CompTIA
CompTIA Cybersecurity Analyst (CySA+)
Behavioural analytics, detection engineering and incident response for analysts moving beyond baseline operations.
Certification and exam
- Certification provider
- CompTIA
- Official certification name
- CompTIA Cybersecurity Analyst (CySA+)
- Required exam
- CS0-003 — CompTIA CySA+ certification exam
- Current exam version · effective 2023-06-06 · no retirement date announced
Grouped in our Professional plan based on where it fits in your learning path, immediately after Security+.
iSecPath preparation scope
- Detection and threat-hunting workflows
- Vulnerability management prioritisation practice
- Incident response scenario chains with branching decisions
- Reporting and communication competency tracking
What is and is not included
- Included: iSecPath learning access for the term of your plan.
- Not included: the external CompTIA certification exam.
- Not included: exam registration and scheduling.
- Not included: the exam fee.
- Not included: meeting CompTIA's eligibility requirements.
iSecPath sells learning access only. The external certification exam, exam registration, exam fee and the provider's eligibility requirements are separate and are not included. Purchasing iSecPath does not grant a certification.
Prerequisites and eligibility
Set by CompTIA, not by iSecPath. Confirm against the official source before you register.
Prerequisites
- None enforced by CompTIA.
Eligibility requirements
- Open to all candidates.
Experience requirements
CompTIA recommends around four years of hands-on incident response or threat detection experience. Guidance only.
Exam domains
Approximate weighting used to structure our learning path. Verify against CompTIA's published blueprint.
- Security Operations33%
- Vulnerability Management30%
- Incident Response & Management20%
- Reporting & Communication17%
Sample scenario
Prioritising a 900-finding scan
Your scanner returns 900 findings across 140 hosts. Three are internet-facing with known exploited vulnerabilities. Build the remediation order and justify it to a sceptical infrastructure lead.
Focus: Vulnerability Management
Career path mapping
iSecPath Recommended Path. Mapping types describe our learning-path logic — "Prerequisite" is used only where the provider authoritatively requires it.
Source of truth
- Official source
- https://www.comptia.org/certifications/cybersecurity-analyst
- Operational owner
- iSecPath Curriculum Operations
- Last verified
- 2026-08-24
- Next review
- 2026-11-24
- Verification notes
- Confirm the active CS0-xxx code and objective weights before content release.
Provider information is rechecked at least quarterly and whenever CompTIA announces a material change. Exam versions here are a snapshot, never a permanent source of truth.