← All certifications

Systems Security Certified Practitioner (SSCP)

ISC2

Hands-on practitioner credential. An Intermediate qualification option for System Administrator (451) and Technical Support Specialist (411).

We have a course for this

Built from this exam's published objectives. The first module is free.

Baseline certification levels

This certification satisfies these DoD baseline levels — the IAT / IAM / IASAE / CSSP requirement many contracts still state. It's a separate question from the 8140 work roles above, and there is no official mapping between the two.

What this qualifies you for

Listed specifically for 11 work roles — up to Advanced proficiency. Because options cascade downward, a cert listed at Advanced also satisfies Intermediate and Basic for that role.

411Technical Support SpecialistProvides technical support to customers who need assistance utilizing client level hardware and software in accordance with established or approved organizational process components. (i.e., Master Incident Management Plan, when applicable).Advanced421Database AdministratorAdministers databases and/or data management systems that allow for the storage, query, and utilization of data.Intermediate431Knowledge ManagerResponsible for the management and administration of processes and tools that enable the organization to identify, document, and access intellectual capital and information content.Intermediate441Network Operations (NETOPS) SpecialistPlans, implements, and operates network services/systems, to include hardware and virtual environments.Intermediate451System Administrator (SYSADMIN)Installs, configures, troubleshoots, and maintains hardware, software, and administers system accounts.Intermediate521Cyber Defense Infrastructure Support SpecialistTests, implements, deploys, maintains, and administers the infrastructure hardware and software.Intermediate631Information Systems Security DeveloperDesigns, develops, tests, and evaluates information system security throughout the systems development lifecycle.Basic632Systems DeveloperDesigns, develops, tests, and evaluates information systems throughout the systems development lifecycle.Advanced641Systems Requirements PlannerConsults with customers to evaluate functional requirements and translate functional requirements into technical solutions.Intermediate671System Testing and Evaluation (T&E) SpecialistPlans, prepares, and executes tests of systems to evaluate results against specifications and requirements as well as analyze/report test results.Intermediate722Information Systems Security Manager (ISSM)Responsible for the cybersecurity of a program, organization, system, or enclave.Intermediate
Also listed for 14 Cyberspace Enablers roles — but so is every other certification

The Enablers matrix isn’t role-differentiated: the same certification options are listed for all 14 roles at every proficiency level. We verified that across all 14. So this is true, and it carries no information about this credential specifically — which is why it isn’t in the count above.

Exam blueprint

Verified against ISC2’s published outline.

SSCP

Current

100–125 items · 2 hours · passing score 700 of 1000

Security concepts and practices16%
Access controls15%
Risk identification, monitoring and analysis15%
Incident response and recovery14%
Cryptography9%
Network and communications security16%
Systems and application security15%

The SSCP moved to CAT on 2025-10-01. It is no longer 125 fixed questions over 3 hours — that was the pre-October-2025 linear format, still widely mis-stated.

Source: ISC2 SSCP exam outline · dated 2025-10-01 · checked 2026-07-16