CompTIA Cybersecurity Analyst – CO-CySA

CompTIA Cybersecurity Analyst

Course Code: CO-CySA

The CompTIA Cybersecurity Analyst (CySA+) course is an international, vendor-neutral cybersecurity certification that applies behavioural analytics to improve the overall state of IT security. The CySA+ course validates knowledge and skills that are required to prevent, detect and combat cybersecurity threats. In addition, this course covers the duties of those who are responsible for monitoring and detecting security incidents in information systems and networks, and for executing a proper response to such incidents. Depending on the size of the organization, this individual may act alone or may be a member of a cybersecurity incident response team (CSIRT). The course introduces delegates to tools and tactics to manage cybersecurity risks, identify various types of common threats, evaluate the organization’s security, collect and analyse cybersecurity intelligence, and handle incidents as they occur. Ultimately, the course promotes a comprehensive approach to security aimed towards those on the front lines of defence.


– Identify Security Control Types 

– Explain the Importance of Threat Data and Intelligence

– Classify Threats & Threat Actor Types

– Utilize Attack Frameworks & Indicator Management

– Utilize Threat Modelling & Hunting Methodologies 

– Analyse Network Monitoring Output 

– Analyse Appliance Monitoring Output 

– Analyse Endpoint Monitoring Output

– Analyse Email Monitoring Output

– Configure Log Review and SIEM Tools

– Analyse and Query Logs and SIEM Data

– Identify Digital Forensics Techniques

– Analyse Network-related IoCs 

– Analyse Host-related IoCs

– Analyse Application-Related IoCs

– Analyse Lateral Movement and Pivot IoCs 

– Explain Incident Response Processes 

– Apply Detection and Containment Processes

– Apply Eradication, Recovery, and Post Incident Processes

– Apply Risk Identification, Calculation, and Prioritization Processes 

– Explain Frameworks, Policies, and Procedures 

– Analyse Output from Enumeration Tools 

– Configure Infrastructure Vulnerability Scanning Parameters 

– Analyse Output from Infrastructure Vulnerability Scanners 

– Mitigate Vulnerability Issues

– Apply Identity and Access Management Security Solutions

– Apply Network Architecture and Segmentation Security Solutions

– Explain Hardware Assurance Best Practices

– Explain Vulnerabilities Associated with Specialized Technology

– Identify Non-Technical Data and Privacy Controls 

– Identify Technical Data and Privacy Controls

– Mitigate Software Vulnerabilities and Attacks 

– Mitigate Web Application Vulnerabilities and Attacks

– Analyse Output from Application Assessments 

– Identify Cloud Service and Deployment Model Vulnerabilities 

– Explain Service-Oriented Architecture 

– Analyse Output from Cloud Infrastructure

– Compare Automation Concepts and Technologies

Download our course content

Course Price : N248, 000