Official ISC2 Systems Security Certified Practitioner (SSCP) Training

The SSCP is ideal for IT administrators, managers, directors and network security professionals responsible for the hands-on operational security of their organization’s critical assets, including those in the following positions:

• Network Security Engineer
• Systems Administrator
• Security Analyst
• Systems Engineer
• Security Consultant/Specialist
• Security Administrator
• Systems/Network Analyst
• Database Administrator

After completing this course you should be able to:

• Understand the different Access Control systems and how they should be implemented to protect the system and data using the different levels of confidentiality, integrity, and availability.
• Understand the processes necessary for working with management and information owners, custodians, and users so that proper data classifications are defined. This will ensure the proper handling of all hard copy and electronic information as it is applied by the Security Operations and Administration.
• The Risk Identification, Monitoring, and Analysis Domain identifies the how to identify, measure, and control losses associated with adverse events. You will review,analyze, select, and evaluate safeguards for mitigating risk.
• Identify how to handle Incident Response and Recovery using consistent, applies approaches including the use of the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) concepts in order to mitigate damages, recover business operations, and avoid critical business interruption; and emergency response and post-disaster recovery.
• Identify and differentiate key cryptographic concepts and how to apply them, implement secure protocols, key management concepts, key administration and validation, and Public Key Infrastructure as it applies to securing communications in the presence of third parties.
• Define and identify the Networks and Communications Security needed to secure network structure, data transmission methods, transport formats, and the security measures used to maintain integrity, availability, authentication, and confidentiality of the information being transmitted.
• The Systems and Application Security section identifies and defines technical and non-technical attacks and how an organization can protect itself from these attacks including the concepts in endpoint device security, cloud infrastructure security, securing big data systems, and securing virtual environments.

• Implement authentication mechanisms
• Operate internetwork trust architectures
• Participate in the identity-management lifecycle
• Implement access controls

• Understand and comply with the code of ethics
• Understand security concepts
• Document and operate security controls
• Participate in asset management
• Implement and assess compliance with controls
• Participate in change management
• Participate in security awareness and training
• Participate in physical security operations

• Understand the risk management process
• Perform security assessment activities
• Operate and maintain monitoring systems
• Analyse monitoring results

• Participate in incident handling
• Understand and support forensic investigations
• Understand and support BCP and DRP

• Understand and apply fundamental concepts of cryptography
• Understand the requirements for cryptography
• Understand and support secure protocols
• Operate and implement cryptographic systems

• Understand security issues related to networks
• Protect telecommunications technologies
• Control network access
• Manage LAN-based security
• Operate and configure network-based security devices
• Implement and operate wireless technologies

• Identify and analyse malicious code and activity
• Implement and operate endpoint device security
• Operate and configure cloud security
• Secure big data systems

• One year working in the Information Security arena, covering at least one of the domains from the SSCP CBK.

• G005 - CompTIA Network+

• Length of exam 3 hours
• Number of items 125
• Item format Multiple choice
• Passing grade 700 out of 1000 points
• Language availability English, Japanese and Brazilian Portuguese
• Testing center Pearson VUE Testing Center

1. Security Operations and Administration 16%
2. Access Controls 15%
3. Risk Identification, Monitoring and Analysis 15%
4. Incident Response and Recovery 14%
5. Cryptography 9%
6. Network and Communications Security 16%
7. Systems and Application Security 15%

Total 100%