CompTIA SecurityX Readiness: The Expert-Level Security Credential
Signature Course No. 516 — A Signature AI Socratic Coaching Course.
No experience needed — your coach starts where you are.
A New Kind of Learning
Socratic coaching, delivered by an agentic AI coach.
Not a course you watch. An AI coach you work with.
The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.
The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.
A coach that teaches by asking — not by lecturing
The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's CompTIA SecurityX Readiness: The Expert-Level Security Credential course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.
The deciding question comes before the design. You already know how security works — the expert examination assumes that on the first page, and then asks a harder question: a firm has three material weaknesses and money for one program this year; a cloud migration is half finished and the half that remains is the half that matters; a regulator, a customer and an attacker are all reading the same architecture. What do you do first, what do you deliberately leave undone, and how do you write it down so the decision survives scrutiny? This course teaches enterprise security architecture as a discipline of defended decisions.
It starts with the reading. Concept 1 builds the four inventories — value, obligation, threat, tolerance — before any control is proposed, and teaches the most valuable sentence in the discipline: that weakness is real, and it is not our first problem. Every concept that follows is built around one deciding question, stated in its idea text, that you will be asked to answer on fresh facts.
It works in two movements. First, Module 1 — Decide the Architecture — work through Concepts 1–9, finishing with The Kazmir Architecture Review and Roadmap; then, Module 2 — Run It, Defend It, Recover It — work through Concepts 10–18, finishing with The Kazmir Resilience and Response Blueprint.
Both capstones produce real artifacts — an architecture review and remediation roadmap for the running case, Kazmir Freight Group: the four inventories and three findings, the governance machinery, the identity and cryptography programs, the cloud landing zone and network redesign, and one funded year with its rejected alternatives named; and a complete resilience and response blueprint for the same firm: adversary paths modeled, detection and response designed as one system, recovery and evidence proved, reliance governed, and the whole written as decision records.
The honesty standard is part of the course. Readiness is not a promise — this course builds the judgment the examination samples, and no honest course could guarantee a pass. It contains no examination items: every scenario is invented for teaching. Version-specific matters — examination codes, objective weightings, transition dates — are fenced to the course book's Appendix, and practitioner fundamentals are assumed, not re-taught: this is the expert rung, above the practitioner seats on this shelf.
The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.
CompTIA SecurityX Readiness: The Expert-Level Security Credential is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning delivers.
Course Facts
One full concept, coached end to end — free: verify your email and we’ll send you a link to start.
Already enrolled? Enter the course →
Diagnose → Learn & Practice → Prove → Capstone
Every learner moves through the same discipline a Cognosco instructor would insist on in the room.
Diagnose
The Coach starts where the course starts: with the estate you know best. Which single system, if it stopped for three days, would hurt the organization most — and is that the system your security effort actually centers on? Which obligation — a law, a contract clause, a customer commitment — constrains security design where you work, and who could quote it accurately today? When did you last hear an owner state, in numbers or plain words, how much loss or downtime they will accept? Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.
Learn & Practice
Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.
Prove
Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.
Capstone
Finish with two capstones — The Kazmir Architecture Review and Roadmap for Module 1 and The Kazmir Resilience and Response Blueprint for Module 2 — that pull the whole course together, and earn the certificate.
What You'll Learn
Read before you build. No concept in this course lets you select a control before you have stated whose risk it reduces, by how much, and at whose expense — and every choice carries its rejected alternative, because an architecture answer that cannot name what it turned down is a preference, not a decision.
Module 1 decides the architecture. Reading the enterprise through its four inventories; governance and risk run as a decision system with named owners; patterns chosen by the threat, estate and cost tests; then the great design domains in turn — identity, cryptography, cloud, network and data — closing with automation under guardrails and resilience engineered before it is needed.
Module 2 runs it, defends it, recovers it. Threat modeling at enterprise scale; weaknesses prioritized by consequence rather than score; detection designed around decisions; response decided before the night it is needed; forensic readiness treated as an architecture decision; the delivery pipeline governed as production; third-party, supply-chain and AI risk judged with evidence and an exit; and the decision record carried into the examination room itself.
And it holds its boundary throughout. Practitioner content is assumed, not re-taught — the expert examination asks whether you can decide: which architecture you choose, which risk you accept, which control you fund first, and whether you can defend the choice in writing.
What you will learn
- Read an enterprise — its business, assets, threats and tolerances — and state its security problem before proposing any control
- Run governance and risk work at architect altitude: ownership, appetite, exceptions and the risk register as a decision record
- Choose and defend architecture patterns — segmentation, zero-standing-access, resilience by design — against the alternatives you rejected
- Design identity, cryptography, cloud, network and data-protection architectures for a mixed, inherited estate, including the migration path from what exists
- Prioritise vulnerabilities, design detection, and architect for response, recovery and forensic readiness before an incident forces the design
- Judge third-party, supply-chain and AI-system risk as architecture, and record every material trade-off in a decision record another professional can audit
- Walk into the expert examination able to read a long scenario the way an architect reads a firm: find the deciding risk first, then answer
Everything in the course
- All 18 concepts of CompTIA SecurityX Readiness: The Expert-Level Security Credential, in 2 modules
- A starting-point check first — the Coach finds where you actually stand before teaching
- Learn, Practice, Prove for every concept — no passive video watching
- A test-out on every concept: prove you know it and move on
- The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
- A personal Learner Record of your work across the course
- Two capstone exercises: The Kazmir Architecture Review and Roadmap and The Kazmir Resilience and Response Blueprint
- A printable session summary whenever you pause
- The Lighthouse Coach completion certificate (Signature Series)
- Your progress is saved as you go — stop anytime, resume where you left off
Built for experienced practitioners preparing for the expert rung
Senior analysts, engineers and consultants preparing for the expert examination — you already hold, or could pass, a practitioner-level security credential, you work inside an enterprise estate rather than on isolated systems, and you are increasingly the person in the room when the question stops being how a control works and becomes whether to have it at all, here, at this cost, before that one; and architects in post who sat no expert examination on the way up and now want the discipline examined, end to end, against a standard outside their own firm.
Not a first security course — if the practitioner fundamentals are not yet solid, the honest advice is to take the practitioner seats on this shelf first. This course will still be here, and it will make more sense, because its whole method is to build judgment on top of fluency it refuses to re-teach.
Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.
Start with Read the Enterprise First
$195 — introductory price. One payment. No subscription, no password to manage.
Here is exactly what happens when you enroll:
- Pay securely with Stripe — you are taken straight into the course
- Create your learner profile and begin the Module 1 starting-point check
- Save the access key you are given — it restores your enrollment on any device
- Learn at your pace; your progress is stored in your browser on your device
For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.
Before you enroll
What is a Socratic coaching session?
A conversation, not a video. Your coach asks a question; you answer — out loud by voice, or by typing — and the coach responds to what you said: naming the misconception it hears, affirming what you got right, and asking the next question. You advance only when you have mastered each concept, so a finished course means the learning held.
How long does it take — and how long do I have?
About 30 minutes per concept. Learn in sittings of any length; your progress is saved as you go. You have a full year from purchase to finish, and you can revisit and retake within that year.
What does the certificate verify?
That you completed every concept and both capstones of this course. Anyone can confirm a Cognosco certificate online — enter its certificate ID on our verification page.
What if it isn't for me — what are the refunds?
If you have not started, cancel for a full refund within seven days of purchase. Once you have started, there is no cash refund — stop before finishing and we credit the full amount you paid toward any other course in the library (credit valid one year from your original purchase). Once you complete the course, no refund or credit applies.
More Signature Courses are coming
CompTIA SecurityX Readiness: The Expert-Level Security Credential is Signature Course No. 516. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.