1. Security Operations and Administration

· Comply with codes of ethics 

· Understand security concepts 

· Identify and implement security controls 

· Document and maintain functional security controls 

· Participate in asset management lifecycle (hardware, software and data) 

· Participate in change management lifecycle 

· Participate in implementing security awareness and training (e.g., social
engineering/phishing) 

· Collaborate with physical security operations (e.g., data center assessment,
badging) 

 2. Access Controls

· Implement and maintain authentication methods 

· Support internetwork trust architectures 

· Participate in the identity management lifecycle 

· Understand and apply access controls 

3. Risk Identification, Monitoring and Analysis   

· Understand the risk management process 

· Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy) 

· Participate in security assessment and vulnerability management activities 

· Operate and monitor security platforms (e.g., continuous monitoring) 

· Analyze monitoring results   

4. Incident Response and Recovery   

· Support incident lifecycle e.g., National Institute of Standards and Technology
(NIST), International Organization for Standardization (ISO) 

· Understand and support forensic investigations 

· Understand and support business continuity plan (BCP) and disaster recovery plan
(DRP) 

5. Cryptography   

· Understand cryptography 

· Apply cryptography concepts 

· Understand and implement secure protocols 

· Understand public key infrastructure (PKI)   

6. Network and Communications Security  

· Understand and apply fundamental concepts of networking 

· Understand network attacks (e.g., distributed denial of service (DDoS), man-in-the-
middle (MITM), Domain Name System (DNS) poisoning) and countermeasures 

· Manage network access controls 

· Manage network security 

· Operate and configure network-based security
devices 

· Secure wireless communications   

7. Systems and Application Security  

· Identify and analyze malicious code and activity 

· Implement and operate endpoint device security 

· Administer Mobile Device Management (MDM) 

· Understand and configure cloud security 

· Operate and maintain secure virtual environments  

1. 5 day interactive instructor-led training 

2. Training provided by highly qualified, certified, and accredited trainers

 3.Systems Security Certified Practitioner (SSCP) Certification course accredited by Authorised Governing Body and Mindbel

4. Certification