Systems Security Certified Practitioner (SSCP) Certification Online Training

Syllabus of Systems Security Certified Practitioner (SSCP) Certification Online Training

• Implement and maintain authentication methods
• Single/multifactor authentication
• Single sign-on
• Device authentication
• Federated access
• Support internetwork trust architectures
• Trust relationships
• Extranet
• Third-party connections
• Participate in the identity management lifecycle
• Authorization
• Proofing
• Provisioning/de-provisioning
• Maintenance
• Entitlement
• Identity and Access Management (IAM) systems
• Implement access controls
• Mandatory
• Non-discretionary
• Discretionary
• Role-based
• Attribute-based
• Subject-based
• Object-based

• Participate in asset management
• Lifecycle (hardware, software, and data)
• Hardware inventory
• Software inventory and licensing
• Data storage
• Comply with codes of ethics
• (ISC)² Code of Ethics
• Organizational code of ethics
• Understand security concepts
• Document, implement and maintain functional security controls
• Deterrent controls
• Preventative controls
• Detective controls
• Corrective controls
• Compensating controls
• Implement security controls and assess compliance
• Technical controls
• Physical controls
• Administrative controls
• Periodic audit and review
• Participate in change management
• Execute change management process
• Identify security impact

• Understand the risk management process
• Risk visibility and reporting
• Risk management concepts
• Risk management frameworks
• Risk treatment
• Perform security assessment activities
• Participate in security testing
• Interpretation and reporting of scanning and testing results
• Remediation validation
• Audit finding remediation
• Operate and maintain monitoring systems
• Events of interest
• Logging
• Source systems
• Legal and regulatory concerns
• Analyze monitoring results
• Security baselines and anomalies
• Visualizations, metrics, and trends
• Event data analysis
• Document and communicate findings

• Support incident lifecycle
• Preparation
• Detection, analysis, and escalation
• Containment
• Eradication
• Recovery
• Lessons learned/implementation of new countermeasure
• Understand and support forensic investigations
• Legal and ethical principles
• Evidence handling
• Understand and support Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) activities
• Emergency response plans and procedures
• Interim or alternate processing strategies
• Restoration planning
• Backup and redundancy implementation
• Testing and drills

• Understand fundamental concepts of cryptography
• Understand reasons and requirements for cryptography
• Confidentiality
• Integrity and authenticity
• Data sensitivity
• Regulatory
• Understand and support secure protocols
• Services and protocols
• Common use cases
• Limitations and vulnerabilities
• Understand Public Key Infrastructure (PKI) systems
• Fundamental key management concepts
• Web of Trust (WOT)

• Understand and apply fundamental concepts of networking
• Understand network attacks and countermeasures
• Manage network access controls
• Network access control and monitoring
• Network access control standards and protocols
• Remote access operation and configuration
• Manage network security
• Logical and physical placement of network devices
• Segmentation
• Secure device management
• Operate and configure network-based security devices elements
• Firewalls and proxies
• Network intrusion detection/prevention systems
• Routers and switches
• Traffic-shaping devices
• Operate and configure wireless technologies
• Transmission security
• Wireless security devices

• Identify and analyze malicious code and activity
• Malware
• Malicious code countermeasures
• Malicious activity
• Malicious activity countermeasures
• Implement and operate endpoint device security
• Operate and configure cloud security
• Operate and secure virtual environments