Author: Jon

In cybersecurity, the success of any technical control—from firewall rules to encryption keys—is predicated on clear documentation. Documentation is the administrative control (Domain 1) that translates organizational goals into actionable instructions for every employee. For the SSCP, you must understand the hierarchy of security documentation: the top-down structure that moves from broad, philosophical statements to […]

Security isn’t just about preventing hackers; it’s also about preventing disasters. Environmental Controls—a critical component of Physical Security in SSCP Domain 1—are the administrative and technical safeguards designed to protect critical IT assets (like servers and networking gear) from non-malicious threats like fire, flooding, and equipment failure. For the SSCP, you must know how to […]

In cybersecurity, the digital perimeter often gets all the attention, but the simplest breach often starts with a physical lapse. Physical Security—specifically Site Access and Entry Controls—is a critical administrative control (Domain 1) that protects personnel, hardware, and, most importantly, the data stored on those physical assets. For the SSCP, you must understand how to […]

The focus of cybersecurity often lies on digital controls—firewalls and cloud encryption. However, the data stored on physical media (USB drives, backup tapes, hard drives, or even printouts) is often the most vulnerable. Media Protection Procedures are the administrative controls (Domain 1) that dictate how organizations must handle these physical assets to maintain confidentiality and […]

Once an asset has been identified and classified, the security work shifts to managing it through its entire lifespan—and most critically, its death. Asset Lifecycle Management is the administrative control (Domain 1) that ensures security remains consistent from the day an asset is purchased until the day it is securely destroyed. For the SSCP, you […]