43%

of business and technology professionals say security data analysis needs a stronger talent pipeline. CompTIA IT Industry Outlook 2026.

CompTIA CySA+ V4 (CS0-004) certification

Every Alert Needs an Analyst.

Logs and alerts are just noise until someone reads them right. CySA+ proves you can, and the new V4 brings AI into the SOC.

HRD Corp claimableYayasan Peneraju: may be eligibleKL or online

Exam

CS0-004

Course

5 days

Course fee

RM3,700

With exam

RM5,613

Next intake

30 Nov 2026

Version note: These intakes prepare you for CySA+ V4 (CS0-004), launched on 23 Jun 2026. The V3 (CS0-003) English exam retires on 22 Dec 2026.

Quick answer

What is CompTIA CySA+?

CompTIA Cybersecurity Analyst (CySA+) is a vendor-neutral certification for security analysts. It proves you can detect threats, manage vulnerabilities, respond to incidents and report on them. One 165-minute exam, CS0-004, mixes multiple-choice and performance-based questions, and the certification stays valid for three years.

Exam facts verified against comptia.org on 22 Oct 2026

FOR

Security+ holders and IT staff moving into analyst work

ROLES

SOC analyst, vulnerability analyst, incident responder, threat analyst

SKIP IF

You are new to security. Start with CompTIA Security+

01

The Credential

What you study, practise and sit to earn it.

Pass one exam, CS0-004, and you hold CompTIA CySA+. It sits one step above Security+ and shows employers you can do the analyst’s job, not just explain it.

COURSE

5 days, 14 modules

HANDS-ON

Performance-based practice

EXAM

CS0-004, 165 min

CREDENTIAL

CompTIA CySA+

Awarded by

CompTIA

Level

Intermediate, vendor-neutral

Prerequisites

None required

Recommended

About 4 years in a SOC or vulnerability analyst role

Validity

3 years

Exam version

V4

02

Decide in 60 Seconds

Four options people weigh against each other.

If you want to

Choose

Why

Analyse threats and alerts on any vendor’s tools

→

CompTIA CySA+

Vendor-neutral analyst skills, from detection to reporting

Get the security baseline first

Core security skills most analysts start with

Work in a SOC built on Cisco technology

Monitoring, analysis and incident response on Cisco tools

Prove SOC skills in a live, hands-on exam

→

ISACA CCOA

Performance-based exam on real open-source tools

No prerequisites. But are you ready?
0/4

Tick what applies. 3 or 4: you are ready for this course. Fewer: start with CompTIA Security+.

03

What the Exam Covers

Four domains from CompTIA’s V4 exam objectives. Bars to scale.

4 domainsLargest: Security Operations, 34%

Security Operations 34%
Vulnerability Management 26%
Incident Response and Management 24%
Reporting and Communication 16%

Source: CompTIA CySA+ V4 (CS0-004) exam objectives summary.

04

What the Course Covers

14 modules in four themes, plus practice for the performance-based questions.

Five days of instructor-led training aligned to the CS0-004 objectives. You build the analyst’s toolkit, then use it to find weaknesses, handle incidents and automate the repetitive work.

5 modules

Security Operations

  • Identifying Security Operations Fundamentals
  • Applying Risk Management Strategies
  • Managing System Security and Configurations
  • Comparing System Architectures
  • Applying Access Management

4 modules

Threats and Vulnerabilities

  • Threat Intelligence and Threat Hunting
  • Assessing Network Vulnerabilities
  • Assessing Application Vulnerabilities
  • Securing Applications

3 modules

Incident Response

  • Managing Incident Response and Communication
  • Executing Incident Response Plans
  • Analysing Malicious Activity

2 modules

Automation

  • Automating Data Analysis
  • Improving Processes with Automation

PBQs

The exam includes performance-based questions that ask you to complete analyst tasks in simulated environments. The course prepares you for both question types.

05

Why Now

Where the skills gap is, what is hitting Malaysia, and why train with us.

43%

of business and technology professionals say security data analysis needs a stronger talent pipeline

CompTIA IT Industry Outlook 2026

16%

rise in cyber incidents reported to MyCERT in Q1 2026, to 2,188 cases

MyCERT Cyber Incident Summary Report, Q1 2026

3%

of Malaysian organisations reach a Mature level of cyber readiness

Cisco Cybersecurity Readiness Index 2025

6 hrs

Six Hours to Report. Who’s Watching the Alerts?

Malaysia’s Cyber Security Act 2024 (Act 854) came into force on 26 August 2024. Critical infrastructure entities must report a cyber security incident within six hours, and managed SOC monitoring services now need a licence. Someone has to spot the incident before the clock starts.

NACSA; Cyber Security (Notification of Cyber Security Incident) Regulations 2024

CompTIA Training Delivery Partner

Training aligned to the official CS0-004 objectives

Exam add-on

Add your exam voucher for RM1,913

HRD Corp registered

This course is HRD Corp claimable

KL or online

Instructor-led in class or live online

06

The Cost, All In

Every figure per person, in ringgit.

Fees

Five-day courseRM3,700

Exam voucher add-on (CS0-004)RM1,913

Funding

HRD Corp claim for employersClaimable

Yayasan Peneraju financing (Bumiputera)May be eligible

Course with exam

RM5,613

RM3,700 + RM1,913

Dates

Where

Fee

Mon 30 Nov to Fri 4 Dec 2026

Kuala Lumpur or online

RM3,700 / RM5,613 with exam

Mon 11 to Fri 15 Jan 2027

Kuala Lumpur or online

RM3,700 / RM5,613 with exam

Mon 15 to Fri 19 Mar 2027

Kuala Lumpur or online

RM3,700 / RM5,613 with exam

Mon 24 to Fri 28 May 2027

Kuala Lumpur or online

RM3,700 / RM5,613 with exam

Mon 5 to Fri 9 Jul 2027

Kuala Lumpur or online

RM3,700 / RM5,613 with exam

Training a team? We run private intakes on dates that suit your organisation, with HRD Corp claims handled alongside you.

07

Exam and Renewal

What exam day looks like, and what happens after you pass.

Certification

CompTIA CySA+ V4

Exam code

CS0-004

Questions

Up to 85, multiple-choice and performance-based

Duration

165 minutes

Passing score

750 on a 100 to 900 scale

Languages

English; French, Japanese, Spanish and Portuguese coming

Recommended

About 4 years of hands-on cybersecurity experience

Exam voucher

RM1,913 add-on through Trainocate

RENEW OPTION 1

Earn 60 CEUs

Collect 60 continuing education units within three years through training, qualifying activities or CompTIA CertMaster CE.

RENEW OPTION 2

Pass a higher certification

Pass a higher CompTIA certification such as SecurityX, a qualifying industry certification, or the latest CySA+ exam.

FAQ

Questions People Ask

CompTIA Cybersecurity Analyst (CySA+) is a vendor-neutral certification for security analysts. It proves you can detect threats, manage vulnerabilities, respond to incidents and communicate what you find.
V4 launched on 23 Jun 2026. It adds AI in security operations, Zero Trust Network Access and SASE, SBOM and EPSS-based vulnerability prioritisation, and more SIEM, SOAR, EDR and XDR automation. The V3 (CS0-003) English exam retires on 22 Dec 2026.
At Trainocate Malaysia the five-day course is RM3,700 per person, or RM5,613 per person with the exam voucher. The course is HRD Corp claimable, and Malaysian Bumiputera learners may be eligible for Yayasan Peneraju funding.
No. CySA+ has no formal prerequisites. CompTIA recommends about four years of hands-on cybersecurity experience, and most candidates hold Security+ or know its content first.
You need 750 on a scale of 100 to 900. The CS0-004 exam has up to 85 multiple-choice and performance-based questions in 165 minutes.
Take CySA+ for vendor-neutral analyst skills that apply to any employer’s tools. Take CCNA Cybersecurity if your SOC runs on Cisco technology or you want an entry-level start.
CySA+ is valid for three years. Renew it by earning 60 continuing education units, completing CompTIA CertMaster CE, or passing a higher certification such as SecurityX.

Take the Analyst’s Seat

Pick an intake. An advisor confirms fees, HRD Corp claims and Yayasan Peneraju eligibility with you.

  • Next intake: 30 Nov to 4 Dec 2026
  • RM3,700, or RM5,613 with exam

Sources