Skip to main content
Ace Skills Consulting
CompTIA logoExpert

CAS-005: CompTIA SecurityX (formerly CASP+)

Design and lead enterprise security at expert level — and prepare for CompTIA SecurityX (formerly CASP+), exam CAS-005.

  • 40 hours of expert-level, scenario-driven training
  • Governance, architecture, engineering and operations
  • Advanced labs on zero trust, PKI and threat hunting
  • Mapped to the four CAS-005 domains
  • Performance-based scenario practice
Aligned to CompTIA exam CAS-005
Duration
5 Days | 40 Hrs
Next batch
Batches on request
Delivery
Live Online · Onsite · Corporate
Level
Expert
Exam
CAS-005
Language
English

Why learn CAS-005 with Ace Skills

  • Expert-level depth

    Go beyond operations into designing and engineering enterprise security solutions.

  • Architecture with governance

    Connect technical design decisions to risk, compliance and business goals.

  • Hands-on, not just theory

    Unlike many senior certifications, SecurityX tests practical skills, and our labs reflect that.

  • Practitioner alternative to managerial certifications

    A strong option for senior engineers who want to stay technical.

Course overview

SecurityX, previously known as CASP+, is CompTIA’s expert-level certification for practitioners who design and implement security solutions rather than only operate them. It expects you to balance technical depth with governance, risk and business requirements across complex, hybrid environments. This five-day course is built for experienced professionals preparing for that step.

Day one covers governance, risk and compliance: security programme governance, risk management strategies, compliance and legal frameworks, and the security implications of emerging technologies such as artificial intelligence. Day two moves to security architecture, including resilient system design, zero trust, secure cloud and hybrid architectures, and integrating security into the software development life cycle.

Day three focuses on security engineering: identity and access management at scale, endpoint and server hardening, specialised systems, cryptographic solutions and PKI design. Day four addresses security operations, including threat modelling, threat hunting, vulnerability analysis, monitoring and response, and automation. Day five consolidates the domains through cross-domain case scenarios and an exam-readiness session focused on the performance-based items the exam is known for.

Labs and scenarios are written at an architect level: you will evaluate designs, choose controls under constraints and justify your decisions. This course is aligned to the CAS-005 exam and prepares you for it; confirm the current exam details on the CompTIA website before booking.

Key features

  • Expert-level scenarios with design trade-offs
  • Zero trust and hybrid architecture workshops
  • PKI and cryptographic solution design lab
  • Threat hunting and detection engineering exercises
  • AI security and emerging technology coverage
  • Performance-based scenario practice
  • Course completion certificate from Ace Skills Consulting

Who should attend

  • Senior security engineers and architects
  • Security team leads
  • Experienced analysts moving into architecture
  • Holders of Security+, CySA+ or PenTest+ seeking an expert credential

Prerequisites

  • Significant hands-on IT security experience (CompTIA recommends around ten years in IT, including five in security)
  • Security+, CySA+ or equivalent knowledge
  • Familiarity with cloud, networking and identity concepts

Curriculum

5 Days · 40 Hours · 14 Modules · 7 Labs

  1. Security programme governance

    • Governance frameworks and documentation
    • Security programme management
    • Awareness and training programmes
    • Governance for AI adoption

    Risk management

    • Risk assessment approaches
    • Third-party and supply chain risk
    • Crisis management and business continuity
    • Risk reporting
    • Lab: Build a risk register and treatment plan for a case organisation · 45 min

    Compliance and privacy

    • Regulatory and industry frameworks
    • Privacy obligations including data residency
    • Audit and assurance considerations

  2. Resilient design

    • Availability and integrity design considerations
    • Component placement and segmentation
    • Attack surface reduction

    Zero trust and hybrid architecture

    • Zero trust principles and implementation
    • Secure cloud and hybrid patterns
    • Software-defined networking
    • Secure access service edge (SASE)
    • Lab: Design a zero trust architecture for a hybrid enterprise · 60 min

    Secure development

    • Security in the SDLC
    • Software supply chain security
    • Data security architecture
    • Lab: Threat model an application design · 40 min

  3. Identity and access at scale

    • Federation and conditional access
    • Privileged access management
    • Troubleshooting IAM

    Endpoint, server and specialised systems

    • Host hardening and attestation
    • Mobile and endpoint management
    • OT, ICS and embedded systems security
    • Lab: Harden a server and verify against a benchmark · 45 min

    Cryptography and PKI

    • Choosing cryptographic solutions
    • PKI design and certificate life cycle
    • Post-quantum considerations
    • Key management
    • Lab: Build a two-tier PKI and troubleshoot certificate errors · 50 min

  4. Threat management

    • Threat modelling methods
    • Threat intelligence integration
    • Threat hunting
    • Lab: Hunt for an adversary using detection data · 60 min

    Monitoring and response

    • Detection engineering
    • Vulnerability and attack analysis
    • Incident response at enterprise scale
    • Forensics considerations

    Automation

    • Security orchestration and automation
    • Scripting for security tasks
    • AI-assisted operations
    • Lab: Automate an alert enrichment workflow · 40 min

  5. Integrated case scenarios

    • Merger and acquisition security integration
    • Cloud migration security design
    • Responding to a major incident

    Exam readiness

    • Performance-based item strategy
    • Practice test and review
    • Final domain recap
Download full syllabus (PDF)

Skills you will gain

  • Security governance
  • Risk management
  • Compliance
  • Security architecture
  • Zero trust
  • Cloud security
  • Identity federation
  • PKI design
  • Threat hunting
  • Detection engineering
  • Security automation

Tools & technologies

  • Kali Linux
  • Wireshark
  • OpenSSL
  • Microsoft Threat Modeling Tool
  • Wazuh
  • CIS-CAT
  • Python

Certification exam

Exam details
Exam nameCompTIA SecurityX
Exam codeCAS-005
Number of questionsMaximum 90
Duration165 minutes
Passing scorePass/fail only (no scaled score)
Voucher includedNo — book directly with the vendor
Question formatMultiple choice, Multiple response, Performance-based lab
DeliveryOnline proctored or Test centre
Validity & renewal3 years (renewable through CompTIA continuing education)

Skill areas measured

  1. Governance, Risk, and Compliance
  2. Security Architecture
  3. Security Engineering
  4. Security Operations

Exam details are pending verification. Vendors change exams; confirm on the official vendor page before booking. Official exam page (opens in a new tab)

Schedule & Pricing

Live Online

Individual

Price on request

  • 40 hours of live, trainer-led sessions
  • 7 hands-on labs
  • Ace Skills course completion certificate

Onsite

At your office or our centre

Pricing depends on location, group size and dates.

  • Delivered at your premises or an Ace centre
  • Same curriculum and labs as live online
  • Dates planned around your team

Corporate / Team

Private batch for your organisation

A private batch with content adapted to your environment and goals.

  • Customised curriculum
  • Private batch, online or onsite
  • Progress and assessment reports
  • GST invoice and PO-based billing

No public batches scheduled — Talk to an Advisor for a private batch.

Projects & labs you will build

  • Day 2 · 60 min

    Design a zero trust architecture for a hybrid enterprise

  • Day 4 · 60 min

    Hunt for an adversary using detection data

Your certificate

Certificate of Completion — Ace Skills Consulting

Awarded on completing the course. It records the course title and training hours, and you can share it on your LinkedIn profile.

The CompTIA certification itself is awarded by CompTIA when you pass exam CAS-005.

Frequently asked questions

Is SecurityX the same as CASP+?

Yes. CompTIA renamed CASP+ to SecurityX, and the current exam is CAS-005.

How is SecurityX different from CISSP?

CISSP is broader and more managerial, while SecurityX focuses on hands-on design and engineering for senior practitioners.

Why is there no scaled score?

SecurityX is reported as pass or fail only, so preparation focuses on consistent competence across all domains.

Do I need prior CompTIA certifications?

They are not required, but the course assumes Security+ and CySA+ level knowledge plus substantial experience.

Can you run this for a senior security team?

Yes. Private batches can use your architecture challenges as scenario material.

Related courses

Explore more

All Cybersecurity courses CompTIA certifications

CompTIA, A+, Network+, Security+, CySA+, PenTest+, SecurityX, Cloud+ and Linux+ are trademarks of CompTIA, Inc.

Train your team on CAS-005

Private batches online or at your office in India and the GCC, with a curriculum adapted to your environment.