SSCP - Systems Security Certified Practitioner (UPDATED)

Identify users, authenticate them, and audit actions to control access; apply least privilege, separation of duties, and need to know with models like mandatory, discretionary, role-based, and attribute-based access control.

Learn how authentication, authorization, and accountability shape access control, verify identities with knowledge, possession, or a fingerprint scan, enforce policies, and log actions to guide security decisions.

Explore mandatory, discretionary, role-based, and attribute-based access control models, comparing strictness, ownership, and context to help select the right method for secure, scalable environments.

Master privilege management and access monitoring to enforce least privilege and reduce risk. Track privileged accounts with logs and regular reviews to ensure their access matches the actual work.

Manage daily security administration tasks to keep systems secure, from setting up new users and adjusting permissions to applying patches, monitoring logs, and documenting changes for compliance and incident response.

Coordinate configuration, change, and patch management to maintain a stable, secure environment. Establish baselines, document changes, classify changes (routine, urgent, major), test and apply patches to reduce risk and outages.

Logging captures events such as user logins, failed attempts, and configuration changes with timestamps and actions taken. Monitoring provides visibility and alerts, while audits verify adherence to policies and procedures.

Master asset management and baseline security to understand what you own, inventory assets, and protect systems with consistent configurations, patches, and policies.

Understand how threats, vulnerabilities, and risk drive security decisions, identify threat actors, assess system weaknesses, and prioritize protections in a structured way to keep environments secure and monitored.

Identify threats and vulnerabilities, assess impact and likelihood, and classify risk to guide consistent risk responses such as controls, avoidance, transfer, or acceptance based on context.

Explore how threat intelligence, threat modeling, and risk monitoring guide proactive decisions, identify assets, and monitor evolving risks across systems, apps, and processes.

Explore how incident response provides a structured, coordinated approach to protect confidentiality, integrity, and availability by guiding teams through the lifecycle: preparation, identification, containment, eradication, recovery, and lessons learned.

Indicators of compromise help security teams detect unusual activity and guide early responses. Incident classification groups events into defined categories to standardize handling and allocation of resources.

Containment, eradication, and recovery guide incident response to stop damage, remove the cause, and restore systems safely. Document changes, patch vulnerabilities, and monitor for re-infection to reestablish a trusted baseline.

Analyze post-incident events to identify what worked and what failed, then document findings. Review timeline and logs to uncover root causes, strengthen controls, and update playbooks in a blame-free culture.

Explore cryptography foundations that safeguard confidentiality, integrity, authentication, and non-repudiation. Distinguish plaintext, ciphertext, and keys, and compare symmetric and asymmetric encryption, hashes, and digital signatures.

explore encryption methods and how symmetric, asymmetric, hashing, and digital signatures work together to secure data, verify integrity, and ensure authenticity in layered security systems.

Explore how key management, certificates, and PKI enable trusted communication by safeguarding private keys, validating identities, and enabling scalable, secure key sharing via certificate authorities.

Define trusted internal zones, a DMZ, and external zones, then assign device roles and enforce layered defenses with firewalls, IDS/IPS, routers, switches, and segmentation.

Learn how secure communication safeguards data in transit with protocols such as HTTPS, TLS, SSH, and IPsec, emphasizing encryption, key handling, endpoint authentication, and wireless protections.

Reduce the attack surface with system hardening, removing unused services, applying patches, and enforcing strong access controls, and secure applications through input validation and secure authentication.