To be eligible for the SSCP certification program, candidates must have at least one year of experience in one or more of the seven domains covered in the program. 

candidates can substitute this requirement with a degree or other relevant certification.

To be SSCP certified, a candidate should pass the exam and have a minimum of 1 year of cumulative paid full-time work experience in one or more of the seven domains of the SSCP CBK.

 candidates have a basic understanding of systems security concepts and practices.

The SSCP certification program covers seven domains, including:

1. Access Controls

• Identification and Authentication
• Access Control Models
• Access Control Administration
• Authorization Mechanisms

2. Security Operations and Administration

• Security Management Practices
• Operations Security
• Change Management
• Incident Management

3. Risk Identification, Monitoring, and Analysis

• Threat Modeling
• Risk Assessment
• Monitoring and Analysis
• Reporting

4. Incident Response and Recovery

• Incident Handling
• Investigation and Analysis
• Recovery Strategies
• Prevention Measures

5. Cryptography

• Cryptographic Concepts
• Symmetric Cryptography
• Public Key Cryptography
• Cryptographic Applications

6. Network and Communication Security

• Network Security Devices and Mechanisms
• Network Architecture and Design
• Communication Channels and Protocols
• Wireless Security

7. Systems and Application Security

• Operating System Security
• Application Security
• Database Security
• Malicious Code and Activity