SSCP for hands-on security operations: requirements, the exam and prep options

By Alexander Shick · Updated November 5, 2026

The practitioner level of ISC2's ladder

ISC2 describes an SSCP as able to “implement, monitor and administer IT infrastructure in accordance with information security policies and procedures.” It sits between the entry-level ISC2 CC and the five-year CISSP. ISC2 aims it at people with a year or more in security operations and lists roles such as network security engineer, systems administrator, security analyst and security administrator.

What ISC2 counts as the one year

Formal eligibility for the exam is open; the year of experience applies to the credential. ISC2 wants one year of full-time work in one or more of the seven SSCP domains, meaning security work or work that applies security knowledge directly. Part-time work and internships count, under the same rules ISC2 applies to CISSP.

A bachelor's or master's degree can satisfy the whole year if it comes from a cybersecurity program or is one of ISC2's preapproved subjects: computer science, computer engineering, computer systems engineering, management information systems or IT. So a graduate in one of those subjects can hold SSCP outright, without the Associate step.

Pass without the year and you become an Associate of ISC2, with two years to earn it. Associates pay $50 a year instead of $135.

Seven SSCP domains in a two-hour adaptive exam

The outline in force since October 1, 2025 sets an adaptive exam of 100 to 125 multiple-choice and advanced items in 2 hours, passed at 700 out of 1,000, in English, Japanese or Spanish at Pearson test centers. TrainACE's course page still describes a three-hour, 125-question exam; that is not the current format.

The weights are nearly even, so a gap in any one area costs you. Administrators who live in access control and networking should put extra hours into risk monitoring, incident response and cryptography.

Study options from ISC2 and others

ISC2 offers a self-paced online course (90-day or 180-day access), a live online class with an ISC2 authorized instructor on full-time or part-time schedules, and in-person classes. Bundles of the self-paced course with the exam are sold on the SSCP page, and ISC2 members pay less for the self-paced course. ISC2's free SSCP Ultimate Guide and self-assessment are worth reading before you pay for anything.

Self-paced study fits most candidates, since the material overlaps with day-to-day admin work. A five-day class from TrainACE or Learning Tree fits people who need dates on a calendar or whose employer is paying.

What SSCP preparation costs

Totals add the $249 exam fee unless the provider includes the voucher.

ISC2's $688 bundle costs the same as buying the $360 course and the $328 two-attempt exam separately. Its value is the second attempt: it costs $79 more than the $609 single-attempt route, against $249 for a full retake. Take it if you want the retake in hand; otherwise price the $609 route. Other charges to plan for: moving an exam date costs $50 and cancelling costs $100, and both Peace of Mind attempts must fall within 180 days of purchase.

What to ask an SSCP training provider

• Which outline does the course follow? TrainACE's page still describes a three-hour, 125-question exam; ask whether its materials cover the October 2025 outline.
• Is a voucher included? Learning Tree and ISC2's bundle include the exam; TrainACE lists courseware only.
• How long is access? ISC2's live class gives 180 days of materials from the first session; its self-paced course comes in 90-day and 180-day versions.
• What if you fail? ISC2's two-attempt option covers a second sitting; TrainACE refers to a “Price & Quality Guarantee”, so ask what it covers.

After you pass: CPE and the yearly fee

ISC2's maintenance handbook sets SSCP at 60 CPE credits per three-year cycle, at least 45 in Group A (activities tied to the SSCP domains), and suggests about 20 a year. The $135 annual maintenance fee is due each year on your certification anniversary and covers every ISC2 certification you hold, so moving up to CISSP later does not add a second fee.

Common questions about SSCP

How much does the SSCP exam cost?

$249 in the Americas as of November 2026, or $328 with a second attempt included.

Can a degree replace the SSCP experience requirement?

Yes. A degree from a cybersecurity program, or in one of ISC2's preapproved subjects such as computer science or IT, can satisfy the full year.

Is SSCP easier than CISSP?

It is shorter and narrower: 2 hours and seven operations-focused domains, against CISSP's 3 hours and eight broader domains, and it needs one year of experience instead of five.

What does SSCP cost each year?

$135 to ISC2 once certified, or $50 as an Associate, plus the CPE credits.

Next step

Send us your current role and target date, and we will suggest an SSCP study route.

Ask for help choosing SSCP training