Tool-driven defender assessment from ISACA
ISACA's CCOA tests adversary-focused detection and response with performance-based tasks in open-source tools, an option for defenders who want hands-on proof alongside conceptual knowledge.
Who it suits
Suits SOC analysts and incident responders who want a credential that demonstrates tool-based analysis skills and a grounding in adversary behavior.
Key differences
- Part of the exam requires using tools such as packet analysis and log search platforms, while the GIAC exam is a proctored test of knowledge.
- Content is oriented toward security operations analysis and incident response, with less emphasis on adversary emulation and cyber deception.
- It is issued by an audit and governance association, which frames the material toward analysts in organizational security operations.
- Level
- Professional
- Assessment
- Multi-part
- Study time
- 100-160h
- Listed from
- $399
