Systems Security Certified Practitioner (SSCP)
Credential: Systems Security Certified Practitioner (SSCP)
Credentialing Agency: International Information Systems Security Certification Consortium, Inc. (ISC 2)
Renewal Period: 3 years
The Systems Security Certified Practitioner (SSCP) is an intermediate skill level certification for individuals involved in network and systems security administration who are responsible for developing the information security policies, standards, and procedures and managing their implementation across various hardware and software programs in their organization. The SSCP is targeted toward those working towards positions such as Network Security Engineers, Security Systems Analysts, or Security Administrators. It is also appropriate for personnel in other non-security disciplines that require an understanding of security but do not have information security as a primary part of their job description, including information systems auditors; application programmers; system, network and database administrators; business unit representatives, and systems analysts. Candidates must have at least one year of systems security-related work experience.
More information can be found on the certifying agency's website.
Systems Security Certified Practitioner (SSCP)
The following DOD Civilian Occupations provide training and/or experience that contributes to attaining this credential:
The following Federal Occupations provide training and/or experience that contribute to attaining this credential:
| Federal Occupation | Related As | |
|---|---|---|
| 0086 Security Clerical and Assistance Series |  Some |
|
| 0132 Intelligence Series | Some |
|
| 0854 Computer Engineering | Some |
|
| 1801 General Inspection, Investigation, Enforcement, and Compliance Series |  Other |
|
| 2210 Information Technology Management Series | Some |
MINIMUM REQUIREMENTS
Eligibility Requirements (View Details)
- Credential Prerequisite
- Experience: 1 year
- Education
- Training
- Membership
- Other
- Fee
Note: This credential may have multiple options for becoming eligible. Listed are the minimum requirements based on the minimum degree required. To view other options, see the Eligibility tab.
Exam Requirements (View Details)
- Exam
- Written Exam
- Oral Exam
- Practical Exam
- Performance Assessment
RECERTIFICATION SUMMARY
Renewal Period: 3 years
AGENCY CONTACT INFORMATION
International Information Systems Security Certification Consortium, Inc. (ISC 2)
311 Park Place Blvd
Suite 400
Clearwater, FL 33759
Phone: (866) 331-4722
Fax: (703) 356-7977
Email: membersupport@isc2.org
Education and/or Experience REQUIREMENTS
Candidates must have a minimum of one year of cumulative paid full-time work experience in one or more of the seven domains of the SSCP.
A one year prerequisite pathway will be granted for a candidate who received a degree (bachelors or masters) in a cybersecurity program.
Other REQUIREMENTS
The Systems Security Certified Practitioner (SSCP) credential has the following other requirements:
- Candidates must subscribe to the International Information Systems Security Certification Consortium, Inc. (ISC)2 Code of Ethics.
- Anyone who passes a SSCP exam must have their qualifications endorsed by another (ISC2) credential holder.
- Passing candidates will be randomly selected and audited by ISC2 Services prior to issuance of any certification. Multiple certifications may result in a candidate being audited more than once.
Written Exam
-
Access Controls (16%)
- 1.1 Implement Authentication Mechanisms
- 1.2 Operate Internetwork Trust Architectures (e.g., extranet, third-party connections, federated access)
- 1.3 Participate in the Identity-Management Lifecycle
- 1.4 Implement Access Controls (e.g., subject-based, object-based)
-
Security Operations and Administration (17%)
- 2.1 Understand and Comply with Codes of Ethics
- 2.2 Understand Security Concepts
- 2.3 Document and Operate Security Controls
- 2.4 Participate in Asset Management
- 2.5 Implement and Assess Compliance with Controls
- 2.6 Participate in Change Management
- 2.7 Participate in Security Awareness and Training
- 2.8 Participate in Physical Security Operations (e.g., security assessment, cameras, locks)
-
Risk Identification, Monitoring, and Analysis (12%)
- 3.1 Understand the Risk Management Process
- 3.2 Perform Security Assessment Activities
- 3.3 Operate and Maintain Monitoring Systems (e.g., continuous monitoring)
- 3.4 Analyze Monitoring Results
-
Incident Response and Recovery (13%)
- 4.1 Participate in Incident Handling
- 4.2 Understand and support forensic investigations (e.g., first responder, evidence handling, chain of custody, preservation of scene)
- 4.3 Understand and Support Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP)
-
Cryptography (9%)
- 5.1 Understand and Apply Fundamental Concepts of Cryptography
- 5.2 Understand Requirements for Cryptography (e.g., data sensitivity, regulatory requirements, end-user training)
- 5.3 Understand and Support Secure Protocols (e.g., differences in implementation, appropriate use)
- 5.4 Operate and implement cryptographic systems
-
Network and Communications Security (16%)
- 6.1 Understand Security Issues Related to Networks
- 6.2 Protect Telecommunications Technologies
- 6.3 Control Network Access
- 6.4 Manage LAN-based security
- 6.5 Operate and Configure Network-Based Security Devices
- 6.6 Implement and Operate Wireless Technologies
-
Systems and Application Security (17%)
- 7.1 Identify and Analyze Malicious Code and Activity
- 7.2 Implement and Operate Endpoint Device Security (e.g., virtualization, thin clients, thick clients, USB devices)
- 7.3 Operate and Configure Cloud Security
- 7.4 Secure Big Data Systems
- 7.5 Operate and Secure Virtual Environments
Exam Preparation Resources
There are a number of resources available to help you prepare for the Systems Security Certified Practitioner (SSCP) examination:
- Best Sources
- General References
Testing Information
Testing for this credential is handled by Pearson VUE. The test centers are located in the U.S. They also have some test centers on military bases.
To find out more, use the following links on the Pearson VUE website:
For more information on the International Information Systems Security Certification Consortium, Inc. (ISC 2) testing process, visit the agency website.
RECERTIFICATION
Systems Security Certified Practitioner (SSCP)
Renewal Period: 3 years
Additional considerations for the Systems Security Certified Practitioner (SSCP) include:
- Candidates who do not have the required experience may still sit for the exam and become an Associate of (ISC)2 until they have gained the required experience. Once the required experience for the SSCP certification is reached, the Associate of (ISC)2 can be converted to SSCP status. Annual maintenance fees and continuing education requirements apply while working towards the experience requirement.
MOST