Skip to content
GATech
CompTIA

CySA+ Training in Morocco

CompTIA Cybersecurity Analyst (CySA+) CS0-003

Detect, analyse and respond to threats: the certification for SOC analysts and blue teams.

Vendor
CompTIA
Exam code
CS0-003
Duration
5 days · 35 hours
Level
Intermediate

Overview

CompTIA CySA+ (Cybersecurity Analyst) validates the hands-on skills of a security analyst: monitoring an information system, interpreting logs and alerts, detecting malicious behaviour, managing vulnerabilities and leading incident response. The CS0-003 version is organised into four domains — security operations, vulnerability management, incident response and reporting — and reflects current SOC practice: SIEM, EDR, threat intelligence, threat hunting and automation.

Security operations centres are growing fast in Morocco: in-house SOCs at banks and telecom operators, and managed SOCs run by integrators and by the nearshoring centres of Casablanca and Rabat that serve European clients. Law 05-20 and DGSSI requirements oblige critical infrastructure operators and public bodies to detect and report incidents, which drives demand for analysts who can triage an alert and document an investigation. CySA+ is the natural next step after Security+ for anyone moving from Tier 1 to Tier 2 and 3.

Our 5-day (35-hour) course follows the official CS0-003 exam domains and focuses on real-world cases: reading logs, correlating events, prioritising vulnerabilities with CVSS and writing incident reports. It runs in class in Casablanca or Rabat, or as a live virtual classroom, with the exam voucher included.

Who is it for?

  • Tier 1 SOC analysts aiming for Tier 2 and 3 roles
  • Security+ holders who want to specialise in operational defence
  • System and network administrators responsible for security monitoring
  • Incident response (CSIRT) and vulnerability management team members
  • Integrator and MSSP consultants deploying SIEM or EDR solutions

Prerequisites

  • Security+ and Network+ level knowledge or equivalent (recommended by CompTIA)
  • Hands-on security operations experience; CompTIA recommends around 4 years as a SOC or incident response analyst
  • Working knowledge of Linux and Windows, plus basic scripting (PowerShell, Bash or Python)
  • Reading-level technical English, as the exam is taken in English

What you will be able to do

  • Analyse logs, network traffic and SIEM/EDR alerts to separate real incidents from false positives
  • Use threat intelligence and run threat hunting campaigns
  • Run a full vulnerability management cycle: scanning, analysis, prioritisation (CVSS) and remediation tracking
  • Apply an incident response methodology from detection to lessons learned
  • Write clear reports and metrics for technical teams and management, including for incident notification obligations
  • Spot opportunities to automate SOC tasks

Course outline

  1. 01Domain 1 – Security Operations
  2. 02Domain 2 – Vulnerability Management
  3. 03Domain 3 – Incident Response and Management
  4. 04Domain 4 – Reporting and Communication
  5. 05Exam preparation: performance-based questions and practice exam

The exam

The exam CySA+
Exam codeCS0-003
FormatUp to 85 questions (multiple choice + performance-based)
Duration165 minutes
Passing score750 on a 100–900 scale
Validity3 years, renewable through the CompTIA Continuing Education (CE) program

Career opportunities in Morocco

  • Tier 2 / Tier 3 SOC analyst
  • Incident response analyst
  • Threat hunter / threat intelligence analyst
  • Vulnerability management analyst
  • Security operations engineer (SIEM / EDR)

Frequently asked questions

How much does CySA+ training cost in Morocco and what does it include?

CySA+ training starts at 12,900 MAD. The price includes 5 instructor-led days (35 hours), course materials, hands-on analysis workshops, a practice exam and the voucher for the official CS0-003 exam. Quotes are available for SOC teams from the same company.

How can I pay?

Payment is by bank transfer or card. Payment in several instalments is possible on request. Companies can pay against an invoice once the quote is accepted.

Are sessions held in class or online?

You can choose between in-class sessions in Casablanca or Rabat and a live virtual classroom. Content, workshops and support are identical in both formats.

What is the CS0-003 exam like?

The exam is delivered by Pearson VUE, either online with remote proctoring (OnVUE) or at a Pearson VUE test centre. It has up to 85 questions, including performance-based items, over 165 minutes. The passing score is 750 out of 900.

Do I need Security+ before CySA+? What language is the course in?

Security+ is not mandatory, but CompTIA recommends Network+ and Security+ level knowledge plus hands-on security operations experience. The course is taught in French or English; the exam is taken in English.

CompTIABeginner

Security+

The benchmark certification for starting a cybersecurity career, recognised by employers in Morocco and worldwide.

5 days · 35 h✓ Voucher included

From10,900 MAD

EC-CouncilIntermediate

CND v3

Protect, detect, respond, predict: the certification that turns a network administrator into a real defender.

5 days · 40 h✓ Voucher included

From15,900 MAD

CiscoBeginner

CCNA

The networking foundation Moroccan employers look for, and the strongest base for a cybersecurity career.

5 days · 40 h✓ Voucher included

From10,900 MAD

Related articles

Adult learners with laptops seated around a long table in a bright training roomCertifications

· 9 min read

Best Cybersecurity Training Centers in Morocco (2026 Guide)

The best cybersecurity training center in Morocco in 2026 is not the one that calls itself number one, but the one whose vendor authorisation you can verify, that includes the official exam voucher, trains you in hands-on labs and publishes its prices in dirhams. Here are the criteria, the certifications (CEH, Security+, CISSP, Cisco) and the questions to ask before you enrol.

Read the article
Two professional women talking at a table by a large windowCareers

· 8 min read

Cybersecurity Jobs in Morocco: Roles, Skills and Certifications

Cybersecurity is not just hacking: from SOC analyst to CISO, by way of ISO 27001 auditor, each job calls for different skills and certifications. Here is an overview of the main roles in demand in Morocco.

Read the article

Ready to earn your certification?

Book a free 15-minute call with an advisor: we assess your level and recommend the fastest path to your goal.