SSCP blueprint

SSCP exam domains

The ISC2 blueprint defines 7 domains for Current ISC2 exam outline.

View practice test Certification overview

ProviderISC2

Exam codeSSCP

Exam standardCurrent ISC2 exam outline

Domains7

How to use the exam blueprint

Treat every domain as a required area of competence, then use its linked objectives to define exactly what to learn and practice. Published weights indicate relative exam emphasis, not permission to ignore lower-weight areas.

Prepare by objective and decision

Review the knowledge behind each objective, apply it in scenarios or practical work, and use targeted questions to test the decision being measured. Move to timed simulation only after the complete blueprint has been covered.

16% of blueprint / 1 objectives

Security Operations and Administration

Covers Operate and administer security policies, controls, and processes..

15% of blueprint / 1 objectives

Access Controls

Covers Implement and manage identity and access controls..

15% of blueprint / 1 objectives

Risk Identification, Monitoring, and Analysis

Covers Identify, monitor, analyze, and communicate security risk..

14% of blueprint / 1 objectives

Incident Response and Recovery

Covers Prepare for, respond to, and recover from security incidents..

9% of blueprint / 1 objectives

Cryptography

Covers Apply cryptographic concepts, protocols, and lifecycle practices..

16% of blueprint / 1 objectives

Network and Communications Security

Covers Secure network architectures, communications, and services..

15% of blueprint / 1 objectives

Systems and Application Security

Covers Secure systems, endpoints, applications, and cloud environments..

Review the linked exam objectives.

Each objective page stays scoped to this certification and current exam standard.

View objectives