View and download the latest PDF version of the SSCP Certification Exam Outline in the following languages:

SSCP - English | SSCP - Japanese | SSCP - Spanish

About SSCP

The Systems Security Certified Practitioner (SSCP) is the ideal certification for those with proven technical skills and practical, hands-on security knowledge in operational IT roles. It provides confirmation of a practitioner’s ability to implement, monitor and administer IT infrastructure in accordance with information security policies and procedures that ensure data confidentiality, integrity and availability.

The broad spectrum of topics included in the SSCP Exam Outline ensure its relevancy across all disciplines in the field of information security. Successful candidates are competent in the following seven domains:

Security Concepts and Practices
Access Controls
Risk Identification, Monitoring, and Analysis
Incident Response and Recovery
Cryptography
Network and Communications Security
Systems and Application Security

Experience Requirements

Candidates must have a minimum of one-year full-time experience in one or more of the seven domains of the current SSCP Exam Outline. Earning a post-secondary degree (bachelors or masters) in computer science, information technology (IT) or related fields may satisfy up to one year of the required experience. Part-time work and internships may also count towards the experience requirement.

A candidate that doesn’t have the required experience to become an SSCP may become an Associate of ISC2 by successfully passing the SSCP examination. The Associate of ISC2 will then have two years to earn the one year required experience. You can learn more about SSCP experience requirements and how to account for part-time work and internships at www.isc2.org/Certifications/SSCP/SSCP-Experience-Requirements.

Accreditation

SSCP is in compliance with the stringent requirements of ANSI/ISO/IEC Standard 17024.

Job Task Analysis (JTA)

ISC2 has an obligation to its membership to maintain the relevancy of the SSCP. Conducted at regular intervals, the Job Task Analysis (JTA) is a methodical and critical process of determining the tasks that are performed by security professionals who are engaged in the profession defined by the SSCP. The results of the JTA are used to update the examination. This process ensures that candidates are tested on the topic areas relevant to the roles and responsibilities of today’s practicing information security professionals.

SSCP Examination Information

The SSCP exam uses Computerized Adaptive Testing (CAT) for all exams.

Length of exam	2 hours
Number of items	100-125
Item format	Multiple choice and advanced item types
Passing grade	700 out of 1000 points
Language availability	English, Japanese and Spanish
Testing center	Pearson VUE Testing Center

SSCP Examination Weights

Domains	Average Weight
1. Security Concepts and Practices	16%
2. Access Controls	15%
3. Risk Identification, Monitoring and Analysis	15%
4. Incident Response and Recovery	14%
5. Cryptography	9%
6. Network and Communications Security	16%
7. Systems and Application Security	15%
Total	100%

SSCP Certification Exam Outline

Domains

Loading component...

Loading component...

Domains