Systems Security Certified Practitioner - SSCP

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Comply with codes of ethics
  

• Understand security concepts
  

• Identify and implement security controls
  

• Document and maintain functional security controls
  

• Participate in asset management lifecycle (hardware, software and data)
  

• Participate in change management lifecycle
  

• Participate in implementing security awareness and training (e.g., social engineering/phishing)
  

• Collaborate with physical security operations (e.g., data center assessment, badging)

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Implement and maintain authentication methods
  

• Support internetwork trust architectures
  

• Participate in the identity management lifecycle
  

• Understand and apply access controls

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Understand the risk management process
  

• Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)
  

• Participate in security assessment and vulnerability management activities
  

• Operate and monitor security platforms (e.g., continuous monitoring)
  

• Analyze monitoring results

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Incident Response and Recovery
  

• Support incident lifecycle e.g., National Institute of Standards and Technology (NIST), International Organization for Standardization (ISO)
  

• Understand and support business continuity plan (BCP) and disaster recovery plan (DRP)

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Understand cryptography
  

• Apply cryptography concepts
  

• Understand and implement secure protocols
  

• Understand public key infrastructure (PKI)

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Understand and apply fundamental concepts of networking
  

• Understand network attacks (e.g., distributed denial of service (DDoS), man-in-the-middle (MITM), Domain Name System (DNS) poisoning) and countermeasures (e.g., content delivery networks (CDN))
  

• Manage network access controls
  

• Manage network security
  

• Operate and configure network-based security devices
  

• Secure wireless communications

In this track of the Systems Security Certified Practitioner (SSCP) journey, the focus will be on the following:

• Identify and analyze malicious code and activity
  

• Implement and operate endpoint device security
  

• Administer Mobile Device Management (MDM)
  

• Understand and configure cloud security
  

• Operate and maintain secure virtual environments