IT CompTIA Advanced Security Practitioner (CASP+)

Risk Management

• Summarise influences on the organisation along with associated security risks
• Compare and contrast security, privacy policies and procedures based on organisational needs
• Implement risk mitigation strategies and controls
• Analyse risk metrics

Enterprise Security Architecture

• Integrate network and security components, concepts and architectures
• Integrate security controls for host devices
• Integrate security controls for mobile and small form factor devices
• Choose and implement security controls according to different software vulnerabilities.

Enterprise Security Operations

• Conduct security assessments
• Analyse a scenario or output, and select the appropriate tool for a security assessment
• Implement incident response and recovery processes

Technical Integration of Enterprise Security

• Integrate hosts, storage, networks and applications into a secure enterprise architecture
• Integrate cloud and virtualisation technologies into a secure enterprise architecture
• Integrate and troubleshoot advanced authentication and authorisation
• Implement cryptographic techniques
• Secure communications and collaboration tools

Research, Development and Collaboration

• Apply research methods to determine industry trends and their impacts
• Implement security activities across the technology life cycle
• Explain the importance of interaction across diverse business units