CompTIA CASP+ (rebranded as SecurityX) is positioned as the advanced practitioner certification for experienced security professionals who are not moving into management. It is a $480 exam including performance-based questions in a timed environment. Even performance-based exam questions cannot replicate the quality of a supervised practitioner scenario assessed by a senior colleague with real enterprise experience. XCASP is built for experienced security professionals who want to demonstrate advanced practitioner capability through actual architecture and governance work.
Across five instructor-led days, XCASP covers enterprise security architecture and engineering, zero trust implementation at enterprise scale, post-quantum cryptography migration planning, AI security architecture and governance, advanced security operations at programme level, enterprise vulnerability management, supply chain security at enterprise scale, multi-framework GRC programme management, and senior practitioner leadership. Coverage extends SecurityX exam objectives to reflect 2026 enterprise security realities.
On Day 5, participants design an enterprise security architecture for a complex simulated organisation and navigate a multi-framework governance scenario requiring applied knowledge across all domains simultaneously. A senior practitioner assesses architectural quality, risk judgement, and governance decisions. XCASP certificate and Practitioner Assessment Report issued. Aligned with CompTIA SecurityX/CASP+ objectives, SABSA enterprise security architecture, NIST SP 800-207 Zero Trust, NIST PQC FIPS 203/204/205, NIST AI RMF, NIST CSF 2.0, and DoD 8140.