Am I Ready for SSCP? Exam Readiness Checklist (2026)
Tick what you can do today, without notes. The board scores you against the ISC2 outline and says GO, HOLD or NO-GO before you spend US$249 on a booking.
- 100-125 (CAT)Questions
- 2 hoursTime
- 700/1000Pass mark
- US$249Fee
- Pearson VUEDelivery
Table of Contents
SSCP is ISC2's practitioner certification for people who run security day to day: systems and network administrators, SOC analysts and security engineers with about a year of hands-on work. The exam uses computerized adaptive testing (CAT): 100 to 125 items in a two-hour maximum, in English, Japanese or Spanish at Pearson VUE test centres, across seven domains of the outline effective 1 October 2025.
CAT changes what ready means. You cannot skip, flag or go back, the exam can stop at 100 items, and failing to answer the minimum 100 items before time runs out is an automatic fail. So ready is not just knowing access control models and port numbers. It is getting a practical scenario right the first time, at roughly a minute per item, in every one of the seven domains.
How to use this checklist
Tick only what you can do today, without notes. Each tick is weighted by its domain's share of the official outline, so the score follows the exam, not the number of boxes. A heavy domain (15%+ of the weight) at NO-GO holds the verdict even when the total looks fine. Your ticks are saved in this browser only.
The SSCP readiness checklist
23 items across 7 domains, each one a thing the exam expects you to do rather than recognise.
Your go / no-go board
One lamp per domain, one verdict overall. Amber and red rows are your study plan for the next week or two.
Check your ticks under exam conditions
A tick is a claim; a timed set of questions is the evidence. The SSCP app has 1,400+ exam-style SSCP questions with an explanation for every option. Do a mixed set and see whether the domains you ticked hold up.
Google PlayFree SSCP practice testRed flags: don't book yet if...
Any one of these on the SSCP is a better predictor of a fail than a low tick count.
You rely on flagging questions and coming back
SSCP is a CAT exam. ISC2 does not allow item review: once you confirm an answer it cannot be revisited or changed, and every item is chosen based on your previous answers.
Fix:Practise in a no-going-back mode: commit to each answer before moving on and track how often your first instinct was right.
You cannot answer 100 questions comfortably inside two hours
To get a result you must answer at least 75 scored and 25 pretest items before the two-hour maximum. Run out of time before that and ISC2 fails you automatically, and breaks come out of the same clock.
Fix:Time yourself on 100-question sets until you finish in about 100 minutes without rushing the last 20.
Your knowledge is theory only
The outline is written in practitioner verbs: implement, operate, configure, monitor. Scenarios expect you to know what an administrator actually does with a firewall rule, a SIEM alert or a leaver's account.
Fix:Build a small lab (a firewall, a log collector, a directory) and work through access, monitoring and incident tasks by hand.
Your study material predates the October 2025 outline
The current outline took effect on 1 October 2025 and includes items such as securing IoT, endpoint detection and response, mobile device management and AI-related content that ISC2 has woven into each domain.
Fix:Check your book or course against the seven domains and sub-objectives on the current isc2.org outline page.
You have not checked the one-year experience requirement
Full SSCP certification needs one year of full-time experience in one or more domains, which a relevant degree can satisfy. Without it, a pass makes you an Associate of ISC2 with two years to gain the year.
Fix:Decide which route you are on before booking, so the nine-month endorsement deadline after the exam does not catch you out.
The numbers that say you're ready
Rules of thumb, not official thresholds: ISC2 does not publish a readiness score. Hit all four before you pay for a booking.
Rule of thumb, not an ISC2 figure. CAT keeps serving items you have about a 50% chance of getting right, so the exam feels harder than practice; a margin on fresh questions helps.
Rule of thumb. Two hours for up to 125 items is under a minute each, and finishing the first 100 with time to spare protects you from the automatic fail.
Rule of thumb. CAT samples every domain to the outline weights, and failing candidates are shown a proficiency level per domain, so one weak area stands out.
A self-test, not an official measure: for example add a firewall rule, set up MFA, read a SIEM alert, revoke a certificate and disable a leaver's access. If you can do them, scenario items read like your day job.
Booking and ID checklist
The logistics that trip people up are specific to the SSCP and its delivery provider. Work through them in order.
Check the experience route
One year of full-time experience in one or more SSCP domains, or a relevant bachelor's or master's degree in its place. Otherwise a pass makes you an Associate of ISC2.
Set up your ISC2 account
Create or log in to your ISC2 account. The name on the Exam Account Information form must match your ID exactly or you cannot test and the fee is not refunded.
Buy the exam on isc2.org
US$249 in the Americas and APAC, EUR 239.04 in EMEA, GBP 201.69 in the UK, plus local tax. Exam-only purchases must be scheduled and sat within 365 days; Peace of Mind Protection gives two attempts within 180 days.
Request accommodations first
Email the ISC2 accommodation form and documentation to [email protected] before booking with Pearson, then allow two to three business days for Pearson to receive the approval.
Schedule a Pearson VUE test centre
From Courses and Exams in your ISC2 account, click Schedule and pick English, Japanese or Spanish on the Pearson site. SSCP is test-centre only; there is no online option.
Fix any name mismatch
Names can be updated up to 48 hours before the appointment, never at the centre. An ID mismatch is treated as a no-show and the fee is lost.
Reschedule or cancel if needed
Pearson charges US$50 to reschedule and US$100 to cancel, and the appointment cannot be rescheduled inside 24 hours.
Bring two IDs and arrive 30 minutes early
A primary ID with photo and signature plus a secondary ID with signature, both original and unexpired. Expect a palm vein scan; arriving within 15 minutes of start counts as late.
Exam-week countdown: T-7 to T-0
Do a final timed 125-question set with no going back. Spend the week on your two weakest domains, using a lab for network and access control topics.
Confirm the appointment and exam language in both the Pearson and ISC2 dashboards, check both IDs match your registered name, and drill quick sets on ports, crypto and incident order.
No new topics. Pack both IDs, plan to arrive 30 minutes early and bring as little as possible, since test-centre storage is small.
Store every device before the pat-down. Answer each item once and move on at about a minute per question; do not worry if it ends at 100, which is normal for CAT.
Test-day rules
✓ Allowed / expected
- Two original, unexpired IDs: a primary with photo and signature and a secondary with signature
- The erasable note board the test centre issues after check-in
- Earplugs, available on request
- Unscheduled breaks, with a palm vein scan before and after (the two-hour clock keeps running)
✕ Not allowed
- Phones, smartwatches or any electronic device; they must be stored before the pat-down
- Hats, scarves, coats or masks in the testing room
- Going back to change an answer once it is confirmed (CAT does not allow review)
- Leaving the building during a break unless absolutely necessary
- Covert recording devices; since June 2026 Pearson may screen with infrared and metal-detection wands
After you pass
Your result
Because SSCP is a CAT exam, the result is ready as soon as you finish and the proctor gives you the unofficial pass or fail at check-out. ISC2 then emails the official result. No numeric score is shown; failing candidates get diagnostic feedback on the domains where they struggled.
Endorsement or Associate
Complete the certification application within nine months of the exam, endorsed by an ISC2-certified member in good standing or by ISC2 with proof of employment. Review usually takes four to six weeks and some applications are audited. Without the year of experience you can become an Associate of ISC2 and have two years to earn it.
Keeping it current
SSCP runs on a three-year cycle: 60 CPE credits per cycle (at least 45 Group A, the rest Group A or B) plus a single US$135 Annual Maintenance Fee each year. After approval you can claim a Credly badge and digital certificate. Associates pay US$50 a year and earn 15 Group A credits annually.
The SSCP at a glance
| Item | Detail |
|---|---|
| Questions | 100-125 items, computerized adaptive testing (CAT); 25 are unscored pretest items |
| Time | 2 hours maximum |
| Passing score | 700 out of 1000 scaled points |
| Fee | US$249 (Americas, APAC, Middle East, Africa); EUR 239.04 in EMEA; GBP 201.69 in the UK |
| Delivery | Pearson VUE test centres only; English, Japanese or Spanish; no online proctoring |
| Retakes | 30 test-free days after attempt 1, 60 after attempt 2, 90 after attempt 3 and beyond; max 4 attempts in 12 months |
| Results | Pass/fail as soon as the CAT exam ends, given by the proctor at check-out; official result by email |
| Validity and renewal | 3-year cycle; US$135 AMF; 60 CPE credits per cycle (45 Group A plus 15 Group A or B) |
Turn the amber rows green
Work SSCP questions by domain, starting with whatever the board marked HOLD or NO-GO, then tick again.
Google PlayFree SSCP practice testFAQ
Why did my SSCP exam stop at 100 questions?
SSCP uses computerized adaptive testing. Once you have answered the minimum 100 items (75 scored plus 25 unscored pretest items), the exam ends as soon as ISC2's algorithm is 95% confident you are above or below the passing standard. Stopping at 100 can mean a pass or a fail. If that confidence is never reached, the exam runs to 125 items or the two-hour limit.
Can I review or change answers on the SSCP exam?
No. Because each SSCP item is selected based on your previous answers, ISC2 does not permit item review. Once you finalise an answer it cannot be revisited or changed, and there is no way to skip and return later. Practise committing to an answer, reading every option fully the first time, and keeping a steady pace of about one minute per question.
Do I need a year of experience before I sit SSCP?
No. ISC2 does not check experience before the exam. To become fully certified you need one year of full-time experience in one or more SSCP domains, and a relevant bachelor's or master's degree can satisfy that year. If you pass without it, you can become an Associate of ISC2 and have two years to gain the experience.
Can I take SSCP online from home?
No. SSCP is delivered only at Pearson VUE test centres, in English, Japanese or Spanish. ISC2's FAQ says its online proctoring pilots did not meet its exam security standards. Book a centre you can reach easily, bring a primary and a secondary ID, and arrive 30 minutes early for the palm vein scan and check-in process.
What happens if I fail SSCP?
You get diagnostic feedback showing the domains where you struggled, though no numeric score. You can retest after 30 test-free days, then 60 days after a second attempt and 90 days after a third, with a maximum of four attempts in any 12 months. Each attempt is paid separately unless you bought Peace of Mind Protection, which bundles two.
Sources
Figures on this page come from ISC2 and the other primary sources below:
- ISC2 SSCP Certification Exam Outline (effective 1 October 2025)
- ISC2 SSCP certification page
- ISC2 Computerized Adaptive Testing FAQ
- ISC2 exam pricing
- ISC2 After Your Exam (results, endorsement, retake policy)
- ISC2 Exam Day (ID, check-in, test centre rules)
- ISC2 Member Policies (CPE, AMF, Associate time limits)
Checked October 14, 2026. Fees, outlines and eligibility rules change — confirm with ISC2 before you book.