Systems Security Certified Practitioner (SSCP)

ÖVERSIKT

The goal of this five-day immersed SSCP course is to provide IT and information security professionals with a fully-immersed, zero-distraction, all-inclusive SSCP training experience.

Vad ingår

Your course package is designed to provide maximum learning and convenience. This is included in the price of your course:

• INSTRUKTÖRSLETT PROGRAM
• KURSMATERIAL
• CERTIFIERINGSGARANTI
• INSTRUKTÖRSLETT PROGRAM
• BOENDE
• KURSMATERIAL
• ALL MAT
• CERTIFIERINGSGARANTI

EXAMEN & CERTIFIERING

Your expert instructor will get you ready for the following exam and certification, which are not included in your course package.

• ISC2 Systems Security Certified Practitioner (SSCP) Exam (SSCP)
• ISC2: Systems Security Certified Practitioner (SSCP)

FÖRKUNSKAPER

There are currently no formal prerequisites to attend the SSCP course. Though it is recommended that delegates have some knowledge of other IT domains, including a basic working knowledge of network technologies. The CompTIA Security+ certification, while not required, would also be beneficial.

In order to attain the SSCP certification, delegates require a minimum of one year’s cumulative paid full-time work experience in one or more of the seven domains covered in the SSCP CBK. Valid experience includes information systems security-related work performed, or work that requires information security knowledge and involves direct application of that knowledge.

If you do not have the required experience, you may still sit for the exam and become an Associate of (ISC)2 until you have gained the required experience.

Agendan

Using our engaging learning methodology including a variety of tools, we’ll cover the entire curriculum.

This course covers the seven domains contained in the SSCP Common Body of Knowledge. Delivered in the following order:

Access controls - how to implement and manage secure systems
Understand the different Access Control systems and how they should be implemented to protect the system and data using the different levels of confidentiality, integrity, and availability

Security Operations and Administration - security concepts, controls, asset management, change management
Understand the processes necessary for working with management and information owners, custodians, and users so that proper data classifications are defined. This will ensure the proper handling of all hard copy and electronic information as it is applied by the Security Operations and Administration

Risk identification, monitoring & analysis - risk management process, monitoring systems
The Risk Identification, Monitoring, and Analysis Domain identifies the how to identify, measure, and control losses associated with adverse events. You will review, analyze, select, and evaluate safeguards for mitigating risk

Incident response and recovery - incident handling, forensic investigation, business continuity and disaster recovery planning
Identify how to handle Incident Response and Recovery using consistent, applies approaches including the use of the Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) concepts in order to mitigate damages, recover business operations, and avoid critical business interruption; and emergency response and post-disaster recovery

Cryptography - concepts, requirements, secure protocols, implementation
Identify and differentiate key cryptographic concepts and how to apply them, implement secure protocols, key management concepts, key administration and validation, and Public Key Infrastructure as it applies to securing communications in the presence of third parties

Networks & communications security - network architecture, protocols, security controls
Define and identify the Networks and Communications Security needed to secure network structure, data transmission methods, transport formats, and the security measures used to maintain integrity, availability, authentication, and confidentiality of the information being transmitted

System & application security - malicious code, cloud security, virtual environments
The Systems and Application Security section identifies and defines technical and non-technical attacks and how an organization can protect itself from these attacks including the concepts in endpoint device security, cloud infrastructure security, securing big data systems, and securing virtual environments.