ISACA CCOA Certification Training

Domain 1: Technology Essentials (25%)
• A-Networking
  • Cloud Networking
  • Computer Networking
  • Devices, Ports, and Protocols
  • Network Access
  • Network Tools
  • Network Topology
  • Segmentation (Logical, Physical)
• B-Systems/Endpoint
  • Databases
  • Command Line
  • Containerization/Virtualization
  • Middleware
  • Operating Systems
• C-Applications
  • Application Programming Interface (API)
  • Automated Deployment
  • Cloud Applications
  • Scripting/Coding

Domain 2: Cybersecurity Principles and Risks (20%)

• A-Cybersecurity Principles
  • Compliance
  • Cybersecurity Objectives
  • Governance
  • Risk Management
  • Roles and Responsibilities
  • Cybersecurity Models
• B-Cybersecurity Risk
  • Application Risk
  • Cloud Technology Risk
  • Data Risk
  • Network Risk
  • Supply Chain Risk
  • System/Endpoint Risk
  • Web Application Risk

Domain 3: Adversarial Tactics, Techniques, and Procedures (10%)

• A-Threat Landscape
  • Attack Vectors
  • Threat Actors/Agents
  • Threat Intelligence Sources
• B-Means and Methods
  • Attack Types
  • Cyber Attack Stages
  • Exploit Techniques
  • Penetration Testing

Domain 4: Incident Detection and Response (34%)

• A-Incident Detection
  • Data Analytics
  • Detection Use Cases
  • Indicators of Compromise and/or Attack
  • Logs and Alerts
  • Monitoring Tools and Technologies
• B-Incident Response
  • Incident Containment
  • Incident Handling
  • Forensic Analysis
  • Malware Analysis
  • Network Traffic Analysis
  • Packet Analysis
  • Threat Analysis

Domain 5: Securing Assets (10%)

• A-Controls
  • Contingency Planning
  • Controls and Techniques
  • Identity and Access Management
  • Industry Best Practices, Guidance, Frameworks, and Standards
• B-Vulnerability Management
  • Vulnerability Assessment
  • Vulnerability Identification
  • Vulnerability Remediation
  • Vulnerability Tracking
• Hands-on Labs:
  • Incident Management System (SOC Case)
  • Threat Intelligence Platform (MSP)
  • SIEM with Elastic
  • HTTP/HTTPS Analysis
  • DNS and Email /SMTP Analysis
  • Endpoint Security Analysis
  • Windows Logs
  • Advanced Log Analysis
  • Incident Containment
  • Scanning and Analyzing Vulnerabilities
  • Collecting and Verifying Integrity of Data
  • Collecting and Documenting Incidents
  • CyberChef for Security Analysts

Early‑ to mid‑career professionals such as:

• SOC Analyst
• Cybersecurity/Information Security Analyst
• Vulnerability Analyst
• Incident Response Analyst

• The CCOA certification is ideal for cybersecurity professionals with 2–3 years of experience who want to strengthen their technical skills and tackle cybersecurity challenges with greater expertise

• Understand essential networking and cloud concepts for secure infrastructure.
• Manage operating systems, databases, and virtualization environments.
• Deploy and secure applications using APIs, scripting, and automation.
• Apply cybersecurity governance, compliance, and risk principles.
• Identify and assess risks across systems, networks, and cloud assets.
• Understand threat actors, attack types, and penetration testing.
• Detect incidents using monitoring tools, logs, and threat indicators.
• Respond to incidents with containment, analysis, and mitigation techniques.
• Implement access controls and security frameworks to protect assets.
• Perform vulnerability assessments and coordinate remediation efforts.