Sscp

just some info i thought I should add on retrospect for those that are unsure about the above.

Here is an extract from the ISC2 Web Site:

SSCP Certification was designed to recognize an international standard for practitioners of information security [IS] and understanding of a Common Body of Knowledge (CBK). It focuses on practices, roles and responsibilities as defined by experts from major IS industries. Certification can enhance an IS career and provide added credibility.

SSCP Exam Structure
The SSCP Certification examination consists of 125 multiple-choice questions. Candidates have up to 3 hours to complete the examination. Seven SSCP information systems security test domains are covered in the examination pertaining to the Common Body of Knowledge:

Access Controls
Administration
Audit and Monitoring
Risk, Response and Recovery
Cryptography
Data Communications
Malicious Code/Malware

For further detail regarding SSCP Certification, please refer to the SSCP White Paper posted on the ISC2 web site at:
http://www.isc2.org/cgi-bin/content.cgi?page=34

..............and a post of another in relation to...

Over the past several months, among other things, I have spent significant time in preparing for the SSCP exam. The SSCP CBK covers much of the same content as the CISSP, albeit with a more technical focus. See the ISC2 study guides. On Aug 9, I sat for the SSCP exam and await the results.

Based on my experience in everyday project life, exam preparation, and examination, the SSCP credential should become increasingly more recognized for the respectable value that it is. Few, if any, other mid-level(not fundamental or basic) credentials offer both recognition of one's mastery of the CBK areas and offer that recognition from ISC2.

As one who must design and implement network architectures and portals, mastery of that which is covered by the SSCP CBK is essential. The CBK domains are "right on" when it comes to the real-life issues of doing this type of work.

Lastly, the SSCP CBK excels on the practical and implementation side of things. Where SANS topical certifications are good for their respective areas, the SSCP is up a level requiring the candidate to be able to correlate the interoperability requirements and issues related to infosec implementations. The SSCP study guide domain introductions highlight some of these areas. There is room for both SANS and ISC2 credentials, and I would highly recommend that any senior administrator/consultant work to achieve the SSCP certification from the ISC2.

Being a CISSP, i can tell you the SSCP and CISSP are vastly different. The CISSP exam is 6 hours long, the SSCP is 1.5 hours. There are 250 questions on the CISSP exam, only 125-150 on the SSCP. The requirements for taking the CISSP exam are also increasing. Currently you need 3 years experience or more in at least one of the 10 domains and a Degree, or 4 years experience in one or more of the 10 Domains. After passing you may also be audited to prove you have the experience you say you have and you will also have to get sponsored by another CISSP or professional body. For 2004 the requirements are going up.

The Associate program is for people who don't have the experience yet but would like to sit the exam. The do not qualify for the cert until they make up the requirements, they are also subjected to audits. In addition to all these you must earn 120 CPEs, Continuing Professional Education points, if you don't meet these you lose the cert.

There are also three additional concentrations, ISSEP, ISSAP and ISSMP, you need your CISSP before you can even sit these exams. I sat the ISSEP a few weeks ago, fingers crossed