What is a CSA certification?

The CSA program provides training and credentialing that help candidates gain relevant and in-demand skills and knowledge through instruction given by experienced trainers in the industry.

It is a three-day intensive program that covers the foundations and fundamentals of SOC operations. This includes areas such as:

• Knowledge of log management and correlation

• SIEM deployment

• Advanced incident protection

• Incident response

• Various SOC processes

This certification is of value to many different roles in the cybersecurity industry, including:

• SOC Analysts (Tier I and Tier II)

• Network and Security Administrators

• Network and Security Engineers

• Network Defense Analysts

• Network Defense Technicians

• Network Security Specialists

• Network Security Officers

• Cybersecurity Analysts

• Entry-level cybersecurity professionals

After taking the three-day course candidates must pass an exam with a score of at least 70%. This gives a candidate the CSA certificate and also membership privileges. Members have to comply with recertification requirements via EC-Council's continuing education requirements.

To be eligible to take the course a candidate must have one year of professional experience in the Network Administration/Security field, and must be able to provide proof of this work history.