SSCP Readiness: Security Practice for Practitioners
Signature Course No. 515 — A Signature AI Socratic Coaching Course.
No experience needed — your coach starts where you are.
A New Kind of Learning
Socratic coaching, delivered by an agentic AI coach.
Not a course you watch. An AI coach you work with.
The Lighthouse Coach begins by discovering how you think about the subject, teaches what is missing, and gives you realistic practice before asking you to prove that you can use it. You may test out of concepts you already understand, while capstones turn the learning into a practical plan, decision, conversation, or other real-world result.
The curriculum is deliberately authored; the AI delivers it through coaching. It is not an AI randomly generating lessons.
A coach that teaches by asking — not by lecturing
The Lighthouse Coach is an AI Socratic coach built on Cognosco Learning's SSCP Readiness: Security Practice for Practitioners course, in the Risk, Safety & Compliance category. It does not play videos at you. It holds a conversation: it asks you a question, listens to your answer, names the misconception it hears, affirms what you got right, and asks the next question — the way a great coach works in the room.
Most security failures are not exotic. An account that should have been closed on a leaver's last day is used three months later. A patch that would have closed a known hole sits unapplied because nobody owned the restart window. A log fills with warnings nobody reads until an auditor reads them first. A backup runs every night and has never once been tested. This course exists because employers need people who reliably do the unglamorous things that prevent those failures — and who can prove, under exam conditions, that they know which unglamorous thing a given situation calls for.
It starts at the door. Concept 1 teaches access decisions directly: least privilege stated in who, what verbs, and under what conditions; the model that fits the situation in front of you; separation of duties; and privileged access held as a separate estate. The remaining seventeen concepts give you the practitioner's whole ground — authentication and the access lifecycle, cryptography used as an operator uses it, the network and the endpoint, the logs and the risk call, then operations, the incident, the recovery, and the wider duties.
It works in two movements. First, Module 1 — The Daily Defences: Control, Protect, Watch — work through Concepts 1–9, finishing with The Access-and-Defence Review; then, Module 2 — When It Moves: Operate, Respond, Recover — work through Concepts 10–18, finishing with The Incident-and-Recovery Runbook.
Both capstones produce real artifacts — a working access-and-defence review for the running case's estate: the doors audited, the lifecycle procedure written as it will actually run, cryptography mapped onto the journeys data actually takes, the zones drawn and the watch stated, with the honest remainder signed knowingly; and a complete incident-and-recovery runbook for the same estate: the preparation page, the bad morning run in order, recovery figures the business set with backups actually proved, and the one-page duty card for a deputy at 3 a.m.
The honesty standard is part of the course. Readiness is not a guarantee — no course can promise a pass, and this one does not. The course contains no examination items: every scenario is invented for teaching. Version-specific matters — examination format, domain weightings, and eligibility — are fenced to the course book's Appendix, flagged for checking against the current official outline before you book.
The course is self-paced and always on — roughly 30 minutes per concept, about 9 hours in full, taken in as many sittings as you like. You can type your answers, or talk out loud: the Voice Coach speaks its questions and listens to your spoken replies. Learners who already know the material can test out concept by concept.
SSCP Readiness: Security Practice for Practitioners is part of The Lighthouse Signature Series — the online counterpart to the one-day, in-person learning Cognosco Learning delivers.
Course Facts
One full concept, coached end to end — free: verify your email and we’ll send you a link to start.
Already enrolled? Enter the course →
Diagnose → Learn & Practice → Prove → Capstone
Every learner moves through the same discipline a Cognosco instructor would insist on in the room.
Diagnose
The Coach starts where the course starts: with one system you administer. For a named role on it, can you state — without looking — exactly which verbs that role holds, and where does your certainty run out? Whose access on your estate is widest relative to their actual current work, and how did it get that way? When you grant access, which of the three decisions — who, what verbs, under what conditions — do you most often leave implicit? Every concept opens with three questions that locate where you actually stand, and your answers shape how deeply the Coach works the concept with you. Everyone begins with Module 1 — no skipping the foundations you only think you have.
Learn & Practice
Work each concept in conversation with the Coach — spoken or written — then practice it against realistic situations until it holds up.
Prove
Every concept ends in proof: answer the check cold and demonstrate the skill. Know it already? Test out and take credit immediately.
Capstone
Finish with two capstones — The Access-and-Defence Review for Module 1 and The Incident-and-Recovery Runbook for Module 2 — that pull the whole course together, and earn the certificate.
What You'll Learn
Least privilege is a daily habit. Every grant in this course — and every examination scenario — is stated the same way: who holds which verbs, on which objects, under what conditions, until when. Making that statement exactly, and repairing it where it has drifted, is the habit every concept practices from a different angle.
Module 1 builds the daily defences. Access decisions and the models that encode them; identity proved soundly; the lifecycle that keeps grants matched to real work; cryptography chosen as an operator chooses it and placed where data travels and rests; the network zoned, filtered, and watched; systems hardened and patched on a rhythm priced by risk; the logs read with judgment; and risk called at the workbench — likelihood, impact, and the next fix first.
Module 2 works the days the defences are tested. Operations and change kept honest by the record; the incident run in its proper order; recovery proved against numbers the business set; wireless and remote access fenced by the trio every route must answer; application flaws judged by their blast radius; cloud responsibility drawn where the contract actually puts it; locks, badges, and people; privacy, law, and the professional code; and the whole practitioner integrated under pressure.
And it holds its altitude throughout. This is the practitioner's credential, written entirely at the operator's altitude — operate, notice, prioritise, contain, escalate, and document. Where a decision belongs above you, the skill taught here is bringing the right evidence to its owner, quickly and in a form they can act on.
What you will learn
- Decide access the practitioner's way: least privilege, need to know, and the model that fits the situation in front of you
- Prove identity soundly: authentication factors, sound credential handling, and the full joiner–mover–leaver lifecycle
- Use cryptography as an operator: choose the right primitive for confidentiality, integrity, and proof of origin, and handle keys without creating the breach yourself
- Defend the network you operate: segmentation, filtering, detection, and secure remote and wireless access
- Harden and maintain the systems in your care: baselines, patching, malware defence, and change you can account for
- Watch the estate and judge risk at working level: logging, monitoring, alert triage, and prioritisation by likelihood and impact
- Run an incident and a recovery: prepare, detect, contain, eradicate, restore, and learn — with backups you have actually tested
- Meet the practitioner's wider duties: application flaws, cloud shared responsibility, physical and personnel security, privacy, law, and the professional code — and integrate all of it under pressure
Everything in the course
- All 18 concepts of SSCP Readiness: Security Practice for Practitioners, in 2 modules
- A starting-point check first — the Coach finds where you actually stand before teaching
- Learn, Practice, Prove for every concept — no passive video watching
- A test-out on every concept: prove you know it and move on
- The Voice Coach: talk with the Coach out loud — it speaks, listens, and replies
- A personal Learner Record of your work across the course
- Two capstone exercises: The Access-and-Defence Review and The Incident-and-Recovery Runbook
- A printable session summary whenever you pause
- The Lighthouse Coach completion certificate (Signature Series)
- Your progress is saved as you go — stop anytime, resume where you left off
Built for practitioners who operate security day to day
Working administrators, analysts, and support engineers with hands-on security duties who are preparing for the SSCP and want readiness built on judgment, not on memorised lists; and IT generalists moving toward a security role, who already touch access, patching, backups, and user support and need those duties organised into the exam's way of seeing them.
Practitioners early in a security career — the exam's natural candidate pool — who want a first credential that certifies what they actually do at the console and on the floor; and managers of small estates with no dedicated security team, where the practitioner is also the whole department some days.
Not for candidates preparing for a management- or architecture-level credential instead — that is a different altitude and a different book. This course assumes you can find your way around ordinary systems administration; it does not assume security specialisation or any prior credential.
Prefer to learn live and in person? The same material anchors Cognosco's one-day programs — browse the in-person catalog.
Start with Access Decisions
$195 — introductory price. One payment. No subscription, no password to manage.
Here is exactly what happens when you enroll:
- Pay securely with Stripe — you are taken straight into the course
- Create your learner profile and begin the Module 1 starting-point check
- Save the access key you are given — it restores your enrollment on any device
- Learn at your pace; your progress is stored in your browser on your device
For the full voice experience, use Chrome and allow the microphone when asked. Typing your answers works everywhere, all the time. Questions before you enroll? Email hello@cognoscolearning.com.
Before you enroll
What is a Socratic coaching session?
A conversation, not a video. Your coach asks a question; you answer — out loud by voice, or by typing — and the coach responds to what you said: naming the misconception it hears, affirming what you got right, and asking the next question. You advance only when you have mastered each concept, so a finished course means the learning held.
How long does it take — and how long do I have?
About 30 minutes per concept. Learn in sittings of any length; your progress is saved as you go. You have a full year from purchase to finish, and you can revisit and retake within that year.
What does the certificate verify?
That you completed every concept and both capstones of this course. Anyone can confirm a Cognosco certificate online — enter its certificate ID on our verification page.
What if it isn't for me — what are the refunds?
If you have not started, cancel for a full refund within seven days of purchase. Once you have started, there is no cash refund — stop before finishing and we credit the full amount you paid toward any other course in the library (credit valid one year from your original purchase). Once you complete the course, no refund or credit applies.
More Signature Courses are coming
SSCP Readiness: Security Practice for Practitioners is Signature Course No. 515. Leave your email and we'll send you news of future Signature Courses and Lighthouse updates as they are announced — nothing else.