CompTIA Security+ (SY0-601)

Attacks, Threats and Vulnerabilities
More threats, attacks and vulnerabilities from newer custom devices that must be mitigated, such as IoT and embedded devices, newer DDoS attacks and social engineering attacks based on current events.

Architecture and Design
Enterprise environments and reliance on the cloud, which is growing quickly as organizations transition to hybrid networks.

Implementation
Administering identity, access management, PKI, basic cryptography, wireless and end-to-end security.

Operations and Incident Response
Organizational security assessment and incident response procedures, such as basic threat detection, risk mitigation techniques, security controls and basic digital forensics.

Governance, Risk and Compliance
Organizational risk management and compliance with regulations, such as PCI-DSS, SOX, HIPAA, GDPR, FISMA, NIST and CCPA.