🛡️ CompTIA CySA+

🧠 1. Certification Name and Issuing Body

• Full certification name: CompTIA Cybersecurity Analyst (CySA+)

• Issuing organization: CompTIA

• Official website: https://www.comptia.org/certifications/cybersecurity-analyst

🧩 2. Certification Level and Type

• Level: Intermediate

• Type: Technical (Blue Team / SOC-focused)

📜 3. Purpose and Goals

• What skills does it certify?
  Threat detection, log analysis, vulnerability management, risk assessment, incident response planning and handling

• Target roles or profiles:
  SOC Analyst (Tier I/II), Threat Intelligence Analyst, Cybersecurity Analyst, Blue Team Technician

• Practical applications:
  Day-to-day operations in SOC environments, interpreting logs, analyzing events, identifying threats, recommending mitigation actions

🎓 4. Prerequisites

• Recommended prior certifications:
  CompTIA Security+, Network+, or equivalent knowledge

• Suggested experience:
  3–4 years of hands-on experience in IT with at least 2 years in cybersecurity

• Required technical knowledge:
  TCP/IP, Linux/Windows command-line, SIEM usage, log interpretation, incident management processes

📚 5. Content and Curriculum

• Key domains/modules:

  1. Security Operations

  2. Vulnerability Management

  3. Incident Response and Management

  4. Reporting and Communication

  5. Security Architecture and Tool Sets

• Technologies/tools:
  SIEMs (Splunk, QRadar), vulnerability scanners (Nessus, OpenVAS), Wireshark, firewalls, IDS/IPS, syslog, scripting basics (Python, Bash)

• Framework mapping:
  NIST CSF, NIST SP 800-61, MITRE ATT&CK, ISO 27001, NICE Framework (PR-IR, DE)

🧪 6. Learning Approach

• Style: Mixed (theory + simulation-based)

• Labs/environments: Available through CertMaster Labs and third-party platforms

• Materials: Official CompTIA Study Guide, CertMaster Learn, practice exams, Cybrary courses

• Recommended platforms: TryHackMe (SOC rooms), Hack The Box Academy, Udemy (Jason Dion, Mike Chapple), Cybrary

📝 7. Exam Format and Details

• Mode: Online proctored or in-person (Pearson VUE)

• Duration: 165 minutes

• Questions: Max 85 (multiple choice + performance-based)

• Languages: English, Japanese

• Retake policy: No mandatory wait period after first failure; fee applies

• Certification validity: 3 years

💰 8. Estimated Cost

• Exam fee: $392 USD

• Training cost: ~$150–$800 USD (depending on provider)

• Renewal cost: Submit 60 CEUs or take a higher-level exam (e.g., CASP+)

🌍 9. Industry Recognition

• Demand/popularity: High in SOC roles and entry-level security analyst positions; DoD 8570 approved

• Organizations that value it: MSSPs, financial firms, government agencies, healthcare institutions

• Comparison:

  • More hands-on and analytical than Security+

  • Similar in depth to SSCP, but more SOC/practical-focused

  • Less advanced than GCIH or GCDA

💼 10. Career Opportunities

• Job roles:
  SOC Analyst (L1/L2), Security Operations Technician, Cybersecurity Analyst, Threat Analyst

• Suggested paths:
  → Security+ → CySA+ → GCIH / GCDA / SC-200
  → CySA+ + PenTest+ → Blue + Red foundations

💵 11. Average Salary

• USA: $75,000–$95,000/year

• Europe: €45,000–€65,000/year

• Salary impact: Typically 10–20% higher than general IT roles

• (Sources: PayScale, Glassdoor, CompTIA research)

📅 12. Renewal and Maintenance

• Validity: 3 years

• Renewal options:

  • Earn 60 CEUs via webinars, training, teaching, or other certifications

  • Take the latest CySA+ exam

  • Use CompTIA’s CertMaster CE platform

🧭 13. Final Recommendations

• Ideal for:
  IT professionals moving into cybersecurity analysis roles or current SOC analysts seeking formal validation

• When to pursue:
  After Security+ or 1–2 years in IT; ideal before more advanced Blue Team certifications like GCIH or SC-200

• Tips:
  Focus on log analysis and threat detection. Practice interpreting SIEM outputs and correlating events. Use performance-based questions to guide practical study.