CompTIA Advanced Security Practitioner (CASPplus)

1.0 Risk Management (19% of exam)\n\n\n- Summarise business and industry influences and associated security risks.\n- Compare and contrast security, privacy policies and procedures based on organisational requirements.\n- Given a scenario, execute risk mitigation strategies and controls.\n- Analyse risk metric scenarios to secure the enterprise.\n2.0 Enterprise Security Architecture (25% of exam)\n\n\n- Analyse a scenario and integrate network and security components, concepts and architectures to meet security requirements.\n- Analyse a scenario to integrate security controls for host devices to meet security requirements.\n- Analyse a scenario to integrate security controls for mobile and small form factor devices to meet security requirements.\n- Given software vulnerability scenarios, select appropriate security controls\n3.0 Enterprise Security Operations (20% of exam)\n\n\n- Given a scenario, conduct a security assessment using the appropriate methods.\n- Analyse a scenario or output, and select the appropriate tool for a security assessment.\n- Given a scenario, implement incident response and recovery procedures\n4.0 Technical Integration of Enterprise Security (23% of exam)\n\n\n- Given a scenario, integrate hosts, storage, networks and applications into a secure enterprise architecture.\n- Given a scenario, integrate cloud and virtualisation technologies into a secure enterprise architecture.\n- Given a scenario, integrate and troubleshoot advanced authentication and authorisation technologies to support enterprise security objectives.\n- Given a scenario, implement cryptographic techniques.\n- Given a scenario, select the appropriate control to secure communications and collaboration solutions.\n5.0 Research, Development and Collaboration (13% of exam)\n\n\n- Given a scenario, apply research methods to determine industry trends and their impact to the enterprise\n- Given a scenario, implement security activities across the technology life cycle.\n- Explain the importance of interaction across diverse business units to achieve security goals.

Sie müssen zehn Jahre Erfahrung in der IT Administration aufweisen, davon mindestens fünf Jahre technischer Sicherheitserfahrung. Ein CASP+ Training folgt in der Regel auf ein CompTIA Security+ Training oder einen gleichwertigen Kurs, dies ist aber keine zwingende Voraussetzung.