CISSP vs SSCP
SSCP and CISSP are both ISC2 certifications. SSCP is aimed at hands-on practitioners who implement, monitor and administer security infrastructure and needs one year of experience. CISSP is aimed at experienced practitioners, managers and executives and needs five.
Side by Side
| CISSP | SSCP | |
|---|---|---|
| Full name | Certified Information Systems Security Professional | Systems Security Certified Practitioner |
| Issuer | ISC2 | ISC2 |
| Level | Advanced | Intermediate |
| Exam type | Computerized adaptive | Computerized adaptive |
| Questions | 100-150 | 100-125 |
| Duration | 3 hours | 2 hours |
| Passing score | 700 out of 1000 points | 700 out of 1000 points |
| Exam fee | $749 | $249 |
| Prerequisites | Five years of cumulative, full-time work experience in two or more of the eight CISSP domains. A relevant degree or one credential from the ISC2 approved list can waive one year, and only one waiver applies. Candidates without the experience can pass the exam and become an Associate of ISC2, with six years to earn the five years of experience. | One year of full-time experience in one or more of the seven SSCP domains. A relevant bachelor's or master's degree can satisfy that year. Candidates without it can pass the exam and hold Associate of ISC2 status for up to two years. |
| Validity | 3 years | 3 years |
| Renewal | 120 CPE credits per three-year cycle (at least 90 Group A, the rest Group A or B) plus a U.S. $135 annual maintenance fee. | 60 CPE credits per three-year cycle (45 Group A, 15 Group A or B) and a U.S. $135 annual maintenance fee. |
| Exam domains | Security and Risk Management; Asset Security; Security Architecture and Engineering; Communication and Network Security; Identity and Access Management (IAM); Security Assessment and Testing; Security Operations; Software Development Security | Security Concepts and Practices; Access Controls; Risk Identification, Monitoring and Analysis; Incident Response and Recovery; Cryptography; Network and Communications Security; Systems and Application Security |
Main Differences
- +Experience: SSCP needs one year in one or more of its seven domains. CISSP needs five years in two or more of its eight domains.
- +Exam: SSCP is an adaptive test with 100 to 125 questions in 2 hours. CISSP is adaptive with 100 to 150 questions in 3 hours. Both pass at 700 out of 1000.
- +Cost: ISC2 lists the SSCP exam at U.S. $249 and the CISSP exam at U.S. $749 for standard registration in the Americas.
- +Renewal: SSCP requires 60 CPE credits per three-year cycle and CISSP 120. ISC2 charges one $135 annual maintenance fee per member, so holding both does not add a second fee.
Certification Details
Frequently Asked Questions
Is SSCP a prerequisite for CISSP?→
No. CISSP has no certification prerequisite, only five years of experience in two or more of its eight domains. The SSCP is on the ISC2 approved list that can waive one of those years.
Can you take SSCP without experience?→
Yes. Candidates who pass without the one year of experience can hold Associate of ISC2 status for up to two years while they earn it.
Sources
- CISSP Certification Exam Outline
- SSCP Certification Exam Outline
- CISSP Experience Requirements
- ISC2 Exam Pricing
- ISC2 Member Policies (CPE requirements)
- ISC2 Annual Maintenance Fees (AMF)
- Become an Associate of ISC2
- CISSP - Certified Information Systems Security Professional
- CISSP Experience Waiver Updates
- CISSP Exam Refresh FAQ
- ISC2 Certification Maintenance Handbook
- SSCP - Systems Security Certified Practitioner
- ISC2 Cybersecurity Certifications
Exam details come from official issuer pages and are listed in the sources above. Fees and exam versions change; confirm with the issuer before registering.