SSCP Certification

The SSCP (Systems Security Certified Practitioner) Certification Training is a specialized program designed to empower IT professionals with the essential skills to implement, monitor, and manage secure IT infrastructure. This course integrates cybersecurity best practices, hands-on labs, and practical learning to prepare participants for the SSCP certification exam and real-world security challenges.

Participants will master critical areas like security operations, access controls, risk assessment, incident response, cryptography, and systems protection. By the end of the training, learners will have a thorough understanding of how to secure IT environments effectively and align with the SSCP certification requirements.

The SSCP course covers seven comprehensive domains, as outlined by the SSCP Common Body of Knowledge (CBK):

Domain 1: Security Operations and Administration (16%)

• Master compliance with ISC2 Code of Ethics and organizational policies.
• Understand core security concepts: confidentiality, integrity, availability, accountability, and privacy.
• Implement and manage security controls (technical, physical, and administrative).
• Document and maintain deterrent, preventative, detective, and compensating controls.
• Participate in the asset management lifecycle, from acquisition to disposal.
• Collaborate on change management and implement security awareness training.

Domain 2: Access Controls (15%)

• Learn authentication methods, including MFA, SSO, and federated access protocols.
• Support trust architectures such as one-way, two-way, and transitive relationships.
• Participate in identity lifecycle management, including provisioning, de-provisioning, and maintenance.
• Understand and apply access control models (mandatory, discretionary, role-based).

Domain 3: Risk Identification, Monitoring, and Analysis (15%)

• Understand the risk management process, including risk treatment and impact assessments.
• Participate in security assessments, vulnerability management, and compliance reviews.
• Operate and monitor security platforms using log management and event correlation.
• Analyze monitoring results and escalate findings for remediation.

Domain 4: Incident Response and Recovery (14%)

• Learn the incident management lifecycle: preparation, detection, containment, eradication, and recovery.
• Support forensic investigations, evidence handling, and legal reporting.
• Understand and implement Business Continuity Plans (BCP) and Disaster Recovery Plans (DRP).

Domain 5: Cryptography (9%)

• Understand cryptographic principles: confidentiality, integrity, and regulatory compliance.
• Apply cryptographic methods, including hashing, encryption, and digital signatures.
• Implement secure protocols and manage cryptographic attacks and countermeasures.
• Master Public Key Infrastructure (PKI) concepts for secure data exchanges.

Domain 6: Network and Communications Security (16%)

• Learn the fundamentals of networking, including OSI/TCP models, topologies, and protocols.
• Identify and mitigate network attacks like DDoS, MITM, and DNS poisoning.
• Manage network access controls, segmentation, and device security.
• Secure wireless communications and Internet of Things (IoT) networks.

Domain 7: Systems and Application Security (15%)

• Detect and counteract malicious code and activity, including malware and insider threats.
• Implement endpoint security with firewalls, encryption, and secure browsing.
• Manage Mobile Device Security through encryption, provisioning, and mobile application management.
• Configure cloud security and ensure compliance with legal and regulatory requirements.
• Operate and maintain secure virtual environments, addressing attacks and countermeasures.

This training is ideal for professionals seeking to strengthen their cybersecurity expertise, including:

• Security Administrators and Analysts
• Network Security Engineers
• Systems Engineers and Administrators
• Database Administrators
• Health Information Managers and Practice Managers

• Basic IT Knowledge: Familiarity with core IT concepts is required.
• Professional Experience: At least one year of experience in any SSCP domain is recommended.
• Relevant Background: Degrees or certifications in computer science, information systems, or cybersecurity are advantageous.

• Format: Multiple-choice questions
• Number of Questions: 150
• Duration: 4 hours
• Passing Score: 700 out of 1000
• Languages: English, Japanese, Spanish
• Testing Center: Pearson VUE

• Implement and manage security policies, procedures, and controls.
• Establish and maintain robust access control mechanisms.
• Conduct risk assessments and develop effective mitigation strategies.
• Respond to and resolve security incidents efficiently.
• Apply cryptographic principles to protect information assets.
• Secure network infrastructure and communication channels against modern threats.
• Protect systems and applications using best practices to counter vulnerabilities and attacks.