Top of Page
 

SSCP Domain Change FAQ

Q:

Why are changes being made to the SSCP exam?

 
A:

(ISC)² has an obligation to its membership to maintain the relevancy of its credentials. These enhancements are the result of a rigorous, methodical process that (ISC)² follows to routinely update its credential exams. This process ensures that the examinations and subsequent continuing professional education requirements encompass the topic areas relevant to the roles and responsibilities of today's practicing information security practitioner.

Q:

How is the SSCP exam changing?

 
A:

The content of the SSCP has been refreshed to reflect the most pertinent issues that information security practitioners currently face, along with the best practices for mitigating those issues. Some topics have been updated while others have been realigned. The result is an exam that most accurately reflects the hands-on, technical IT skills and practical security knowledge required by practitioners to support an organization's mission and operations.

As a result of the content refresh, we have updated the domain weights as follows:

Domain

Weight

Domain 1: Access Controls

16%

Domain 2: Security Operations and Administration

15%

Domain 3: Risk Identification, Monitoring, and Analysis

15%

Domain 4: Incident Response and Recovery

13%

Domain 5: Cryptography

10%

Domain 6: Network and Communications Security

16%

Systems and Application Security

15%

Total

100%

Q:

Why do domains for (ISC)² credential exams change?

 
A:

Domains change because it is a reflection of a change in the knowledge, skills and abilities, as indicated by experts through the Job Task Analysis process.

Q:

When will these changes go into effect?

 
A:

The changes will begin on November 1, 2018.

Q:

In what language will the refreshed SSCP exam be available?

 
A:

The refreshed SSCP exam will be available in English, Japanese and Portuguese.

Q:

Will this change the number of questions or the time required to take the SSCP exam?

 
A:

No. The SSCP exam will have the same number of items, and the time required to take the exam will be the same.

Q:

If I have been studying for the SSCP exam with material that focuses on the current domains, will I be sufficiently prepared to take the new exam without additional study?

 
A:

(ISC)² exams are experience-based that include experience-based questions that cannot be learned by studying alone. If you already have the experience in the domains covered in SSCP and believe that you have sufficiently studied those domains, you should feel confident that you are qualified to take the new exam and pass it. (ISC)² cannot guarantee you will pass the exam.

Q:

Do these updates affect the experience requirement for the SSCP?

 
A:

No. For the SSCP, a candidate is required to have a minimum of one year of cumulative work experience in one or more of the seven domains of the SSCP CBK.

Q:

What impact do these changes have on (ISC)² training materials?

 
A:

The Official (ISC)² SSCP Training Course (classroom-based and online instructor-led) will be available on November 1, 2018.

OK