CAS-005: CompTIA SecurityX

Governance, risk, and compliance

In this track, you will learn to implement security program documentation and program management. Next you will explore governance frameworks, configuration management, governance risk and compliance (GRC), and data governance. You will also learn how to performance risk management activities and threat modeling. Lastly, you will explore compliance strategies and security frameworks.

In this track, you learn you’ll focus on the knowledge skills required to analyze requirements to design resilient systems, implement throughout the systems lifecycle, and integrate controls in the design of a secure architecture. You will also focus on how to apply security concepts to the design of access, authentication, and authorization systems. Lastly, you will explore how to securely implement cloud capabilities and how to integrate Zero Trust concepts.

After completing this track, you will be able to troubleshoot common issues with IAM components, analyze the requirements to enhance security of endpoints and servers, and troubleshoot complex network infrastructure security issues. You will also focus on how to implement hardware security, including securing specialized and legacy systems. Using automation to secure the enterprise will be discussed, as will advanced cryptographic concepts and how to implement them.

This track will cover how to analyze data for security monitoring, how to analyze vulnerabilities and attacks, and prepare you to recommend solutions to reduce attack surface. Applying threat hunting and threat intelligence concepts will be explored as will analyzing data and artifacts for the purpose of performing incident response activities.