Syllabus
CASP Prep Course (CASP)
86 lessons. Online and self-paced.
Exam Strategy Foundations
This chapter orients learners to the CASP exam context, provisional domain map, and a repeatable approach for high-stakes scenario questions. It distinguishes confirmed information from provisional assumptions and establishes an exam-safe decision framework.
- 1Candidate Role Boundaries
- 2Allowed And Disallowed Actions
- 3Enterprise Scenario Framing
- 4Provisional Domain Shell
- 5Blueprint Mapping Logic
- 6Weighting And Coverage Limits
- 7Task Fact Rule Execute
- 8Most Defensible Answer Selection
- 9Distractor Elimination Patterns
Security Architecture
This chapter covers secure design decisions across networks, systems, applications, and enterprise environments. Emphasis is placed on architecture tradeoffs, segmentation, resilience, and control integration.
- 10Defense In Depth Models
- 11Trust Boundaries And Data Flows
- 12Security Architecture Tradeoffs
- 13Segmentation And Isolation Models
- 14Secure Connectivity Patterns
- 15Perimeter And Internal Controls
- 16High Availability Security Design
- 17Secure Development Principles
- 18Application Threat Surfaces
- 19Software Supply Chain Risk
Cloud Hybrid And OT
This chapter addresses security architecture and operational considerations across cloud, hybrid, virtualization, containers, and operational technology environments. It emphasizes shared responsibility and environmental differences.
- 20Shared Responsibility Boundaries
- 21Cloud Control Placement
- 22Multi Cloud Risk Decisions
- 23Virtualization Security Fundamentals
- 24Container Platform Risks
- 25Workload Hardening Strategies
- 26OT Environment Constraints
- 27OT Segmentation Approaches
- 28OT Incident Decision Making
Identity And Data Protection
This chapter covers identity architecture, access control, cryptography, and data protection practices central to enterprise security decisions. It links IAM choices to operational risk and governance needs.
- 29Authentication Assurance Factors
- 30Authorization And Least Privilege
- 31Federation And Trust Decisions
- 32Privileged Access Governance
- 33Cryptographic Objectives And Selection
- 34PKI And Certificate Trust
- 35Key Management Lifecycle
- 36Crypto Implementation Pitfalls
- 37Data Classification Schemes
- 38Data At Rest Controls
- 39Data In Transit Controls
- 40DLP And Privacy Tradeoffs
Risk Governance And Compliance
This chapter integrates risk analysis, governance, policy alignment, and compliance-aware control selection. It focuses on practitioner recommendations rather than legal or executive authority.
- 41Risk Components And Terminology
- 42Qualitative And Quantitative Risk
- 43Threat Modeling And Attack Paths
- 44Risk Treatment Recommendations
- 45Policies Standards And Baselines
- 46Control Framework Mapping
- 47Third Party Governance Risks
- 48Business Impact Priorities
- 49Recovery Objectives And Tradeoffs
- 50Resilience Control Recommendations
Security Operations And Monitoring
This chapter develops operational detection, logging, vulnerability management, and day-to-day defensive decision-making skills. It emphasizes interpretation of telemetry and practical response support.
- 51Log Sources And Visibility
- 52Telemetry Correlation Patterns
- 53Detection Quality Tuning
- 54Scanning Methods And Limits
- 55Finding Validation And Context
- 56Remediation Prioritization Decisions
- 57Endpoint Protection Layers
- 58Email And Web Defenses
- 59Configuration Drift Management
Incident Response And Forensics
This chapter covers incident triage, containment recommendations, evidence handling, and post-incident improvement within the practitioner role. It emphasizes decision-making under uncertainty and role boundaries.
- 60Incident Indicators And Thresholds
- 61Initial Triage Decisions
- 62Escalation And Coordination Paths
- 63Containment Strategy Selection
- 64Eradication And Root Cause
- 65Recovery Validation And Hardening
- 66Evidence Handling Principles
- 67Forensic Triage Tradeoffs
- 68Reporting And Lessons Learned
Scenario Analysis And Troubleshooting
This chapter trains multi-step reasoning across integrated enterprise cases, technical troubleshooting, and cross-domain decision-making. It emphasizes interpretation, prioritization, and justified recommendations.
- 69Control Gap Scenario Analysis
- 70Secure Design Recommendation Cases
- 71Hybrid Environment Tradeoff Cases
- 72Access And Authentication Failures
- 73Monitoring And Alert Gaps
- 74Control Conflict Resolution
- 75Best Initial Action Logic
- 76Remediation Order Decisions
- 77Boundary Case Discrimination
Readiness And Mixed Review
This chapter consolidates retention, remediation, and exam readiness through mixed review and targeted reassessment. It reinforces blueprint-aware study planning using provisional domains.
- 78Security Principle Rapid Review
- 79Common Pitfall Pattern Review
- 80Cross Domain Synthesis Tables
- 81Weakness Pattern Identification
- 82Targeted Remediation Sequencing
- 83Readiness Threshold Judgments
- 84Mixed Domain Case Strategy
- 85Time Pressure Decision Control
- 86Last Mile Exam Readiness






