m. EST

New York or Virtual
Mar. 1 - 5 9:00 a.m. - 4:30 p.m. EST

Herndon, VA or Virtual
Mar. 15 - 19 10:00 a.m. - 5:30 p.m. EDT

Austin or Virtual
Apr. 19 - 23 9:00 a.m. - 4:30 p.m. EDT

Ottawa or Virtual
Jun. 7 - 11 9:00 a.m. - 4:30 p.m. EDT

New York or Virtual
Jul. 19 - 23 9:00 a.m. - 4:30 p.m. EDT

Herndon, VA or Virtual
Aug. 9 - 13 10:00 a.m. - 5:30 p.m. EDT

Austin or Virtual
Aug. 30 - Sep. 3 9:00 a.m. - 4:30 p.m. EDT

Ottawa or Virtual

Scroll to view additional course dates

$3,511

5-day instructor-led training course
CompTIA-approved CySA+ training programs
Earn 29 CompTIA CEUs
Exam voucher included
One-on-one after-course instructor coaching

Would you like to take this course as a team?

Oct. 26 - 30 10:00 a.m. - 5:30 p.m. EDT

Austin or Virtual
Nov. 16 - 20 9:00 a.m. - 4:30 p.m. EST

Ottawa or Virtual
Jan. 11 - 15 9:00 a.m. - 4:30 p.m. EST

New York or Virtual
Mar. 1 - 5 9:00 a.m. - 4:30 p.m. EST

Herndon, VA or Virtual
Mar. 15 - 19 10:00 a.m. - 5:30 p.m. EDT

Austin or Virtual
Apr. 19 - 23 9:00 a.m. - 4:30 p.m. EDT

Ottawa or Virtual
Jun. 7 - 11 9:00 a.m. - 4:30 p.m. EDT

New York or Virtual
Jul. 19 - 23 9:00 a.m. - 4:30 p.m. EDT

Herndon, VA or Virtual
Aug. 9 - 13 10:00 a.m. - 5:30 p.m. EDT

Austin or Virtual
Aug. 30 - Sep. 3 9:00 a.m. - 4:30 p.m. EDT

Ottawa or Virtual

Scroll to view additional course dates

Speak with a Learning Consultant

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

CompTIA CySA+ Certification Training FAQs

CompTIA CySA+ is a cybersecurity certification focused on threat detection, vulnerability management, security monitoring, and incident response. It is designed for professionals in roles such as security analyst, SOC analyst, vulnerability analyst, incident responder, and IT security specialist who need to proactively defend modern IT environments.

Yes. Students will get the most value from this course if they already have foundational networking and security knowledge, such as CompTIA Network+ and Security+ level skills or equivalent experience. CompTIA generally recommends 3–4 years of hands-on information security or related experience before pursuing CySA+ certification.

This course helps you build practical skills in threat and vulnerability management, security monitoring, log and alert analysis, incident response, risk assessment, and defensive security operations. It is designed to help you understand how to identify suspicious activity, investigate threats, and improve an organization’s security posture using a proactive, analyst-driven approach.

CySA+ validates hands-on skills in security operations and threat defense, making it valuable for professionals who want to move into or advance within cybersecurity analyst and SOC roles. For organizations, CySA+-trained staff can help improve threat detection, vulnerability management, incident response readiness, and overall defensive security capability.