(ISC)² SSCP Systems Security Certified Practitioner + Prüfung

SSCP (Systems Security Certified Practitioner) von (ISC)² ist die Hands-on-Cybersecurity-Zertifizierung — ideal für IT-Profis, die Security-Policies implementieren und überwachen (Security Engineers, System Administrators, Network Engineers). Im Vergleich zu CISSP (Management-orientiert, Senior-Level mit 5+ Jahren Erfahrung) ist SSCP einsteiger-freundlicher (1 Jahr Erfahrung als Voraussetzung). Block Domain 1 — Access Controls (16 %): Identification und Authentication (Knowledge, Possession, Inherence — die 3 Faktoren), Single Sign-On (SSO) und Federation (SAML, OAuth2, OpenID Connect), Multi-Factor Authentication, Authorization-Modelle (DAC, MAC, RBAC, ABAC, Rule-Based), Identity Management Lifecycle (Provisioning, Review, Revocation), Privileged Access Management (PAM). Block Domain 2 — Security Operations and Administration (15 %): Security-Konzepte (Confidentiality, Integrity, Availability — die CIA-Triade), Sicherheits-Policies, -Standards, -Procedures, Asset Management, Change Management mit Security-Reviews, Configuration Management, Patch Management, Endpoint Security (Antivirus, EDR, MDM für mobile Devices). Block Domain 3 — Risk Identification, Monitoring, and Analysis (15 %): Risk Management-Lifecycle (Identifikation, Bewertung, Behandlung, Monitoring), Threat Modeling (STRIDE, DREAD), Vulnerability Assessment, Penetration Testing (von außen), Security Audits, Logging und Monitoring mit SIEM, Incident Response (Preparation, Detection, Containment, Eradication, Recovery, Lessons Learned). Block Domain 4 — Incident Response and Recovery (14 %): Incident Response Plan, Forensic Investigations (Chain of Custody, Evidence Handling, Volatile vs. Non-Volatile Data), Business Continuity Plan (BCP), Disaster Recovery Plan (DRP), Backup-Strategien und Restore-Tests. Block Domain 5 — Cryptography (12 %): Cryptography-Grundlagen, Symmetric Encryption (AES, 3DES — Algorithmen, Block- vs. Stream-Ciphers, Modes wie CBC/GCM), Asymmetric Encryption (RSA, ECC — Public/Private Key), Hash Functions (SHA-256, SHA-3 — für Integrität, Password-Hashing mit bcrypt/scrypt/argon2), Digital Signatures, Public Key Infrastructure (PKI mit CAs, RAs, Certificates), Cryptographic Protocols (TLS, SSH, IPsec). Block Domain 6 — Network and Communications Security (16 %): OSI- und TCP/IP-Modelle, Netzwerk-Architektur (DMZ, Network Segmentation), Network Security Devices (Firewalls — Packet Filter, Stateful, Application Layer, NGFW), IDS/IPS (Signature vs. Anomaly-Based), Wireless Security (WPA3, 802.1X mit EAP), VPN-Technologien (IPsec, SSL/TLS, SSH), Secure Network Protocols (HTTPS, SFTP, SSH). Block Domain 7 — Systems and Application Security (12 %): Host Security (Hardening, Patch Management, Secure Configuration Baselines), Mobile Device Security (MDM, Containerization), Cloud Security (Shared Responsibility Model), Virtualization Security, Database Security, Application Security (OWASP Top 10, Secure SDLC, Code Reviews). Block Prüfung: 125 Multiple-Choice-Fragen in 3 Stunden, 700/1000 Pass-Threshold, Voucher meist im Preis enthalten.