SSCP - Systems Security Certified Practitioner

1. Access Controls

• Apply Logical Access Control in Terms of Subjects
• Apply Logical Access Controls in Terms of Objects of Object Groups
• Implement Authentication Mechanisms
• Operate Internetwork Trust Architectures
• Administer Identify Management Life Cycle
• Implement Access Controls

2. Security Operations and Administration

• Understand and Comply with Code of Ethics
• Understand Security Concepts
• Document and Operate Security Controls
• Participate in Asset Management
• Implement and Assess Compliance with Controls
• Participate in Change Management Duties
• Participate in Security Awareness Training
• Participate in Physical Security Operations

3. Risk Identification, Monitoring, and Analysis

• Understand the Risk Management Process
• Perform Security Assessment Activities
• Operate and Maintain Monitoring Systems
• Analyze and Report Monitoring Results

4. Incident Response and Recovery

• Participate in Incident Handling
• Understand and Support Forensics Investigations
• Understand and Support Business Continuity (BCP) and Disaster Recovery Plan (DRP)

5. Cryptography

• Understand and Apply Fundamental Concepts of Cryptography
• Understand Requirements for Cryptography
• Operate and Implement Cryptographic Systems

6. Networks and Communications Security

• Understand Security Issues Related to Networks
• Protect Telecommunications Technologies
• Control Network Access
• Manage LAN-Based Security
• Operate and Configure Network-Based Security Devices
• Implement and Operate Wireless Technologies

7. Systems and Application Security

• Identify and Analyze Malicious Code and Activity
• Implement and Operate Endpoint Device Security
• Operate and Configure Cloud Security
• Secure Big Data Systems
• Operate and Secure Virtual Environments

In-depth coverage of the seven domains required to pass the SSCP exam:

1. Access Control
2. Security Operations and Administration
3. Risk Identification, Monitoring, and Analysis
4. Incident Response and Recovery
5. Cryptography
6. Networks and Communications Security
7. Systems and Application Security

• Systems administration experience
• Familiarity with TCP/IP
• An understanding of UNIX, Linux, and Windows
• Intermediate-level knowledge of network security concepts

• Network security engineer
• Security administrator
• Security analyst
• Systems engineer
• Network administrator
• Systems administrator
• Security specialist
• Systems/network analyst
• Security consultant
• Database administrator