CASP+ is an advanced-level cybersecurity certification covering technical skills in security architecture and senior security engineering in traditional, cloud, and hybrid environments, governance, risk, and compliance skills, assessing an enterprise’s cybersecurity readiness, and leading technical teams to implement enterprise-wide cybersecurity solutions. Successful candidates will have the knowledge required to:

• Architect, engineer, integrate, and implement secure solutions across complex environments to support a resilient enterprise
• Use monitoring, detection, incident response, and automation to proactively support ongoing security operations in an enterprise environment
• Apply security practices to cloud, on-premises, endpoint, and mobile infrastructure, while considering cryptographic technologies and techniques
• Consider the impact of governance, risk, and compliance requirements throughout the enterprise

The exam consist of:

Security Architecture

29%

• Analyze security requirements and objectives to ensure an appropriate, secure network architecture for a new or existing network and to provide the appropriate authentication and authorization controls
• Analyze organizational requirements to determine the proper infrastructure security design
• Integrate software applications securely into an enterprise architecture
• Implement data security techniques for securing enterprise architecture and implement secure cloud and virtualization solutions
• Explain how cryptography and public key infrastructure (PKI) support security objectives and requirements

Security Operations

30%

• Given a scenario, perform threat management and vulnerability management activities and analyze those vulnerabilities to recommend risk mitigations
• Use appropriate vulnerability assessment and penetration testing methods and tools
• Analyze indicators of compromise and formulate an appropriate response
• Given a scenario, use processes to reduce risk
• Given an incident, implement the appropriate response
• Explain the importance of forensic concepts

Security Engineering and Cryptography

26%

• Given a scenario, apply secure configurations to enterprise mobility or configure and implement endpoint security controls
• Explain security considerations impacting specific sectors and operational technologies
• Explain how cloud technology adoption impacts organizational security
• Given a business requirement, implement appropriate PKI solution or implement appropriate cryptographic protocols and algorithms
• Given a scenario, troubleshoot issues with cryptographic implementations

Governance, Risk and Compliance

15%

• Given a set of requirements, apply appropriate risk strategies
• Explain the importance of managing and mitigating vendor risk
• Understand compliance frameworks and legal considerations, and their organizational impact
• Explain the importance of business continuity and disaster recovery concepts

CASP+ covers the technical knowledge and skills required to architect, engineer, integrate, and implement secure solutions across complex environments to support a resilient enterprise while considering the impact of governance, risk, and compliance requirements.

Successful candidates will have the knowledge required to:

• Architect, engineer, integrate ,and implement secure solutions across complex environments to support a resilient enterprise.

• Use monitoring, detection, incident response, and automation to proactively support ongoing security operations in an enterprise environment.

• Apply security practices to cloud, on-premises, endpoint, and mobile infrastructure, while considering cryptographic technologies and techniques.

• Consider the impact of governance, risk, and compliance requirements throughout the enterprise

Although there are no prerequisites for CASP+, we recommend a minimum of 10 years of experience in IT administration, including at least 5 years of hands-on technical security experience before taking the exam.

English