The Microsoft Certified: Information Protection and Compliance Administrator Associate certification and its associated SC-400 exam will retire on May 31, 2025. This decision marks a shift toward a more modern and comprehensive certification - SC-401 Administering Information Security in Microsoft 365 - designed to address the evolving security landscape.
What's Changing?
The SC-400 exam, long known for validating skills in implementing information protection and compliance solutions in Microsoft 365, is being phased out to make way for a more encompassing credential. Microsoft is introducing the new Microsoft Certified: Information Security Administrator certification, available starting April 2025, with the SC-401 exam as its requirement.
This new certification is tailored for professionals tasked with protecting sensitive data and mitigating threats in Microsoft 365 collaboration environments using Microsoft Purview and other security tools.
Why the Change?
The update aligns Microsoft's certification offerings with today’s broader, risk-centric approach to cybersecurity and data governance. While the SC-400 focused on compliance and data loss prevention, the SC-401 expands coverage to include:
●Planning and implementing comprehensive information security strategies using Microsoft Purview.
●Mitigating internal and external risks across Microsoft 365 environments.
●Responding to information security incidents in collaboration with enterprise stakeholders.
●Addressing emerging threats and complex regulatory requirements with an integrated Microsoft 365 security posture.
Key Dates to Remember
SC-400 retirement: May 31, 2025
Certification renewal for SC-400 ends: May 31, 2025
If you're in the middle of preparing for the SC-400 exam, you should aim to take and pass it before May 31, 2025. If you're just starting out, it's recommended to focus your efforts on the SC-401 exam, which better aligns with current enterprise information security needs.
Next Steps for Candidates
●Already studying for SC-400? You still have time. Passing SC-400 before the retirement date will earn you the current certification, which remains valid for its standard duration.
●Considering a long-term certification path? Start preparing for SC-401, especially if your role involves broader data security management beyond compliance.
The retirement of SC-400 and the launch of SC-401 reflect Microsoft's commitment to keeping certifications relevant and aligned with industry demands. By shifting to the new SC-401 certification, professionals can demonstrate a more robust and forward-looking expertise in securing sensitive data across Microsoft 365 environments.