Certification Summary: For individuals involved in network and systems security administratration who are responsible for developing the information security policies, standards, and procedures and managing their implementation across various hardware and software programs in their organization.
Initial requirements: Must pass the SSCP Certification examination ($469) which consists of 125 multiple-choice questions in the areas of Access Controls, Administration, Audit and Monitoring, Risk, Response and Recovery, Cryptography, Data Communications, and Malicious Code/Malware. Candidates must also subscribe to the (ISC)2 Code of Ethics and have at least 1 year of cumulative work experience in one or more of the seven test domains in information systems [IS] security.
In June 2003, an Associate program was added that makes it possible to sit for the exam and receive associate status even if you don't meet the experience requirement yet, and become certified when you do gain the experience. See the (ISC)2 Web site for details.
Continuing requirements:
Recertification is required every 3 years, with on-going requirements for maintaining your credentials in good standing. This is primarily accomplished through continuing professional education [CPE] and the earning of 60 CPE credits every three years. There is also an annual maintenance fee of $65 per year.