SSAP
SANS Security Awareness Professional
SANS Security Awareness Professional
› Quality score
Four-axis SecProve rubric, each 0–10. SecProve editorial assessment — each axis carries a written justification so you can push back on any single call without dismissing the whole score.
› NICE Framework work roles
The NIST NICE work-role IDs this cert maps to. NICCS lookup.
› Core domains covered
The 2 domains this cert is centrally about. Passing the exam demonstrates working knowledge of each.
Reference architectures, control frameworks (NIST SP 800-53, CIS Controls), secure-by-design patterns, threat modeling, trust-boundary design, technology standards.
OWASP Top 10, secure SDLC, SAST/DAST/IAST, API security, code review, DevSecOps.
› Prerequisites
Recommended: 3-5 years of relevant security experience. No formal prerequisite from the issuer.
› Careers that commonly pursue this cert
Prepare for the post-quantum era. Understand quantum threats and lead cryptographic migration efforts.
Senior design role — defines how pillar A components fit together across identity, crypto, network, cloud, and data — and, increasingly, how pillar C bolts into it.
See this cert’s domains highlighted on the interactive map, or compare it against the rest of the catalog.