(ISC)2 Systems Security Certified Practitioner Training in Germany

  • Learn via: Classroom
  • Duration: 5 Days
  • Level: Intermediate
  • Price: From €5,297+VAT
We can host this training at your preferred location. Contact us!

The official (ISC)2 Systems Security Certified Practitioner (SSCP) is the ideal certification for those with proven technical skills and practical, hands-on security knowledge in operational IT roles. It provides confirmation of a practitioner’s ability to implement, monitor and administer IT infrastructure in accordance with information security policies and procedures that ensure data confidentiality, integrity and availability. This course includes, the official courseware and SSCP exam voucher and is taught by an accredited official (ISC)2 trainer.

The broad spectrum of topics included in the SSCP Common Body of Knowledge (CBK) ensure its relevancy across all disciplines in the field of information security.

Successful candidates are competent in the following 7 domains:

1. Access Controls

2. Security Operations and Administration

3. Risk Identification, Monitoring, and Analysis

4. Incident Response and Recovery

5. Cryptography

6. Network and Communications Security

7. Systems and Application Security

Candidates must have a minimum of 1-year cumulative work experience in 1 or more of the 7 domains of the SSCP CBK. A 1-year prerequisite pathway will be granted for candidates who received a degree (bachelors or masters) in a cybersecurity program.

A candidate that doesn’t have the required experience to become an SSCP may become an Associate of (ISC)² by successfully passing the SSCP examination. The Associate of (ISC)² will then have 2 years to earn the 1 year required experience. You can learn more about SSCP experience requirements and how to account for part-time work and internships at www.isc2.org/Certifications/SSCP/experiencerequirements.

Domain 1: Access Controls
1.1 Implement and maintain authentication methods
  • Single/multifactor authentication
  • Single sign-on » Device authentication
  • Federated access
1.2 Support internetwork trust architectures
  • Trust relationships (e.g., 1-way, 2-way, transitive)
  • Extranet
  • Third party connections
1.3 Participate in the identity management lifecycle
  • Authorization » Proofing
  • Provisioning/de-provisioning
  • Maintenance » Entitlement
  • Identity and Access Management (IAM) systems
1.4 Implement access controls
  • Mandatory
  • Non-discretionary
  • Discretionary
  • Role-based
  • Attribute-based
  • Subject-based
  • Object-based
Domain 2: Security Operations and Administration
2.1 Comply with codes of ethics
  • (ISC)² Code of Ethics
  • Organizational code of ethics
2.2 Understand security concepts
  • Confidentiality
  • Integrity
  • Availability
  • Accountability
  • Privacy
  • Non-repudiation
  • Least privilege
  • Separation of duties
2.3 Document, implement, and maintain functional security controls
  • Deterrent controls
  • Preventative controls
  • Detective controls
  • Corrective controls
  • Compensating controls
2.4 Participate in asset management
  • Lifecycle (hardware, software, and data)
  • Hardware inventory
  • Software inventory and licensing
  • Data storage
2.5 Implement security controls and assess compliance
  • Technical controls (e.g., session timeout, password aging)
  • Physical controls (e.g., mantrap, cameras, locks)
  • Administrative controls (e.g., security policies and standards, procedures, baselines)
  • Periodic audit and review
Domain 3: Risk Identification, Monitoring, and Analysis
3.1 Understand the risk management process
  • Risk visibility and reporting (e.g., risk register, sharing threat intelligence, Common Vulnerability Scoring System (CVSS))
  • Risk management concepts (e.g., impact assessments, threat modelling, Business Impact Analysis (BIA))
  • Risk management frameworks (e.g., ISO, NIST)
  • Risk treatment (e.g., accept, transfer, mitigate, avoid, recast)
3.2 Perform security assessment activities
  • Participate in security testing » Interpretation and reporting of scanning and testing results » Remediation validation
  • Audit finding remediation 3.3 Operate and maintain monitoring systems (e.g., continuous monitoring)
  • Events of interest (e.g., anomalies, intrusions, unauthorized changes, compliance monitoring)
  • Logging » Source systems
  • Legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)
3.4 Analyse monitoring results
  • Security baselines and anomalies
  • Visualizations, metrics, and trends (e.g., dashboards, timelines)
  • Event data analysis
  • Document and communicate findings (e.g., escalation)
Domain 4: Incident Response and Recovery
4.1 Support incident lifecycle
  • Preparation
  • Detection, analysis, and escalation
  • Containment » Eradication
  • Recovery
  • Lessons learned/implementation of new countermeasure
4.2 Understand and support forensic investigations
  • Legal and ethical principles
  • Evidence handling (e.g., first responder, triage, chain of custody, preservation of scene)
4.3 Understand and support Business Continuity Plan (BCP) and Disaster Recovery Plan (DRP) activities
  • Emergency response plans and procedures (e.g., information system contingency plan)
  • Interim or alternate processing strategies
  • Restoration planning
  • Backup and redundancy implementation
  • Testing and drills
Domain 5: Cryptography
5.1 Understand fundamental concepts of cryptography
  • Hashing » Salting
  • Symmetric/asymmetric encryption/Elliptic Curve Cryptography (ECC)
  • Non-repudiation (e.g., digital signatures/ certificates, HMAC, audit trail)
  • Encryption algorithms (e.g., AES, RSA)
  • Key strength (e.g., 256, 512, 1024, 2048 bit keys)
  • Cryptographic attacks, cryptanalysis, and counter measures
5.2 Understand reasons and requirements for cryptography
5.3 Understand and support secure protocols
5.4 Understand Public Key Infrastructure (PKI) systems
  • Fundamental key management concepts (e.g., key rotation, key composition, key creation, exchange, revocation, escrow)
  • Web of Trust (WOT) (e.g., PGP, GPG)
  • Hashing
  • Salting
  • Symmetric/asymmetric encryption/Elliptic Curve Cryptography (ECC)
  • Non-repudiation (e.g., digital signatures/ certificates, HMAC, audit trail)
  • Encryption algorithms (e.g., AES, RSA)
  • Key strength (e.g., 256, 512, 1024, 2048 bit keys)
  • Cryptographic attacks, cryptanalysis, and counter measures
  • Confidentiality
  • Integrity and authenticity
  • Data sensitivity (e.g., PII, intellectual property, PHI)
  • Regulatory
  • Services and protocols (e.g., IPSec, TLS, S/MIME, DKIM)
  • Common use cases » Limitations and vulnerabilities
6: Network and Communications Security
6.1 Understand and apply fundamental concepts of networking
  • OSI and TCP/IP models » Network topographies (e.g., ring, star, bus, mesh, tree)
  • Network relationships (e.g., peer to peer, client server)
  • Transmission media types (e.g., fiber, wired, wireless)
  • Commonly used ports and protocols
6.2 Understand network attacks and countermeasures (e.g., DDoS, man-in-the-middle, DNS poisoning)
6.3 Manage network access controls
  • Network access control and monitoring (e.g., remediation, quarantine, admission)
  • Network access control standards and protocols (e.g., IEEE 802.1X, Radius, TACACS)
  • Remote access operation and configuration (e.g., thin client, SSL VPN, IPSec VPN, telework)
6.4 Manage network security
  • Logical and physical placement of network devices (e.g., inline, passive)
  • Segmentation (e.g., physical/logical, data/control plane, VLAN, ACLs)
  • Secure device management
6.5 Operate and configure network-based security devices
  • Firewalls and proxies (e.g., filtering methods) » Network intrusion detection/prevention systems
  • Routers and switches » Traffic-shaping devices (e.g., WAN optimization, load balancing)
6.6 Operate and configure wireless technologies (e.g., bluetooth, NFC, WiFi)
  • Transmission security
  • Wireless security devices (e.g.,WIPS, WIDS)
Domain 7: Systems and Application Security
7.1 Identify and analyze malicious code and activity
  • Malware (e.g., rootkits, spyware, scareware, ransomware, trojans, virus, worms, trapdoors, backdoors, and remote access trojans)
  • Malicious code countermeasures (e.g., scanners, anti-malware, code signing, sandboxing)
  • Malicious activity (e.g., insider threat, data theft, DDoS, botnet)
  • Malicious activity countermeasures (e.g., user awareness, system hardening, patching, sandboxing, isolation)
7.2 Implement and operate endpoint device security
  • HIDS
  • Host-based firewalls
  • Application white listing
  • Endpoint encryption
  • Trusted Platform Module (TPM)
  • Mobile Device Management (MDM) (e.g., COPE, BYOD)
  • Secure browsing (e.g., sandbox)
7.3 Operate and configure cloud security
  • Deployment models (e.g., public, private, hybrid, community)
  • Service models (e.g., IaaS, PaaS and SaaS)
  • Virtualization (e.g., hypervisor) » Legal and regulatory concerns (e.g., privacy, surveillance, data ownership, jurisdiction, eDiscovery)
  • Data storage and transmission (e.g., archiving, recovery, resilience)
  • Third party/outsourcing requirements (e.g., SLA, data portability, data destruction, auditing) » Shared responsibility model
7.4 Operate and secure virtual environments
  • Software-defined networking
  • Hypervisor
  • Virtual appliances
  • Continuity and resilience
  • Attacks and countermeasures
  • Shared storage
Supplementary References
Candidates are encouraged to supplement their education and experience by reviewing relevant resources that pertain to the CBK and identifying areas of
study that may need additional attention. View the full list of supplementary references at www.isc2.org/certifications/References.
Examination Policies and Procedures
QA will provide the delegate with an SSCP exam voucher to be taken post course. (ISC)² recommends that SSCP candidates review exam policies and procedures prior to registering for the examination. Read the comprehensive breakdown of this important information at www.isc2.org/Register-for-Exam.


Contact us for more detail about our trainings and for all other enquiries!

Upcoming Trainings

Join our public courses in our Germany facilities. Private class trainings will be organized at the location of your preference, according to your schedule.

Classroom / Virtual Classroom
19 Mai 2024
Berlin, Hamburg, Münih
5 Days
Classroom / Virtual Classroom
20 Mai 2024
Berlin, Hamburg, Münih
€5,297 +VAT Book Now
Classroom / Virtual Classroom
25 Mai 2024
Berlin, Hamburg, Münih
5 Days
Classroom / Virtual Classroom
03 Juni 2024
Berlin, Hamburg, Münih
5 Days
Classroom / Virtual Classroom
05 Juli 2024
Berlin, Hamburg, Münih
5 Days
Classroom / Virtual Classroom
07 Juli 2024
Berlin, Hamburg, Münih
5 Days
Classroom / Virtual Classroom
12 Juli 2024
Berlin, Hamburg, Münih
5 Days
Classroom / Virtual Classroom
15 Juli 2024
Berlin, Hamburg, Münih
€5,297 +VAT Book Now

Related Trainings

(ISC)2 Systems Security Certified Practitioner Training Course in Germany

The Federal Republic of Germany is the second most populous country in Europe and is located in Central Europe. The official language of the country is German. Germany is one of the richest countries in the world. The main exports of the country include motor vehicles and iron and steel products.

Here are some fun facts about Germany:
The fairy tale writer, the Brothers Grimm, came from Germany and wrote many famous stories such as Cinderella, Snow White, and Sleeping Beauty.
Germany is home to the largest theme park in Europe, the Europa-Park.
The famous composer Ludwig van Beethoven was born in Germany.
The Autobahn, the German highway system, is known for having no general speed limit.


Berlin was divided by the Berlin Wall from 1961 to 1989. Known for its street art, Berlin has many colorful murals and graffiti throughout the city. Also, Berlin is home to many famous museums, such as the Pergamon Museum and the Museum Island. Many clubs and bars stay open until the early hours of the morning in this big city.

Another popular city is Munich, which is famous for its Oktoberfest beer festival that attracts millions of visitors every year. Munich is also home to many historic buildings, including Nymphenburg Palace and the Marienplatz town square.

The country's capital and largest city is Berlin, however Frankfurt is considered to be the business and financial center of Germany. It is home to the Frankfurt Stock Exchange, the European Central Bank, and many other financial institutions. Because of its central location within Europe and its status as a major financial hub, Frankfurt is often referred to as the "Mainhattan," a play on the city's name and its association with the Manhattan financial district in New York City.

Frankfurt is also a major transportation hub, with the largest airport in Germany and one of the largest in Europe, Frankfurt Airport. Additionally, it is a popular destination for tourists, with its historic city center, beautiful parks, and vibrant cultural scene.

Some of the top German technology companies like Siemens AG, Bosch, SAP SE, Deutsche Telekom, Daimler AG and Volkswagen has business centers in Frankfurt. The country has a strong tradition of engineering and innovation, and is home to many other world-class technology companies and research institutions.

Tailored to meet the specific needs of Germany, Bilginç IT Academy combines cutting-edge training methodologies with our comprehensive range of Certification Exam preparation courses and accredited corporate training programs. Experience a transformative approach to IT training that will redefine your expectations.
By using this website you agree to let us use cookies. For further information about our use of cookies, check out our Cookie Policy.