ISC2 SSCP - Systems Security Certified Practitioner

Domain 1: Security Concepts and Practices

• Comply with code of ethics
• Understand security concepts
• Identify and implement security controls
• Document and maintain functional security controls
• Support and implement asset management lifecycle (i.e., hardware, software, and data)
• Support and/or implement change management lifecycle
• Support and/or implement security awareness and training (e.g., social engineering/phishing/tabletop exercises/awareness communications)
• Collaborate with physical security operations (e.g., data center/facility assessment, badging and visitor management, personal device restrictions)

Domain 2: Access Controls

• Implement and maintain authentication methods
• Understand and support internetwork trust architectures
• Support and/or implement the identity management lifecycle
• Understand and administer access controls

Domain 3: Risk Identification, Monitoring and Analysis

• Understand risk management
• Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)
• Perform security assessments and vulnerability management activities
• Operate and monitor security platforms (e.g., continuous monitoring)
• Analyze monitoring results

Domain 4: Incident Response and Recovery

• Understand and support incident response lifecycle (e.g., National Institute of Standards and Technology (NIST), International Organization for Standardization (ISO))
• Understand and support forensic investigations
• Understand and support business continuity plan (BCP) and disaster recovery plan (DRP)

Domain 5: Cryptography

• Understand reasons and requirements for cryptography
• Apply cryptography concepts
• Understand and implement secure protocols
• Understand public key infrastructure (PKI)

Domain 6: Network and Communication Security

• Understand and apply fundamental concepts of networking
• Understand network attacks (e.g., distributed denial of service (DDoS), man-in-the-middle (MITM), Domain Name System (DNS) cache poisoning)
• Manage network access controls
• Manage network security
• Operate and configure network-based security appliances and services
• Secure wireless communications
• Secure and monitor Internet of Things (IoT) (e.g., configuration, network isolation, firmware updates, End of Life (EOL) management)

Domain 7: Systems and Application Security

• Identify and analyze malicious code and activity
• Implement and operate endpoint device security
• Administer and manage mobile devices
• Understand and configure cloud security
• Operate and maintain secure virtual environments

Für eine optimale Teilnahme am Kurs empfehlen wir folgende Vorkenntnisse:

• Fundierte Kenntnisse in verschiedenen IT Bereiche
• Grundlegende Erfahrungen in Netzwerktechnologien

• Security Analyst
• Systems Engineer
• System-/Netzwerkanalyst
• Network Security Engineer
• System-/Netzwerkadministrator
• Security Consultant/Specialist
• Security-Administrator
• Datenbankadministrator