Specialized and Legacy Systems Security for CompTIA SecurityX (CAS-005): OT, ICS, IoT, and Embedded Systems
CompTIA SecurityX (CAS-005) doesn't stop at servers, laptops, and cloud workloads. Objective 3.5, "Secure specialized and legacy systems," asks candidates to think about the machines that keep the physical world running: the programmable logic controllers on a factory floor, the HVAC controller on a hospital roof, the medical infusion pump, and the decade-old embedded appliance nobody wants to touch because touching it might shut down a production line. These systems rarely get patched, rarely get replaced, and almost never get a security review — which is exactly why CAS-005 treats them as their own exam domain rather than folding them into general endpoint security. This guide walks through operational technology, embedded and IoT devices, the wireless technologies that connect them, and the specific security and privacy considerations CAS-005 expects you to apply when a system can't simply be hardened the way a modern server can. Operational Technology: SCADA, ...