CompTIA CySA+ domains and their Weightage
                     CompTIA CySA+ domains 
and their Weightage
www.infosectrain.com | [email protected]
CompTIA CySA+ is an acronym for Computing Technology Industry Association 
(CompTIA) CyberSecurity Analysts (CySA). It is an intermediate-level certification that 
is awarded by CompTIA to professionals who apply behavioral analytics to detect, 
prevent, and combat cybersecurity threats by continuous monitoring. 
www.infosectrain.com | [email protected]
CySA+ includes the security analytic skills used by Incident Responders, Threat 
Intelligence Analysts, and Application Security Analysts, using the latest techniques in 
Security Operations Center (SOC). Behavioral Analysts help to improve the security level 
by combating and identifying threats, and Advanced Persistent Threats (APTs) to offer 
enhanced visibility of threats over the attack system. 
Domains and Individual Weightage in CompTIA CySA+ CSO-
001  andCySA+ CSO-002
CySA+ verifies the IT professional’s skills in defending and improving the security of an 
organization. It also verifies that the candidate has gained good skills and knowledge in 
the following domains:
Domains and Weightage in CompTIA CySA+CSO-001
Domain 1. Threat Management (27%)
Threat Management is a methodology used to manage the life cycle of threats by 
cybersecurity professionals. It helps to reduce the risks with threat detection, quick 
response, and investigation. 
Domain 2. Vulnerability Management (26%)
Vulnerability Management is a framework that helps to identify, evaluate, test, and 
report the security vulnerabilities in the systems and software that works on the 
systems.
Domain 3. Cyber Incident Response (23%)
Cyber Incident Response is a process in which an organization handles cyber threats and 
wawlswo. itnhfeo sweacytr taoin m.caonma g| es atlhees @coinfsoesqeucetrnaciens.c ofm the cyberattacks. 
Domain 4. Security and Architecture Tool Sets (24%)
The Security and Architecture Tool Set helps to gain a better understanding of regulatory 
frameworks, procedures, verifications, and quality control of Security Architecture.
Domains and Weightage in CompTIA CySA+ CSO-002
Domain 1. Threat and Vulnerability Management (22%)
Threats and Vulnerability Management is a foundation to reduce organizational 
exposure, increase resilience, and enhance endpoint surface area. It helps to identify 
misconfigurations and vulnerabilities in real-time using sensors. 
Domain 2. Software and System Security (18%)
The Software and System Security domain helps you to learn how to work and integrate 
security into the organization’s systems, including hardware and software. Examining 
the Software Development Life Cycle (SDLC), applying best practices of secure coding, 
implementing code reviews, and using cloud computing helps to ensure the security of 
the organization’s data.
Domain 3. Security Operations and Monitoring (25%)
Security Operations and Monitoring helps to analyze the data using continuous 
monitoring activities that change existing control to enhance security. This domain 
covers all modules from implementing security monitoring to handling system 
component monitoring.
www.infosectrain.com | [email protected]
Domain 4. Incident Response (22%)
Incident Response is a set of procedures used by the organization to respond 
and eliminate cyberattacks. It is a way of attempting to manage the 
consequences of cyber threats. IR aids in minimizing the damage caused by a 
cyberattack, as well as reducing recovery time and cost.
Domain 5. Compliance and Assessment (13%)
This domain teaches you how to ensure your security profile that offers privacy 
and protection practices of data, security frameworks, and risk management. 
Defending strategies against cyberattacks using indicator management and 
attack frameworks are covered in this domain.
CompTIA CySA+ in InfosecTrain
InfosecTrain provides training, certifications, and consulting services for 
cybersecurity and information security. You will learn the analytical abilities 
needed to recognise and prevent cyberattacks in an organization from our 
certified trainer. We make it simple for you to finish your training by offering live 
instructor-led and self-paced sessions for our courses. Join InfosecTrain’sCompTIA
 CySA+ training program to grab cyber analytic skills that can enhance your 
career in the cyber world.
www.infosectrain.com | [email protected]
About InfosecTrain
• Established in 2016, we are one of the finest 
Security and Technology Training and 
Consulting company
• Wide range of professional training programs, 
certifications & consulting services in the IT 
and Cyber Security domain
• High-quality technical services, certifications 
or customized training programs curated with 
professionals of over 15 years of combined 
experience in the domain
www.infosectrain.com | [email protected]
Our Endorsements
www.infosectrain.com | [email protected]
Why InfosecTrain Global Learning Partners
Certified and Flexible modes Access to the 
Experienced Instructors of Training recorded 
sessions
Post training Tailor Made 
completion Training
www.infosectrain.com | [email protected]
Our Trusted Clients
www.infosectrain.com | [email protected]

Contact us
Get your workforce reskilled 
by our certified and 
experienced instructors!
IND: 1800-843-7890 (Toll Free) / US: +1 657-722-
11127  / UK : +44 7451 208413
[email protected]
www.infosectrain.com