SecurityX, the successor to CASP+, shows that a seasoned practitioner can design, build and run security across a complex enterprise. Over five days we cover the four CAS-005 domains through architecture case studies and exercises modelled on the performance-based questions. The course is aimed at experienced professionals and favours reasoning through realistic scenarios over memorisation.
The essentials
Publisher : CompTIA
Certification : CompTIA SecurityX
Exam code : CAS-005
Duration : 5 days (35 h)
Level : Expert
Formats : Live virtual class · In-person in Casablanca · On-site (intra-company)
Languages : French or English
Exam facts : Up to 90 questions (multiple choice + performance-based) · 165 min · pass/fail, no scaled score
Exam voucher: included or optional depending on the package — contact us.
Align governance, risk and compliance with regulatory and business needs.
Design resilient architectures: zero trust, hybrid cloud, segmentation.
Select and integrate identity, cryptography and endpoint controls.
Secure applications, automation and the software supply chain.
Use monitoring, threat hunting and incident response effectively.
Assess how emerging technology, including AI, changes the security posture.
Justify architecture decisions to leadership or a risk committee.
Program
Governance, risk and compliance (20%)
Policies, standards and control frameworks
Risk and third-party management
Legal duties and data protection
Audit readiness and compliance management
Security architecture (27%)
Resilient design and zero trust
Cloud, hybrid and operational technology
Data security across its lifecycle
Security engineering (31%)
Identity, access and applied cryptography
Endpoint and server hardening
Automation, scripting and software security
Security operations (22%)
Monitoring and threat intelligence
Vulnerability management
Incident response and forensics
Log and behaviour analysis
Prerequisites
CompTIA recommends at least ten years of hands-on IT experience, including five in security.
Knowledge equivalent to Network+, Security+, CySA+, Cloud+ and PenTest+ is advised.
Solid technical English is essential, since the exam is only offered in English.
Target audience
Senior security architects and engineers
Technical security leads and aspiring CISOs
Consultants who design or review enterprise architectures
Cloud and network engineers taking on end-to-end security ownership
The exam
The CAS-005 exam has up to 90 multiple-choice and performance-based questions and lasts up to 165 minutes. There is no scaled score: you simply pass or fail. It is offered in English and taken at a Pearson VUE test center or online via OnVUE. The certification is valid for three years and renewed through CompTIA continuing education. Performance-based items mirror real tasks such as reviewing a configuration, choosing a control or reading logs. With no scaled score, there is no point chasing a high mark: the goal is to clear the bar with a safe margin.
Preparation tips
Think like an architect: the right answer balances security, cost and business needs.
Invest in Security engineering (31%): identity, cryptography and automation.
Study in English, currently the only exam language.
Frequently asked questions (FAQ)
Has SecurityX replaced CASP+?
Yes. CompTIA renamed CASP+ to SecurityX with the CAS-005 version, launched on 17 December 2024. It remains the expert level of CompTIA's cybersecurity pathway, above Security+, CySA+ and PenTest+.
Why is there no score on the exam?
SecurityX is graded pass or fail only, with no scaled score. You receive a pass result with no mark to compare.
Is the exam available in French?
Not yet. It is offered in English, with other languages announced but not dated. You can still take the course in French.
SecurityX or CISSP?
SecurityX stays hands-on and technical, whereas ISC2's CISSP takes a more managerial view. They complement each other. Choose by role: engineering and architecture for SecurityX, leadership and governance for CISSP.
Is the course available online or in Casablanca?
Both: as a live online class, in person in Casablanca, or on-site at your organization, taught in French or English.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a training partner of CompTIA. CompTIA, SecurityX and CASP+ are trademarks of CompTIA.