Certified Cybersecurity Operations Analyst (CCOA)

ISACA’s Certified Cybersecurity Operations Analyst (CCOA™) certification equips learners with the technical skills to evaluate threats, identify vulnerabilities, and design countermeasures to protect digital ecosystems. As emerging technologies such as AI-enabled automation continue to evolve, the demand for skilled cyber analysts is critical to safeguarding organisations.

This practical hands-on training develops the analytical and investigative expertise required to detect, respond to, and mitigate cybersecurity incidents. Learners will explore technology essentials, adversarial tactics and procedures, incident detection and response, and asset security through practical scenarios and applied learning. By building the ability to identify patterns, anomalies, and indicators of compromise, participants will strengthen their role as a vital component of their organisation’s cybersecurity defence.

Key takeaways

By the end of this course, learners will be able to:

  • Identify the key components of computer and cloud networking, databases, and virtualised environments
  • Understand cybersecurity governance and align security strategy with enterprise objectives
  • Analyse adversarial tactics, techniques, and procedures to detect and respond to threats effectively
  • Apply incident detection and response techniques, including forensic and malware analysis
  • Recognise the significance of proactive incident preparedness and planning
  • Design and recommend countermeasures to secure digital assets across industries
  • Implement identity, access, and vulnerability management practices
  • Apply best practices, frameworks, and standards to strengthen cybersecurity operations

Prerequisites

The CCOA certification is recommended for cybersecurity professionals with 2–3 years of practical experience who wish to expand their technical capabilities and respond more effectively to evolving cyber threats. 

Target audience

This course is designed for:

  • Cybersecurity analysts and operations professionals
  • SOC analysts and incident responders
  • IT and network administrators seeking to build security expertise
  • Professionals responsible for cybersecurity governance, compliance, and risk management
  • Early to mid-career practitioners aiming to enhance technical and operational skills

Domain 1: Technology essentials

  • Computer and cloud networking fundamentals
  • Databases, virtualisation, and containerisation
  • Command line interfaces
  • APIs: purpose, benefits, and usage
  • Principles of DevOps, SecDevOps, and CI/CD pipelines
  • Fundamentals of programming and scripting

Domain 2: Cybersecurity principles

  • Cybersecurity governance and alignment with business drivers
  • Defining strategy based on enterprise objectives
  • Cross-organisational communication for cybersecurity
  • Roles and responsibilities for initiatives
  • Metrics for evaluating programme performance
  • Stakeholder engagement and investment planning
  • Risk management processes and compliance requirements
  • Documenting risk in enterprise operations

Domain 3: Adversarial tactics, techniques, and procedures (TTPs)

  • Common adversarial tactics, techniques, and procedures
  • Developing critical and creative thinking for threat detection
  • Differentiating dashboard events vs attacker insights
  • Baseline detections for anomalous behaviours
  • Reactive and proactive threat detection capabilities
  • Threat hunting and intelligence source utilisation
  • Attack vectors, threat actors, and motivations
  • Analysis of exploit techniques and attack stages
  • Role of security testing in detection and resilience

Domain 4: Incident detection and response

  • Incident preparedness and significance of early detection
  • Components and techniques of detection (analytics, logs, alerts)
  • Developing detection use cases and recognising indicators of compromise
  • Tools and technologies for effective monitoring
  • Fundamentals of incident response: containment and handling
  • Forensic, malware, network traffic, and packet analysis techniques
  • Threat analysis and structured response processes

Domain 5: Securing assets

  • Designing countermeasures for digital asset protection
  • Iterative and holistic approaches to system security
  • Industry-specific asset protection needs and risk tolerance
  • Influence of business goals and risk assessments on security controls
  • Contingency planning and business continuity
  • Control techniques for securing assets
  • Identity and access management principles and practices
  • Best practices, frameworks, and standards for asset security
  • Vulnerability assessment, remediation, and risk mitigation

The CCOA certification exam voucher is included in this course, taken post course directly with ISACA, validates knowledge and applied skills across all domains. Successful learners receive the Certified Cybersecurity Operations Analyst (CCOA™) credential.

 

FAQ – CCOA: Certified Cybersecurity Operations Analyst

Hva koster kurset?
Prisen er 43 750 NOK for 5 dager. Kurset inkluderer eksamensvoucher til CCOA-sertifiseringen samt praktiske lab-øvelser og kursmateriell.

Hvor lenge varer kurset?
Kurset går over 5 intensive dager og gjennomføres enten som virtuelt kurs eller klasseromskurs.

Hvordan gjennomføres kurset?
Kurset er instruktørledet og har et sterkt fokus på hands-on læring. Deltakerne jobber med scenario-baserte øvelser innen trusseldeteksjon, hendelseshåndtering og analyse for å bygge praktisk kompetanse innen cybersecurity operations.

Hvem passer kurset for?
Kurset passer for fagpersoner som ønsker å utvikle eller styrke sine tekniske ferdigheter innen sikkerhetsoperasjoner:

  • Cybersecurity analysts og operations professionals
  • SOC analysts og incident responders
  • IT- og nettverksadministratorer
  • Fagpersoner innen governance, risk og compliance
  • Early to mid-career sikkerhetsspesialister

Hva lærer jeg i løpet av kurset?
Kurset gir deg ferdigheter til å identifisere, analysere og håndtere sikkerhetshendelser i moderne IT-miljøer. Etter kurset vil du kunne:

  • Forstå grunnleggende teknologier som nettverk, cloud og virtualisering
  • Analysere angriperteknikker og identifisere trusler
  • Oppdage og håndtere sikkerhetshendelser
  • Utføre grunnleggende malware- og forensisk analyse
  • Implementere identitets- og tilgangskontroll
  • Designe sikkerhetstiltak for å beskytte digitale verdier
  • Anvende rammeverk og beste praksis innen cybersecurity

Hvilke temaer dekkes i kurset?
Kurset dekker blant annet:

  • Teknologigrunnlag: nettverk, cloud og systemer
  • Cybersecurity governance og risikostyring
  • Angriperteknikker og trusselanalyse
  • Incident detection og response
  • Forensisk analyse og malware-analyse
  • Beskyttelse av digitale verdier og sårbarhetshåndtering

Får jeg sertifisering etter kurset?
Ja. Kurset inkluderer eksamensvoucher til ISACA Certified Cybersecurity Operations Analyst (CCOA™). Eksamen gjennomføres online etter kurset.

Hvilke forkunnskaper anbefales?
Det anbefales at deltakerne har 2–3 års erfaring innen IT eller cybersikkerhet. Grunnleggende kunnskap om sikkerhet og nettverk er en fordel.

Hva gjør dette kurset unikt?
Kurset kombinerer teknisk opplæring med praktiske scenarioer og gir en helhetlig tilnærming til sikkerhetsoperasjoner. Det gir en solid plattform for videre spesialisering innen SOC, threat hunting og incident response.

 

Cybersecurity Operations & SOC

Threat Detection & Advanced Security

Cybersecurity Foundations & Certifications

Andre relevante kurs

AWS Security Essentials
19. mai
1 dager
Classroom Virtual
Security Engineering on AWS
20. mai
3 dager
Classroom Virtual