CompTIA Cybersecurity Certifications

CompTIA Cybersecurity Analyst (CySA+)

As cybercrime increases, the requirement for highly skilled information security analysts will continue to increase as well. The Bureau of Labor Statistics (BLS) reports anticipated growth of 28 percent for information security analysts between 2016 and 2026, the fastest rate of growth for all occupations. One of the newer additions to the CompTIA certification portfolio is the Cybersecurity Analyst (CySA+) certification. The CySA+ credential is specifically designed to meet the ever-growing need for experienced, qualified information security analysts.

CySA+ credential holders are well versed in the use of system threat-detection tools, as well as the use of data and behavioral analytics to secure applications and systems from risks, threats and other vulnerabilities. CySA+ certification holders are not only able to monitor network behavior, but analyze results and create solutions to better protect against advanced persistent threats (APTs), intrusions, malware and the like.

CompTIA describes CySA+ as a bridge cert between the Security+ credential (requiring two years' experience) and the master-level Advanced Security Practitioner Certification (CASP), which requires 10 years of experience. To earn a CySA+, candidates must pass a performance-based exam.

CompTIA Advanced Security Practitioner+ (CASP+)

To Learn CompTIA, it no longer uses the "master" designation, the highly sought-after CASP+ certification is most certainly a master-level credential. Targeting practitioners, CASP is the only performance-based, hands-on certification currently available from CompTIA. This certification is designed for seasoned IT security professionals who plan, design and implement security solutions in an enterprise environment.

Although this certification doesn't impose any explicit prerequisites, it's not a bad idea to earn the Network+ and Security+ certifications before tackling the CASP exam. You should also have 10 years of IT administration experience plus a minimum of five years of technical security experience (thus securing this certification's place as a "master" credential).

Booz Allen Hamilton, Network Solutions and Verizon Connect, among other companies, require CASP+ certification for certain positions. The U.S. Army and U.S. Navy also accept CASP+ as an industry-based certification required by employees and contractors who perform IT work in DoD data centers. The CASP+ certification requires that candidates pass the CAS-003 exam, which consists of 90 multiple-choice and performance-based questions.

CompTIA PenTest+

The newest addition to the CompTIA certification family is the CompTIA PenTest+. An intermediate-level credential, PenTest+ is designed to complement the CySA+. While CySA+ is defensive in nature (focusing on threat detection and response), the PenTest+ credential is offensive, focusing on using penetration testing to identify and manage network vulnerabilities across multiple spectra.

There are no mandatory prerequisites, but the Network+ and Security+ (or equivalent skills) are highly recommended, along with a minimum of two years of information security experience. Candidates pursuing the cybersecurity career path may take the PenTest+ or CySA+ credential in any order.

The exam was released in July 2018 and is focused on communicating and reporting results, analyzing data, conducting penetration testing and scanning, and planning assessments. The exam also tests a candidate's knowledge of legal and compliance requirements.