🧩 ISC2 SSCP (Systems Security Certified Practitioner)

🧠 1. Certification Name and Issuing Body

• Full certification name: Systems Security Certified Practitioner (SSCP)

• Issuing organization: (ISC)² – International Information System Security Certification Consortium

• Official website: https://www.isc2.org/Certifications/SSCP

🧩 2. Certification Level and Type

• Level: Intermediate

• Type: Technical

📜 3. Purpose and Goals

• What skills does it certify?
  Access controls, security operations, risk management, incident response, cryptography, and network security

• Target roles or profiles:
  Systems Administrator, Security Analyst, Network Security Engineer, IT Admin with security responsibilities

• Practical applications:
  Day-to-day security operations, compliance, internal security policy enforcement, incident handling

🎓 4. Prerequisites

• Recommended prior certifications:
  CompTIA Security+ or equivalent foundational knowledge

• Suggested experience:
  1 year of cumulative paid work experience in at least one of the SSCP domains

• Required technical knowledge:
  Windows/Linux administration, TCP/IP, identity management, incident handling, basic cryptography

📚 5. Content and Curriculum

• Key domains/modules (2022 update):

  1. Security Operations and Administration

  2. Access Controls

  3. Risk Identification, Monitoring, and Analysis

  4. Incident Response and Recovery

  5. Cryptography

  6. Network and Communications Security

  7. Systems and Application Security

• Technologies/tools:
  SIEMs, firewalls, IDS/IPS, Active Directory, encryption standards (AES, RSA), syslog, antivirus, access control systems

• Framework mapping:
  NIST Cybersecurity Framework, ISO/IEC 27001, NICE Framework

🧪 6. Learning Approach

• Style: Mixed (conceptual + practical)

• Labs/environments: Hands-on labs are available via training providers

• Materials: Official (ISC)² Study Guide, SSCP CBK (Common Body of Knowledge), video courses

• Recommended platforms: Cybrary, Infosec Skills, LinkedIn Learning, Kaplan, (ISC)² Official Training

📝 7. Exam Format and Details

• Mode: Online proctored or in-person (Pearson VUE)

• Duration: 180 minutes

• Questions: 125 (multiple choice)

• Languages: English, Japanese, Portuguese (Brazil), Chinese, Korean

• Retake policy: 30-day waiting period; discounted retake may apply

• Certification validity: 3 years

💰 8. Estimated Cost

• Exam fee: $249 USD

• Training cost: Varies (~$200–$1,200 depending on provider)

• Renewal/maintenance: $125 USD annual maintenance fee (covers all (ISC)² certs held)

🌍 9. Industry Recognition

• Demand/popularity: Recognized globally as an entry/intermediate-level technical security cert

• Organizations that value it: U.S. Department of Defense (DoD 8570 baseline), IBM, Cisco, military/government contractors

• Similar certifications:
  CySA+ (more Blue Team focused), GIAC GSEC (broader), Microsoft SC-200 (cloud focus)

💼 10. Career Opportunities

• Job roles:
  Information Security Analyst, Junior SOC Analyst, IT Security Administrator, Network Administrator, Risk Analyst

• Suggested certification paths:
  → SSCP → CISSP (after meeting experience)
  → SSCP → Specialized certs (e.g., GIAC, Microsoft SC-series, Cisco SCOR)

💵 11. Average Salary

• USA: $75,000–$105,000/year

• Europe: €45,000–€70,000/year

• Salary increase: ~10–15% over comparable roles without certification

• (Sources: PayScale, Glassdoor, CyberSeek)

📅 12. Renewal and Maintenance

• Validity: 3 years

• Renewal: Earn 60 Continuing Professional Education (CPE) credits over 3 years

• Annual maintenance fee: $125 USD (covers all (ISC)² certs if more than one)

🧭 13. Final Recommendations

• Ideal for:
  IT professionals who want to enter or specialize in operational security roles

• When to pursue:
  After gaining ~1 year of experience in system/network administration with security responsibilities

• Tips:
  Master all 7 domains, focus on governance + technical balance, use official CBK, and supplement with practice exams