Official ISC2 Systems Security Certified Practitioner (SSCP) Training - Including Exam

This training course is intended for practitioners who have at least one year of cumulative, paid workexperience in one or more of the seven domains of the ISC2 SSCP CBK and are pursuing SSCP training and certification to acquire the credibility and mobility to advance within their current information security careers. The training seminar is ideal for those with technical skills and practical, hand-on security knowledge working in operational IT positions such as, but not limited to: Network Security Engineer: Systems/Network Administrator; Security Analyst; Systems Engineer; Security Consultant/Specialist; Security Administrator; Systems/Network Analyst; Database Administrator.

After completing this course, the student will be able to:

• Describe security and the alignment of asset management to risk management.
• Appraise risk management options and the use of access controls to protect assets.
• Examine the field of cryptography to secure information and communication.
• Build a security posture by securing software, data, and endpoints.
• Apply network and communications security to establish a secure networked environment.
• Evaluate cloud and wireless security.
• Prepare for incident detection and response.
• Implement appropriate measures that contribute to the maturation of risk management.

Chapter 1: Introducing Security and Aligning Asset Management to Risk Management

• Classify information security and security concepts.
• Summarize components of the asset management lifecycle.
• Identify common risks and vulnerabilities.
• Provide examples of appropriate risk treatment.

Chapter 2: Understanding Risk Management Options and the Use of Access Controls to Protect Assets

• Provide examples of functional security controls and policies for identified scenarios.
• Classify various access control models.
• Identify components of the identity management lifecycle.
• Recognize access control and authentication methods.

Chapter 3: Cryptography

• Identify the fundamental concepts of cryptography driving requirements and benefits.
• Recognize symmetric encryption methods.
• Use asymmetric encryption methods.
• Examine Public-Key Infrastructure (PKI) systems and certificates.
• Summarize fundamental key management terms and concepts.
• Recognize how to implement secure protocols.
• Review methods of cryptanalytic attack.

Chapter 4: Securing Software, Data, and Endpoints

• Discuss software systems and application security.
• Recognize data security concepts and skills.
• Identify malicious code and countermeasures.
• Evaluate Mobile Device Management (MDM) and security issues with mobile and autonomous endpoints.
• Review attacks and countermeasures for virtual machines.

Chapter 5: Network and Communications Security

• Recognize layers of the OSI Model, their functions, and attacks present at each layer.
• Identify commonly used ports and protocols.
• Select appropriate countermeasures for various network attacks.
• Summarize best practices for establishing a secure networked environment.

Chapter 6: Cloud and Wireless Security

• Recall cloud security concepts and configurations.
• Recognize types of virtualization and cloud security considerations.
• Summarize the types of telecommunications and network access controls.

Chapter 7: Incident Detection and Response

• Review the steps for monitoring, incident detection, and data loss prevention using all source intelligence.
• Identify the elements of an incident response policy and members of the incident response team (IRT).
• Classify the SSCP's role in supporting forensic investigations.

Chapter 8: Maturing Risk Management

• Identify operational aspects of change management.
• Summarize physical security considerations.
• Design a security education and awareness strategy.
• Recognize common security assessment activities.
• Classify the components of a business continuity plan and disaster recovery plan.

Attendees should meet the following pre-requisites:

• Candidates must have a minimum of 1-year cumulative work experience in 1 or more of the 7 domains of the SSCP CBK. A 1-year prerequisite pathway will be granted for candidates who received a degree (bachelors or masters) in a cybersecurity program.

Recommended as preparation for the following exam:

• (ISC)2 Certified Systems Security Certified Practitioner

Candidates must have a minimum of one year cumulative work experience in one or more of the domains of the SSCP CBK. A one year prerequisite pathway will be granted for candidates who received a degree (bachelors or masters) in a cybersecurity program.

A candidate that doesn’t have the required experience to become an SSCP may become an Associate of ISC2 by successfully passing the SSCP examination. The Associate of ISC2 will then have two years to earn the one year required experience. You can learn more about SSCP experience requirements and how to account for part-time work and internships at www.isc2.org/Certifications/SSCP/SSCP-Experience-Requirements.

Notice: Beginning October 1, 2025, the SSCP exam will be administered as a variable-length Computer Adaptive Test (CAT) exam only. Candidates will answer 100-125 multiple-choice items with an adjusted exam length of 2 hours. For more information on CAT, please refer to www.isc2.org/certifications/computerized-adaptive-testing.

Please note an exam voucher is included as part of this course