Get Unlimited Microsoft Training With Your FastPass - Just £6000! Training Centre Now Open - Offering Residential, OIL and Hybrid Courses.

ISACA - CSX Cybersecurity Practitioner (CSX-P)



Only 4 Days



Classroom / Online / Hybrid

Next date

Next date:

8/2/2021 (Monday)


Learn quickly - Firebrand's official CSX Practitioner course is 20% faster than traditional training. In just 4 days, you’ll be introduced to key cybersecurity skills, prove your ability to implement security controls and learn how to perform vulnerability scans.

Named 2016’s Top Professional Certification program, CSX-P remains the most internationally respected cyber security certification that spans the five security functions (identity, protect, detect, respond and recover).

You’ll develop your practical cyber security skills - 50% of this accelerated course includes hands-on lab exercises in a virtual cyber environment. As well as learning how to respond and recover from crippling network incidents or disasters, you’ll also learn:

  • Network evaluation
  • Vulnerability analysis
  • Malware & incident detection
  • Incidence reporting
  • Safeguard implementation

You’ll be immersed in the curriculum through Firebrand's unique Lecture Lab Review technique, which will help you learn better, faster. Your expert instructor will take you through the 5 areas of cyber security frameworks:

  • Identify: Identification, assessment and evaluation of assets, threats and vulnerabilities in both internal and external networks
  • Protect: Implementation of cyber security controls to protect a system from identified threats
  • Detect: Detection of network and system incidents, events and compromise indicators, along with assessment of potential damage
  • Respond: Execution of comprehensive incident response plans and mitigation of cyber incidents
  • Recover: Recovery from incidents and disasters, including post incident-response documentation and implementation of continuity plans

Please note: This accelerated course prepares you for the ISACA Cybersecurity Certificate - Practitioner exam, and you'll receive an exam voucher as part of this course.

Firebrand is a premier ISACA partner for EMEA and the US. No other partner in these regions trains more students.

ISACA is the trademark owner of the ISACA and CYBERSECURITY NEXUS

Seven reasons why you should sit your CSX Practitioner course with Firebrand Training

  1. You'll be CSX Practitioner certified in just 4 days. With us, you’ll be CSX Practitioner trained in record time
  2. Our CSX Practitioner course is all-inclusive. A one-off fee covers all course materials, exams, accommodation and meals. No hidden extras
  3. Pass CSX Practitioner first time or train again for free. This is our guarantee. We’re confident you’ll pass your course first time. But if not, come back within a year and only pay for accommodation, exams and incidental costs
  4. You’ll learn more CSX Practitioner. A day with a traditional training provider generally runs from 9am – 5pm, with a nice long break for lunch. With Firebrand Training you’ll get at least 12 hours/day quality learning time, with your instructor
  5. You’ll learn CSX Practitioner faster. Chances are, you’ll have a different learning style to those around you. We combine visual, auditory and tactile styles to deliver the material in a way that ensures you will learn faster and more easily
  6. You’ll be studying CSX Practitioner with the best. We’ve been named in Training Industry’s “Top 20 IT Training Companies of the Year” every year since 2010. As well as winning many more awards, we’ve trained and certified 76,866 professionals, and we’re partners with all of the big names in the business
  7. You'll do more than study CSX Practitioner courseware. We use practical exercises to make sure you can apply your new knowledge to the work environment. Our instructors use demonstrations and real-world experience to keep the day interesting and engaging


Other accelerated training providers rely heavily on lecture and independent self-testing and study.

Effective technical instruction must be highly varied and interactive to keep attention levels high, promote camaraderie and teamwork between the students and instructor, and solidify knowledge through hands-on learning.

Firebrand Training provides instruction to meet every learning need:

  • Intensive group instruction
  • One-on-one instruction attention
  • Hands-on labs
  • Lab partner and group exercises
  • Question and answer drills
  • Independent study

This information has been provided as a helpful tool for candidates considering training. Courses that include certification come with a certification guarantee. Pass first time or train again for free (just pay for accommodation and exams on your return). We do not make any guarantees about personal successes or benefits of obtaining certification. Benefits of certification determined through studies do not guarantee any particular personal successes.


Domain 1: Identify

  • Network infrastructure and digital assets
  • Network topology and data flow analysis
  • Security review and gap identification
  • Security policy and procedure development
  • Regulation and legal impact
  • Threat modeling


  • Asset identification
  • Data flow identification
  • Enterprise asset identification
  • Data flow analysis
  • Enterprise data flow analysis
  • Identify challenge

Domain 2: Protect

  • Vulnerability testing
  • Security tools and systems
  • Incident response plans
  • Security and business functions
  • Security configuration evaluation


  • Firewall setup
  • Backup and restore points
  • File system protections
  • OS baseline
  • Protect challenge

Domain 3: Detect


  • Event and incident identification
  • Malicious activity analysis


  • Sec onion setup and testing
  • Snort rules
  • Event detection
  • Data and network analysis
  • Vulnerability analysis
  • Detect challenge

Domain 4: Respond

  • Incident notification and containment
  • Evidence collection and technical analysis


  • Incident correlation
  • Network rorensics
  • Malware investigation and evaluation
  • Response challenge

Domain 5: Recover

  • System validation
  • Post incident security plan and procedure


  • Re-Imaging
  • Restore points

Exam Track

As part of your accelerated course, you'll sit the following exam at the Firebrand Training centre, covered by your Certification Guarantee:

  • ISACA CSX Practitioner
    • Format: Online, lab-based skills assessment
    • Duration 1 hour
    • Number of questions: 5
    • Language: English
    • Domains
      • Domain 1: Business and Security Environment (20%)
      • Domain 2: Operational Security Readiness (20%)
      • Domain 3: Threat Detection and Evaluation (20%)
      • Domain 4: Incident Response and Recovery (40%)

Recertification Requirements

  • Attain and report an annual minimum of 120 qualifying CPEs over 3 years - minimum reporting requirement of 20 CPE hours each year
  • Minimum of 50% of the annual and total CPE hours must be obtained from skills-based training or lab activities

What's Included


  • Official ISACA CSX-P courseware
  • Official ISACA CSX-P instructor
  • 6 months of access to the ISACA CSX-P labs
  • CSX Practitioner exam voucher
  • 33.5 ISACA CPE credits for attending - an additional 2 ISACA CPE credits can be earned for passing the CSX-P examination

Firebrand Training offers top-quality technical education and certification training in an all-inclusive course package specifically designed for the needs and ease of our students. We attend to every detail so our students can focus solely on their studies and certification goals.

Our Certification Programs includes

  • Intensive Hands-on Training Utilising our (Lecture | Lab | Review)TM Delivery
  • Comprehensive Study Materials, Program Courseware and Self-Testing Software including MeasureUp *
  • Fully instructor-led program with 24 hour lab access
  • Examination vouchers **
  • Near site testing, Transportation to/from Testing Center are provided ***
  • Accommodation, all meals, unlimited beverages, snacks and tea / coffee****
  • Examination Passing Policy

Please note

  • * Not on all courses
  • ** Examination vouchers are not included for the following courses: PMP, CAPM and CISSP CBK Review
  • *** Not included in our PMP, CAPM, CISA, CISM, CGEIT, CRISC, (ISC)2 or ITIL Managers and Revision Certifications
  • **** Accommodation not included on the CISSP CBK Review Seminar

Our instructors teach to accommodate every student's learning needs through individualised instruction, hands-on labs, lab partner and group exercises, independent study, self-testing, and question/answer drills.

Firebrand Training has dedicated, well-equipped educational facilities where you will attend instruction and labs and have access to comfortable study and lounging rooms. Our students consistently say our facilities are second-to-none.

Examination Passing Policy

Should a student complete a Firebrand Training Program without having successfully passed all vendor examinations, the student may re-attend that program for a period of one year.  Students will only be responsible for accommodations and vendor exam fees.


To take this course, you should have a minimum of one to five years' experience working in cyber security and an understanding of:

  • Network Scanning
  • Specialised Port Scans
  • Network Topologies
  • Network Log Analysis
  • Centralized Monitoring
  • Hotfix Distribution
  • Vulnerability Scanning
  • Traffic Monitoring
  • Compromise Indicators
  • False Positive Identification
  • Packet Analysis
  • User Account Controls

You must also have either 3 years of experience in 3 of the 5 cyber security activity domains (identify, protect, detect, respond, recover) or, have any one of the following certifications: CISA, CISM, CRISC, CGEIT, CEH, ECSA, LPT, GCIH, OSCP, GPEN, CySA+, CISSP.

Unsure whether you meet the prerequisites? Don’t worry. Your training consultant will discuss your background with you to understand if this course is right for you.


Here's the Firebrand Training review section. Since 2001 we've trained exactly 76,866 students and asked them all to review our Accelerated Learning. Currently, 96.73% have said Firebrand exceeded their expectations.

Read reviews from recent accelerated courses below or visit Firebrand Stories for written and video interviews from our alumni.

"Pretty good course and accommodation,"
Anonymous. (15/10/2018 (Monday) to 18/10/2018 (Thursday))

"This is the second time that I am attending a course at Firebrand and each time it gets better and the knowledge I acquire makes me humble and eager to learn. I will also return to implement the knowledge acquired into my company."
Kingsford Boateng, Kosmos Energy Ghana. (12/8/2017 (Saturday) to 20/8/2017 (Sunday))

"Very friendly staff. Good networking and fast track learning."
Christoph Gasparin, Gasparin & Cracknell Associates. (12/8/2017 (Saturday) to 20/8/2017 (Sunday))

"As a contractor, Firebrand's courses provide the most effective way of learning. A professional course like the CSXP provided in 9 days that might take years to accumulate at a normal pace, which is valuable. "
Anthony Campbell, Irish Life Assurance Plc. (12/8/2017 (Saturday) to 20/8/2017 (Sunday))

"Time is money, paying additional to make your self available in the course and learn faster in limited time is better than self-study with lots of interruption and delay. "
T.A., Ernst & Young. (12/8/2017 (Saturday) to 20/8/2017 (Sunday))

Course Dates





Book now

24/8/2020 (Monday)

27/8/2020 (Thursday)

Finished - Leave feedback




8/2/2021 (Monday)

11/2/2021 (Thursday)

Limited availability



22/3/2021 (Monday)

25/3/2021 (Thursday)




3/5/2021 (Monday)

6/5/2021 (Thursday)




14/6/2021 (Monday)

17/6/2021 (Thursday)




Latest Reviews from our students