CompTIA Certifications

CompTIA Advanced Security Practitioner

CompTIA Advanced Security Practitioner

The CompTIA Advanced Security Practitioner certification validates advanced-level competency in enterprise security; risk management; incident response; research and analysis; and integration of computing, communications and business disciplines.

Successful candidates will have the knowledge required to:

  • Conceptualize, engineer, integrate and implement secure solutions across complex enterprise environments
  • Apply critical thinking and judgment across a broad spectrum of security disciplines to propose and implement sustainable security solutions that map to organizational strategies
  • Translate business needs into security requirements
  • Analyze risk impact
  • Respond to security incidents

Exam Domains

Enterprise Security
30%
Risk Management and Incident Response
20%
Research and Analysis
18%
Integration of Computing, Communications and Business Disciplines
16%
Technical Integration of Enterprise Components
16%

CompTIA Advanced Security Practitioner is accredited by ANSI as meeting the ISO/IEC 17024 standard and is approved by U.S. Department of Defense (DoD) to fulfill Directive 8570.01-M requirements. It is compliant with government regulations under the Federal Information Security Management Act (FISMA).

What’s New

CompTIA updated CASP in January 2015 to address current risks and incident response scenarios inherent with cyber warfare, modern hacking techniques and the cloud. A sample of significant changes include:

  • Scenario-based objectives to evaluate technical troubleshooting and judgement
  • Broader coverage of cryptographic concepts and methods
  • Increased secure storage, specifically on encryption, data confidentiality and the cloud
  • Tracking technologies in asset management, including categorizing of systems
  • Technical side of secure integration across the enterprise was expanded into a new domain

Popular Job Roles

  • Cybersecurity/IS Professional
  • Information Security Analyst
  • Security Architect
  • IT Specialist, Cybersecurity
  • Cybersecurity Risk Analyst/Manager

Organizations that Recommend or Teach CASP

  • Booz Allen Hamilton
  • Network Solutions
  • US Army
  • US Navy
  • Verizon Telematics

Exam Details

Exam Codes CAS-002
Launch Date January 20, 2015
Exam Description CASP covers enterprise security, risk management and incident response, research and analysis, integration of computing, communications and business disciplines as well as technical integration of enterprise components.
Number of Questions Maximum of 90 questions
Type of Questions Multiple choice and performance-based
Length of Test 165 Minutes
Passing Score Pass/Fail only. No scaled score.
Recommended Experience 10 years experience in IT administration, including at least 5 years of hands-on technical security experience
Languages English
Retirement TBD - Usually three years after launch.