JDMurray wrote: » Look at who these two certifications are marketed to. The CISSP is for Information Security professionals with 5+ years working in a wide variety of InfoSec fields, including those related to business and management. The SSCP is targeted to people fresh out of college who only have a year of InfoSec work experience, which is usually only on the technical side. Having the SSCP be mostly for technical topics and the CISSP include business/management domains therefore follows this trend. I have recommended many times here on TE that: 1. If you qualify now for full CISSP certification then you should go directly for it. 2. If you already have the CISSP there is no need to go for the SSCP.