ISC2
Systems Security Certified Practitioner
SSCP · active
Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.
- Exam cost
- $249 USD
- Questions · time · passing score
- 100–125 questions · 120 minutes · Pass: 700/1000
- Prerequisites
- Not verified — check issuer eligibility
- Estimated salary premium
- Not established by comparable evidence
- Renewal requirements
- 60 CPE credits per three-year cycle; annual maintenance fee $135; comply with code of ethics.
- Difficulty
- Not rated
Domains covered
- Security concepts and practices
- Access controls
- Risk identification, monitoring and analysis
- Incident response and recovery
- Cryptography
- Network and communications security
- Systems and application security
Where this credential fits
MyCyberPath career mappings are planning guidance, not universal employer requirements.
Compare this certificationRecent catalog changes
- ISC2updated
Systems Security Certified Practitioner
Systems Security Certified Practitioner: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISC2exam update
Systems Security Certified Practitioner
Systems Security Certified Practitioner: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- 100-125 multiple choice and advanced item types questions, 2-hour time limit, 700 out of 1000 points passing score
- After
- 100–125 items; 120 minutes; multiple choice and advanced items; pass 700/1000. Computerized adaptive testing (CAT).
- ISC2updated
Systems Security Certified Practitioner
Systems Security Certified Practitioner: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISC2updated
Systems Security Certified Practitioner
Systems Security Certified Practitioner: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Not verified
- After
- https://www.isc2.org/certifications/sscp/sscp-certification-exam-outline
- ISC2exam update
Systems Security Certified Practitioner
Systems Security Certified Practitioner: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- In-person at Pearson VUE Testing Centers
- After
- In person at authorized Pearson testing centers.
- ISC2updated
Systems Security Certified Practitioner
Systems Security Certified Practitioner: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- https://www.isc2.org/certifications/sscp
- After
- https://www.isc2.org/certifications/sscp/sscp-certification-exam-outline
- ISC2updated
Systems Security Certified Practitioner
Systems Security Certified Practitioner: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
- ISC2updated
Systems Security Certified Practitioner
Systems Security Certified Practitioner: prerequisites. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- Minimum 1 year full-time experience in 1 or more of the 7 SSCP domains. A post-secondary degree in CS or IT may satisfy up to 1 year.
- After
- Not verified
- ISC2domain change
Systems Security Certified Practitioner
Systems Security Certified Practitioner: skills gained. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.
What changed
- Before
- ** Security Concepts · Access Controls · Risk Identification · Incident Response · Cryptography · Network Security · Systems Security · Application Security · Security Administration · Security Operations · Security Monitoring · Policy Implementation · Infrastructure Security · Data Protection · Vulnerability Management
- After
- Security concepts and practices · Access controls · Risk identification, monitoring and analysis · Incident response and recovery · Cryptography · Network and communications security · Systems and application security