CompTIA Security+ course
Security concepts, architecture, operations, governance, and incident response.
Current scope and updates: CompTIA expects Security+ V8 (SY0-801) to launch on or around November 17, 2026. SY0-701 remains available; its English exam retires June 11, 2027. This bank remains mapped to SY0-701 until its migration is reviewed.
Open the course pathThese lessons and checks are currently available as preview study material. Each block names its required provider or ITForMe lesson; optional provider products may have their own costs.
How you will study
- Study one learning block. Use its assigned provider lesson when one has been verified. Where no suitable assignment has been verified, study the required ITForMe teaching. Other explanations and guided practice remain available for support.
- Confirm study and take its short check. Opening a page or provider link does not complete a block. A passing current check is required for course progress.
- Review and continue. Today suggests the next activity using your study and review history. Review helps you revisit earlier concepts while you learn new material.
Connect each term to the asset, threat, control, and evidence it affects.
Various types of security controls
This is a short excerpt of ITForMe concept notes. It shows the kind of explanation available here; it is not the complete lesson or a scored check.
- Technical control
- Enforces a safeguard through hardware or software mechanisms.
- Managerial control
- Directs security through policies, risk decisions, and governance.
- Operational control
- Relies on people performing repeatable security processes.
- Physical control
- Controls physical access to buildings, rooms, or devices with fences, locks, or guards.
Applied practice: Use a fictional organization. Name the risk, choose the narrowest useful control, and state what evidence would prove the control worked.
Course topics
These are the current objective lessons in this course. Their presence describes the shipped study scope; it does not establish exam equivalence or independent approval.
Browse 28 objective lessons
- Various types of security controls
- Fundamental security concepts
- Importance of change management processes and the impact to security
- Importance of using appropriate cryptographic solutions
- Common threat actors and motivations
- Common threat vectors and attack surfaces
- Various types of vulnerabilities
- Analyze indicators of malicious activity
- Purpose of mitigation techniques used to secure the enterprise
- Security implications of different architecture models
- Apply security principles to secure enterprise infrastructure
- Concepts and strategies to protect data
- Importance of resilience and recovery in security architecture
- Apply common security techniques to computing resources
- Security implications of proper hardware, software, and data asset management
- Various activities associated with vulnerability management
- Security alerting and monitoring concepts and tools
- Modify enterprise capabilities to enhance security
- Implement and maintain identity and access management
- Importance of automation and orchestration related to secure operations
- Appropriate incident response activities
- Use data sources to support an investigation
- Elements of effective security governance
- Elements of the risk management process
- Processes associated with third-party risk assessment and management
- Elements of effective security compliance
- Types and purposes of audits and assessments
- Implement security awareness practices
Review status and preparation limits
0 of 28 objective lessons currently have named independent subject-matter review. Internal and automated checks are separate from that review. Question and practice-scenario review status is shown on those activities.
ITForMe is not affiliated with or endorsed by CompTIA. These original lessons and checks are not official exam questions, a vendor exam replica, or a pass predictor. Use the vendor's published requirements and additional practice to judge your preparation.
You can explore before signing in. Anonymous progress depends on this browser's session; clearing its site data can make saved work inaccessible. Sign in to keep progress with your account.