CATALOGUECOURSESSANS Security Awareness Professional (SSAP)
    GRC Compliance Certification
    [ liaison ]

    "The SANS Security Awareness Professional, or SSAP, is an industry-leading credential focused entirely on mitigating human-centric cyber risks. It combines core principles of behavioral science, strategic marketing, and organizational change management to help security leaders design, implement, and measure high-impact awareness programs. Optimized for enterprise environments, the SSAP empowers professionals to drive secure behaviors, establish robust security cultures, and demonstrate clear return on investment to executive leadership through data-driven metrics."

    The SANS Security Awareness Professional (SSAP) course is a premier, intelligence-grade training program designed to tackle the human element of cybersecurity. This course rigorously equips cybersecurity leaders, awareness officers, and corporate communicators with advanced methodologies rooted in behavioral science, organizational change management, and targeted marketing. Candidates learn to architect, deploy, and govern mature security awareness programs that demonstrably reduce human risk, establish resilient security cultures, and align seamlessly with strategic enterprise objectives. By synthesizing quantitative metrics with qualitative cultural assessments, professionals are empowered to transform end-users from potential liabilities into active defensive assets.

    [01] Verify Your Readiness

    Deploy into hands-on sandbox simulations mapped directly to SANS Security Awareness Professional (SSAP) objectives. Verify your readiness under real-world conditions:

    Verification Available

    Insider Threat Protocol Overhaul

    ID: SECM-5004Deploy
    Verification Available

    Lateral Movement at Arctos ClearVault

    ID: SECM-2187Deploy
    Verification Available

    Aegis Lock: The Human Element

    ID: SECM-3819Deploy

    [ EDITORIAL_INDEPENDENCE_NOTICE ]

    SecNav is not a commercial partner for this course. We do not receive compensation, referral commissions, or affiliate fees from SANS/GIAC for indexing this credential. We map this path purely for its educational merit and alignment with career progression.

    PROVIDER_INTEL

    [02] Skills Validated by This Certification

    The SANS Security Awareness Professional (SSAP) curriculum tests and measures critical capabilities across these essential governance, risk & compliance (GRC) skills. Explore the dedicated skills nodes below:

    Security Awareness Program Design

    liaison

    Change Management (Security)

    soft_skills

    Social Engineering (Phishing)

    cyber

    [03] Career Pathways & Target Roles

    Securing a verified status in SANS Security Awareness Professional (SSAP) is a high-value accelerator for major compliance & GRC career paths. Learn more about the primary roles mapping to this pathway:

    No linked career roles in telemetry

    [04] Frequently Asked Questions about SANS Security Awareness Professional (SSAP)

    Yes, absolutely! You can verify your real-world readiness by launching the following active-threat sandbox simulations on our platform: Insider Threat Protocol Overhaul, Lateral Movement at Arctos ClearVault, Aegis Lock: The Human Element. Completing these sandboxes grants cryptographically signed proof and reward XP.
    The SSAP validates expertise in human risk management, the application of behavioral science to cybersecurity, security culture transformation, and the strategic design of measurable, enterprise-wide security awareness programs.
    Ideal candidates include Security Awareness Officers, Chief Information Security Officers (CISOs), risk managers, and professionals in Human Resources or Corporate Communications who are tasked with driving secure behaviors and compliance across an organization.
    The curriculum emphasizes the use of both quantitative and qualitative metrics, such as phishing simulation resilience rates, incident reporting frequency, and security culture surveys, to demonstrate program ROI, maturity, and compliance to stakeholders.

    [05] Authoritative Sources & Certification References

    Certifying Body & Official Resources

    Official Registration URLDirect Link
    https://www.giac.org/
    NICE Framework ReferenceOV-TEA-001 (Training, Education, and Awareness)
    Official Link
    SHRM BASK ReferenceLeadership & Navigation / Change Management
    Official Link