topic Re: SSCP Exam in Exam Preparation

SSCP Exam

mralvinli — Tue, 11 Jun 2019 17:54:52 GMT

Hi guys,

I am new to the ISC2 Scene. I am currently a college student taking cybersecurity courses and was wondering during my path or after graduation would I be able to qualify to take the SSCP exam or would I still need to have that required 1 year job experience first?

Thank you!

Re: SSCP Exam

emb021 — Tue, 11 Jun 2019 20:35:30 GMT

You can take any of the exams without having the experience. It's not a prerequisite.

But if you want the certification, you'll need the experience for that. If you can't provide proof of experience within 9 months of taking the exam, you can apply for Associate of ISC2 status. This allows you to maintain that passing score until you gain the experience. But there is a limit that you must do so within the experience requirement plus one year. (ie, the CISSP requires 5 years experience, so you have 6 years to get it).

Now, you could get the experience while at school. For myself, I actually worked as a sysadmin for the school while I was getting my degrees.

Re: SSCP Exam

mralvinli — Tue, 11 Jun 2019 20:41:05 GMT

I see. I already work as a security specialist. But my work is very minimal. As I don't work in a soc or anything. I just work at a infrastructure.

Re: SSCP Exam

dcontesti — Tue, 11 Jun 2019 21:27:10 GMT

@mralvinli wrote:
Hi guys,
I am new to the ISC2 Scene. I am currently a college student taking cybersecurity courses and was wondering during my path or after graduation would I be able to qualify to take the SSCP exam or would I still need to have that required 1 year job experience first?

Thank you!

From (ISC)2's website:

Experience Required:

Candidates must have a minimum of one year of cumulative work experience in one or more of the seven domains of the SSCP Common Body of Knowledge (CBK).
A one-year experience waiver will be granted for a candidate who received a degree (bachelors or masters) in a cybersecurity program.

This information can be located on:

https://www.isc2.org/certifications

So you may be able to get a waiver for your college degree.

Regards

Diana

Re: SSCP Exam

emb021 — Wed, 12 Jun 2019 14:37:25 GMT

You don't have to work in a SOC.

I suggest you download the free Guide to the SSCP.

You need to have experience in ONE of seven domains:

Domain 1. Access Controls
Domain 2. Security Operations and Administration
Domain 3. Risk Identification, Monitoring and Analysis
Domain 4. Incident Response and Recovery
Domain 5. Cryptography
Domain 6. Network and Communications Security
Domain 7. Systems and Application Security

So you may be doing this as part of your infrastructure work. Even as a sysadmin, I was doing some of the above such as access control, system security, etc.

Re: SSCP Exam

ShadowPunch07 — Mon, 12 Aug 2019 04:11:05 GMT

Yes you still qualify for taking the exam! Even without the one year, if you take the exam and pass, you can still work up to the one year to make it official and receive the certification. It's not let they cannot allow you to take the exam anyway. Also, if you want to join my study group for SSCP, just PM me.

Re: SSCP Exam

ShadowPunch07 — Mon, 12 Aug 2019 04:18:47 GMT

Wow!!! I couldn't have said it better myself!!! Thank you for your post!! It is very clear and correct.

Re: SSCP Exam

mralvinli — Mon, 12 Aug 2019 04:55:44 GMT

I would love to join your study group! I've also paid for the courses in coursera as well.

Re: SSCP Exam

ShadowPunch07 — Tue, 13 Aug 2019 22:05:19 GMT

Hey I will. Check your inbox!!

Re: SSCP Exam

vinpai1976 — Thu, 13 Apr 2023 19:10:32 GMT

i have a network security diploma i want to get into cyber security what certification should i start with to get a job and start my journey in cyber security.

Re: SSCP Exam

denbesten — Fri, 14 Apr 2023 03:52:42 GMT

@vinpai1976 wrote:
i have a network security diploma i want to get into cyber security what certification should i start with to get a job and start my journey in cyber security.

Sounds like you need a resume, not another cert,

Re: SSCP Exam

vinpai1976 — Fri, 14 Apr 2023 14:09:18 GMT

I live in calgary alberta and all the employers are asking for experience and how can you gain experience if you dont jave a job in cyber security

Re: SSCP Exam

denbesten — Fri, 14 Apr 2023 19:32:22 GMT

@vinpai1976 wrote:
...all the employers are asking for experience...

Don't let that stop you from applying. Employers ask for the moon and accept what they can get.

Also, realize that any IT job has cybersecurity involvement. The job title is not the important bit. Reflect on the jobs you have had in light of the knowledge you gained in studying/passing the CC. There may be hidden experience which you can (and should) highlight.

As you hunt for this job, focus more on the "network" part, for which your degree prepared you. Once you get a foot in the door, the day-to-day interactions with other teams will naturally turn into experience that you will make it easier to later get the dream job.

If not too late, see if your school participates in internship programs. My employer uses them quite extensively, and it is extremely common for one of our prior interns to later apply for and get a job with us. As you are using an internship to try out "my specialty", I am measuring how well you would "fit in" to our organization. Even if you apply to someone else's team, you can be sure they will reach out for my opinion.

Finally, I would not bother taking any exam for which you do not yet have the experience to become certified. Gaining the "real world experience" will do much more to guide your studies than any textbook ever could. Plus, it saves on annual maintenance fees.

Re: SSCP Exam

emb021 — Fri, 14 Apr 2023 20:02:18 GMT

Would agree with denbesten's advise.

Leverage what you'd done in IT to get into cybersecurity. I went from being a sysadmin, where I was already doing a lot of infosec stuff (hardening systems, patching systems, managing access, etc) to doing infosec work full time.

Also on networking, get involved with local infosec groups (local chapters of ISSA, ISC2, Infragard [US only], or local groups], go to local infosec conference like BSides (was at BSides Tampa recently that had 1100+ people there, including a lot of students and those wanting to get into the field. they had one track of talks JUST on career stuff). this way you can network with your peers (or future peers), which can lead to a job. This can help you get around the "HR gatekeepers" and get infront of the hiring managers.

Re: SSCP Exam

emb021 — Fri, 14 Apr 2023 20:04:05 GMT

You'll still need experience.

You're best bet at this point is to get a cert that doesn't require experience like ISC2's new CC cert, maybe CompTIA's Sec+ and Net+.

Also, see my response regarding networking within the community. Most professional associations have special rates for college students to join.