Systems Security Certified Professional (SSCP) - Self-paced

Course subjects

Refer to the SSCP Exam Outline for a deeper dive into the SSCP domains.

Domain 1. Security Operations and Administration

• Comply with codes of ethics

• Understand security concepts

• Identify and implement security controls

• Document and maintain functional security controls

• Participate in asset management lifecycle (hardware, software and data)

• Participate in change management lifecycle

• Participate in implementing security awareness and training (e.g., social engineering/ phishing)

• Collaborate with physical security operations (e.g., data center assessment, badging)

Domain 2. Access Controls

• Implement and maintain authentication methods

• Support internetwork trust architectures

• Participate in the identity management lifecycle

• Understand and apply access controls

Domain 3. Risk Identification, Monitoring and Analysis

• Understand the risk management process

• Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)

• Participate in security assessment and vulnerability management activities

• Operate and monitor security platforms (e.g., continuous monitoring)

• Analyse monitoring results

Domain 4. Incident Response and Recovery

• Support incident lifecycle (e.g., National Institute of Standards and Technology (NIST), International Organisation for Standardisation (ISO))

• Understand and support forensic investigations

• Understand and support business continuity plan (BCP) and disaster recovery plan (DRP) activities

Domain 5. Cryptography

• Understand reasons and requirements for cryptography

• Apply cryptography concepts

• Understand and implement secure protocols

• Understand and support public key infrastructure (PKI) systems

Domain 6. Network and Communications Security

• Understand and apply fundamental concepts of networking

• Understand network attacks (e.g., distributed denial of service (DDoS), man-in-the-middle (MITM), Domain Name System (DNS) poisoning) and countermeasures (e.g., content delivery networks (CDN))

• Manage network access controls

• Manage network security

• Operate and configure network-based security devices

• Secure wireless communications

Domain 7. Systems and Application Security

• Identify and analyse malicious code and activity

• Implement and operate endpoint device security

• Administer Mobile Device Management (MDM)

• Understand and configure cloud security

• Operate and maintain secure virtual environments