Obtaining your SSCP certification signifies that you possess the ability to tackle the operational demands and responsibilities of security practitioners, including authentication, security testing, intrusion detection/prevention, incident response and recovery, attacks and countermeasures, cryptography, malicious code countermeasures, and more.
By the end of this course, students should be able to understand:
- Access control fundamental concepts, Types of access control, Security models,
Authentication mechanisms, Trust direction, Identity management life cycle.
- Code of ethics, CIA triad and beyond, Security architecture, Controls, Systems security
plans, secure development and acquisition life cycle, System vulnerabilities, Secure
development, And acquisition practices, Data, Data leakage.
- Risk management process, Risk treatment, Auditing, Vulnerability scanning and
analysis, Penetration testing, Operating and monitoring systems.
- Incident handling, Forensic evidence, Business continuity plans, Disaster recovery plans.
- Fundamental concepts, Symmetric cryptography, Asymmetric cryptography, Methods of cryptanalytic attack, Key management concepts, Secure protocols.
- OSI and TCP/IP models, IP networking, Network topologies, DNS and LDAP, Commonly used ports and protocols, Telecommunication technologies, Control network access, Multimedia services and technologies, Network based security devices