CySA+ - CompTIA Cybersecurity Analyst

CompTIA CySA+ is a certification for IT professionals focused on detecting, preventing, and responding to cybersecurity threats through continuous security monitoring. It is an intermediate level between the entry-level Security+ certification and the expert-level SecurityX certification.

The CompTIA courses on this page are offered by Pumpedu - CompTIA Authorized Partner. 

Students should have at least two years’ experience in IT network security plus:

• The ability to recognize information security vulnerabilities and threats in the context of risk management.
• Foundation-level operational skills with common operating systems
• Foundational knowledge of the concepts and framework of common desktop and network security safeguards
• Foundation-level understanding of some of common networking concepts
• Foundational knowledge of major TCP/IP networking protocols

• SOC Analyst (Level 2)
• Vulnerability Analyst
• Threat Intelligence Analyst
• Incident Response Analyst
• Application Security Analyst
• Compliance and Risk Analyst
• Cybersecurity Analyst / Cybersecurity Engineer

Module 1:

• Assessing Information Security Risk
• Analyzing Reconnaissance Threats to Computing and Network Environments
• Analyzing Attacks on Computing and Networking Environments
• Analyzing Post-Attack Techniques
• Managing Vulnerabilities in the Organization
• Collecting Cybersecurity Intelligence
• Analyzing Log Data
• Performing Active Asset and Network Analysis
• Responding to Cybersecurity Incidents
• Investigating Cybersecurity Incidents
• Addressing Security Architecture Issues

Module 2:

• Explaining the Importance of Security Controls and Security Intelligence
• Utilizing Threat Data and Intelligence
• Analyzing Security Monitoring Data
• Collecting and Querying Security Monitoring Data
• Utilizing Digital Forensics and Indicator Analysis Techniques
• Applying Incident Response Procedures
• Applying Risk Mitigation and Security Frameworks
• Performing Vulnerability Management
• Applying Security Solutions for Infrastructure Management
• Understanding Data Privacy and Protection
• Applying Security Solutions for Software Assurance
• Applying Security Solutions for Cloud and Automation

e-Learning / self-study

You will get access to the CompTIA CertMaster Learn online platform for 1 year.

• Lessons cover all exam objectives with integrated videos
• Hundreds of practice questions test your knowledge
• Performance-based questions apply what you’ve learned in a scenario
• Flashcards ensure you know the terminology and acronyms required for the exam
• The Learning Plan keeps you on track with your studies

The Official CompTIA Cybersecurity Analyst (CySA+) Student Guide and labs.

This course focuses on the knowledge, ability, and skills necessary to provide for the defense of those information systems in a cybersecurity context, including protection, detection, analysis, investigation, and response processes. In addition, the course ensures that all members of an IT team—everyone from help desk staff to the Chief Information Officer—understand their role in these security processes.

How does CySA+ differ from CompTIA Security+?
Security+ is an entry-level security certification with no experience requirement, focused on basic security principles. CySA+ already requires at least two years of experience in IT network security and focuses more narrowly on behavioral analysis, continuous security monitoring, and incident response — so it's a step up from Security+ toward practical threat detection and analysis.

Can I also study through self-study/e-learning?
Yes, in addition to the five-day instructor-led course, a one-year access to the CompTIA CertMaster Learn online platform is also available as an alternative to in-person/virtual instruction.

Which job roles is the CompTIA CySA+ certification suitable for?
According to the page, the course is designed for cybersecurity professionals who ensure the protection of information systems — their availability, integrity, authentication, confidentiality, and non-repudiation. However, the specific roles listed (Security Architect, Technical Lead Analyst, etc.) don't, in my view, match the CySA+ profile and seem to belong to SecurityX instead — I'd recommend verifying this before leaving it on the website as is.

Is Pumpedu an official partner for CompTIA training?
Yes, accredited CompTIA training is delivered by Pumpedu as a CompTIA Authorized Partner, which guarantees the training aligns with official CompTIA materials.