Blog Post
Validate critical information security skills with our new Certification
Like others have already said in the comments, existing holders should simply be grandfathered from SC-400 into SC-401 and catch up on any new or different content through the renewal process. Anything other than that is just robbery and doesn't make sense. I'll re-echo.
So, what has changed from what we already know? Lets see...
sc-400 -Skills measured
- Implement information protection
- Implement DLP
- Implement data lifecycle and records management
- Monitor and investigate data and activities by using Microsoft Purview
- Manage insider and privacy risk in Microsoft 365
sc-401 - Skills measured
- Implementing information protection.
- Implementing data loss prevention and retention.
- Managing risks, alerts, and activities.
Again, what changed?
Nothing! Instead, some learning objectives are simply being removed. Does this warrant spending more money to resit an exam you already passed, though this time it's technically simpler than the exam you previously passed? NO!
PLEASE DO SOMETHING ABOUT THIS!!!
- palnikJul 11, 2025MCTThis exactly. Current certification holders should be eligible for either the renewal/upgrade assessment (as in ye olde days) or be granted the new certification. If not it should be explained in more detail what exactly (except for $$$) requires taking the new exam. 
- MarkpriviniusJun 27, 2025Copper ContributorThis!! This is the only right way for them to fix this!