Home » ISC(2) Training » ISC(2) SSCP

ISC(2) Systems Security Certified Practitioner SSCP

The major IT Security Certification for IT Professionals setting out on a Career in IT Security.

Course Contents:

Stage 1: Access Controls

Stage 2: Administration

Stage 3: Auditing and Monitoring

Stage 4: Risk, Response, and Recovery

Stage 5: Cryptography

Stage 6: Data Communications

Stage 7: Malicious Code

Course Code:

SSCP-2

Course Duration:

12 months

Typical Study Hours:

40 - 50 hours

Course Fees:

See our Fee Guide

Course Demo:

Request an online Course Demo

Study Prerequisite:

IT Professionals with at least one year of cumulative experience in one or more of the seven SSCP test domains.

Additional Information for Stage 1:

• Access Controls

  • Define access control and recognise access control types and models
  • Recognise how access control is implemented
  • Recognise the way in which the authentication protocol Kerberos works
  • Identify the mechanisms used to ensure Information Assurance
  • Identify suitable access control solutions

^top

Additional information for Stage 2:

• Administration

  • Identify the features of the security development life cycle
  • Outline the policies and practices used to secure an information system and its environment
  • Identify the function of a roadmap in security administration and outline the activities required to develop one for an organisation
  • Outline technologies used in organizations to secure information and information systems
  • Implement suitable security mechanisms
  • Outline best practices for security administration in a network
  • Identify the requirements for a security awareness program and outline how it can be implemented in an organisation
  • Implement a successful security awareness program

^top

Additional information for Stage 3:

• Auditing and Monitoring

  • Identify the role of auditing
  • Identify the types of data collected during an audit and outline how it is processed
  • Outline the methods and tools involved in conducting a security audit
  • Identify features of the audit process
  • Outline the different types of monitoring and the tools associated with each type
  • Recognise the need to develop an effective incident response program
  • Identify incident response features

^top

Additional information for Stage 4:

• Risk, Response, and Recovery

  • Define risk and identify the strategies used to manage it
  • Identify methods and tools used to perform risk analysis
  • Identify the steps and activities of a risk assessment methodology
  • Identify the mechanisms used when responding to a security attack
  • Identify the features of contingency plans and disaster recovery plans
  • Identify appropriate solutions for business continuity
  • Identify the roles and tools involved in computer forensics

^top

Additional information for Stage 5:

• Cryptography

  • Recognise how encryption developed and identify the process and types involved
  • Identify the block cipher modes of operation and the different block cipher algorithms
  • To identify the role of hashes and digital signatures in protecting the integrity of encrypted data
  • Recognise encryption processes
  • Identify the various methods of key management
  • Identify the features of the general hierarchical model of public key infrastructure and the top-down hierarchical SET public key infrastructure
  • Identify the types and features of encryption protocols
  • Identify various types of cryptographic attack

^top

Additional information for Stage 6:

• Data Communications

  • Identify the types of signals and transmission media used to transfer data information
  • Identify the attributes of various network deployments
  • Identify the topologies and standards used in networking
  • Identify the layers of the OSI and TCP/IP network communication models
  • Identify common network devices
  • Identify types of network attacks and the methods used to mitigate them
  • Identify ways to secure a network from given attacks

^top

Additional information for Stage 7:

• Malicious Code

  • Identify types and characteristics of malicious code
  • Identify the mechanisms and best practices used to counter malicious code attacks
  • Identify malicious code protection products and the mechanisms they use
  • Identify how to defend against malicious code

^top

<< back to previous page