SSCP – ISC2 Systems Security Certified Practitioner
Description
The SSCP is the premier security administrator certification. It validates your operational capability through proven experience: not just institutional knowledge, but the demonstrated ability to execute security operations effectively.
The SSCP is ideal for IT administrators, managers, directors and network security professionals responsible for the hands-on operational security of their organization’s critical assets. It shows you have the advanced technical skills and knowledge to implement, monitor and administer IT infrastructure using security best practices, policies and procedures.
Official courseware is developed by ISC2 – creator of the SSCP CBK – to ensure your training is relevant and up-to-date.
Target group
This training course is intended for practitioners who have at least one year of cumulative work experience in one or more of the seven domains of the ISC2 SSCP CBK and are pursuing SSCP training and certification to acquire the credibility and mobility to advance within their current information security careers. The training seminar is ideal for those with technical skills and practical, hand-on security knowledge working in operational IT positions such as, but not limited to:
- Network Security Engineer
- Systems Administrator
- Security Analyst
- Systems Engineer
- Security Consultant/Specialist
- Security Administrator
- Systems/Network Analyst
- Database Administrator
Program
- Duration : 5 days
Domain 1: Security Concepts and Practices
- Classify information security and security concepts.
- Summarize components of the asset management lifecycle .
- Identify common risks and vulnerabilities.
- Provide examples of appropriate risk treatment.
Domain 2: Access Controls
- Provide examples of functional security controls and policies for identified scenarios.
- Classify various access control models.
- Identify components of the identity management lifecycle.
- Recognize access control and authentication methods.
Domain 3: Risk Identification, Monitoring and Analysis
- Identify the fundamental concepts of cryptography driving requirements and benefits.
- Recognize symmetric encryption methods.
- Use asymmetric encryption methods.
- Examine Public-Key Infrastructure (PKI) systems and certificates.
- Summarize fundamental key management terms and concepts.
- Recognize how to implement secure protocols.
- Review methods of cryptanalytic attack.
Domain 4: Incident Response and Recovery
- Discuss software systems and application security.
- Recognize data security concepts and skills.
- Identify malicious code and countermeasures.
- Evaluate Mobile Device Management (MDM) and security issues with mobile and autonomous endpoints.
- Review attacks and countermeasures for virtual machines.
Domain 5: Cryptography
- Recognize layers of the OSI Model, their functions, and attacks present at each layer.
- Identify commonly used ports and protocols.
- Select appropriate countermeasures for various network attacks.
- Summarize best practices for establishing a secure networked environment.
Domain 6: Network and Communications Security
- Recall cloud security concepts and configurations.
- Recognize types of virtualization and cloud security considerations.
- Summarize the types of telecommunications and network access controls.
Domain 7: Systems and Application Security
- Review the steps for monitoring, incident detection, and data loss prevention using all source intelligence.
- Identify the elements of an incident response policy and members of the incident response team (IRT).
- Classify the SSCP’s role in supporting forensic investigations.
Goal
After completing this course, the student will be able to:
- Describe security and the alignment of asset management to risk management.
- Appraise risk management options and the use of access controls to protect assets.
- Examine the field of cryptography to secure information and communication.
- Build a security posture by securing software, data, and endpoints.
- Apply network and communications security to establish a secure networked environment.
- Evaluate cloud and wireless security.
- Prepare for incident detection and response.
- Implement appropriate measures that contribute to the maturation of risk management.
Recommended
To qualify for the SSCP certification, candidates must have a minimum of one year of cumulative work experience in one or more of the seven domains of the SSCP Common Body of Knowledge (CBK). A bachelor’s or master’s degree in cybersecurity or a related field (such as Computer Science, Computer Engineering, Computer Systems Engineering, Management Information Systems or Information Technology) may substitute for this one-year experience.
If you don’t yet have the required experience, you may become an Associate of ISC2 after successfully passing the SSCP exam. The Associate of ISC2 will then have two years to earn the experience needed for the SSCP certification.
- Langue : Anglais
- Niveau : Avancé
- Organisme de certification : ISC2
- Certification : Oui
- Accesibilité : Oui
- Durée : 5 Jours
Information importante :
Nos formations ne sont pas inscrites au Répertoire National des Certifications Professionnelles (RNCP), mais elles sont conformes aux exigences du Répertoire Spécifique (RS).