Description
Exam prep for the ISC2 Certified Secure Software Lifecycle Professional (CSSLP) certification. Self-paced preparation covering all eight CSSLP domains, built for developers, architects and security engineers who own security across the software lifecycle rather than at the perimeter.
What this course covers
- Secure software concepts: core security principles, risk management and governance
- Secure software requirements: gathering functional and non-functional security requirements, data classification, privacy
- Secure software architecture and design: threat modeling, design principles, architectural risk assessment
- Secure software implementation: secure coding practices, code analysis, defect tracking, third-party and open-source components
- Secure software testing: test cases for security, penetration testing, fuzzing, verification and validation
- Secure software lifecycle management: release, configuration and change management, risk acceptance
- Secure software deployment, operations and maintenance: hardening, monitoring, incident handling, patching
- Secure software supply chain: supplier risk, SBOM, chain-of-custody and vendor assessment
Who it is for
Software developers, application security engineers, solution and security architects, DevSecOps engineers, and QA leads preparing to sit the ISC2 CSSLP exam.
Important
This is independent exam preparation. It does not issue the CSSLP certification. The certification is awarded by ISC2 after you pass their exam and meet their experience requirements. Course completion earns a Certificate of Completion only.