The SSCP credential seems to be the most misunderstood and under appreciated of those certifications offered by (ISC)2. In actuality, it is one of the most critical and essential in the field. This is because the work of the SSCP is where the effectiveness of information security is implemented. Few CISSPs have the technical skills necessary to perform the hands-on implementation of the information security controls that they determine to be necessary to effectively protect the critical and sensitive resources of the organization.
In a mainframe environment, the SSCP role is usually performed by systems programmers assigned to the security department. Otherwise, it would be the responsibility of a system or network administrator ...