
CompTIA Security+™ Certification
"Benchmarking foundational skills through the CompTIA Security+ certification and then adding progressive layers of expertise seems to us to be absolutely the right thing to do, from both the customer and employee standpoints."
Steve Jordan, Vice President
System Engineering & Consulting, McAfee, Inc.
CompTIA Security+ 2008 Exam Update
CompTIA is constantly reviewing the content of our certifications to be sure they address the latest technologies and meet the needs of the industry. Currently, CompTIA is seeking Subject Matter Experts (SMEs) to provide assistance with the third stage in the development of the industry standard CompTIA Security+. Assistance from SMEs is crucial in developing good quality content appropriate for the level of expertise for which the certification is being developed. To apply as a SME, click here.
A new version of the CompTIA Security+ exam will launch in October 2008. The topics covered in the updated CompTIA Security+ have been reorganized from the last version of the exam, expanded, and made more reflective of current security issues and knowledge requirements. All six domains in the new exam reflect changes to the previous exam.
New Exam Domains and Updated Focus
The topic of access control on the last exam has been expanded into its own subject area (domain). The updated exam also contains another new domain, “Assessments and Audits”, which was added as a separate domain to address the importance of risk assessment and mitigation, and to cover some of the most important considerations, tools and techniques in addressing risk.
CompTIA Security+ now places more importance on knowing “how to” rather than just knowing or recognizing security concepts. For example, phrases such as “carry out the appropriate procedures” and “deploy various authentication models” appear in the new objectives.
Candidates for CompTIA Security+
CompTIA still recommends that CompTIA Security+ candidates be information security professionals with a minimum of two years experience in security. This includes network administrators with a security focus, security administrators or specialists in information security.
Click here to download the 2008 CompTIA Security+ exam objectives.
CompTIA Security+ 2008 Exam Update FAQs
How were the CompTIA Security+ exam objectives developed?
Why did CompTIA update CompTIA Security+?
When will the new exam be available?
What topics does the new exam cover?
What companies were involved in the development of the exam?
When will training materials be available for the new exam?
How long will the 2007 version of CompTIA Security+ be available?
Should candidates wait to take the new exam?
Are there prerequisites for the exam?
In what languages has the exam been developed?
Will candidates ever need to renew their certification?
How were the CompTIA Security+ exam objectives developed?
CompTIA uses a method for exam development that is accepted by the testing industry and considered to be “psychometrically sound”, meaning that it is approved by PhD testing professionals. The skills and knowledge for this exam are derived from an industry-wide Job Task Analysis (JTA) and are validated by an industry-wide global survey. The results of the survey are used to determine the relative weight of each objective and its content, and to ensure that the weighting is representative of the importance of the content. CompTIA exam development method has been approved by ISO, the International Organization for Standardization; and CompTIA is an ANSI (American National Standards Institute) accredited Certifier.
Why did CompTIA update CompTIA Security+?
CompTIA is constantly reviewing the content of our certifications to be sure they address the latest technologies and meet the needs of the industry. The new exam will cover the latest skills and technologies IT security professionals need to address threats in today’s networks.
When will the new exam be available?
The 2008 version of CompTIA Security+ exam will be available October 14, 2008. The exam can be taken at any Prometric or Pearson VUE test center. This includes test centers on some U.S. Military bases.
What topics does the new exam cover?
The new exam includes Systems Security, Network Infrastructure, Access Control, Assessments and Audits, Cryptography and Organizational Security.
What companies were involved in the development of the exam?
Organizations across a variety of industries contributed to the development of the new exam including Booz Allen Hamilton, General Mills, HP, IBM, Motorola, Symantec, U.S. Air Force, U.S. Navy and others.
When will training materials be available for the new exam?
CompTIA is working with publishers and training companies to ensure there are materials available prior to the launch of the new exam.
How long will the 2007 version of CompTIA Security+ be available?
The current version of the exam will be available through July 2009.
Should candidates wait to take the new exam?
Candidates who are currently preparing to take CompTIA Security+ are encouraged to complete their studies and certify under the 2002 objectives.
Are there prerequisites for the exam?
There are no prerequisites, but CompTIA recommends two years experience in networking with an emphasis on security, along with CompTIA Network+ certification.
In what languages has the exam been developed?
At first the exam will only be available in English. Translations into other languages are based on market demand.
Will candidates ever need to renew their certification?
CompTIA certifications are lifetime certifications. Unless an employer requires recertification, CompTIA certification is valid for the rest of a professional’s career.
