Certified Secure Software Lifecycle Professional (CSSLP®)

10 week
141 Lessons
0 Enrolled
(0 Ratings)

Course Overview

Official (ISC)²® Training Seminar for the Certified Secure Software Lifecycle Professional (CSSLP®) provides a comprehensive review of the knowledge required to incorporate security practices – authentication, authorization and auditing – into each phase of the Software Development Lifecycle (SDLC), from software design and implementation to testing and deployment. This training course will help students review and refresh their knowledge and identify areas they need to study for the CSSLP exam. Content aligns with and comprehensively covers the eight domains of the (ISC)² CSSLP Common Body of Knowledge (CBK®).

Official courseware is developed by (ISC)² – creator of the CSSLP CBK  – to ensure your training is relevant and up-to-date. Our instructors are verified security experts who hold the CSSLP and have completed intensive training to teach (ISC)² content. 

Course Objectives

After completing this course, the student will be able to:

  • Discuss the core concepts of software security and the foundational principles that drive construction of resilient software.
  • Discuss the security design principles as essential elements for building secure software.
  • Discuss software security standards and frameworks, roadmaps and strategies and risk management.
  • Explain security in software development methodologies, security metrics and security culture in software development.
  • Identify and analyze software requirements pertaining to data privacy, security and compliance with laws and regulations.
  • Describe requirement specification and tractability, misuse and abuse cases and flow down of security requirements to supplier.
  • Explain secure architecture and design elements and patterns, architectural risk assessment, threat modeling, threat intelligence and attack surface evaluation.
  • Explain security architecture and control identification, prioritization and positioning.
  • Apply secure coding practices, analyze code for security risks and implement security controls.
  • Discuss third-party code and libraries, software composition analysis and security of the build process.
  • Discuss security testing strategy plan and analyze security testing methods.
  • Discuss validation and verification, security test results and tracking security errors.
  • Describe secure software integration and deployment, security data and post-deployment security testing.
  • Recognize various security-relevant maintenance activities and discuss planning for the continuity of operations.
  • Discuss software supply chain risks and analyze security of third-party software.
  • Explain supplier security requirements in the acquisition process and support for contractual requirements.

Features

  • Instruction from an (ISC)2 Authorized Instructor
  • Official (ISC)2 Student Training Guide
  • Chapter quizzes
  • Interactive flash cards to reinforce learning
  • 17 applied scenarios with corresponding activities teaching you how to apply security through the SDLC process.
  • 24 discussions encouraging peer to peer interaction around key topics
  • 7 content specific activities, including 6 case studies
  • 8 end of chapter quizzes with answer explanation to assess comprehension
  • 160 question post course assessment with answer explanation highlighting areas for further study

Target audiences

  • Software developers
  • Engineers and architects
  • Product managers
  • Project managers
  • Software QA
  • QA testers
  • Business analysts
  • Professionals who manage these stakeholders

Curriculum

User Avatar

admin

2 Reviews
51 Students
127 Courses
0.0
0 rating
5 stars
0%
4 stars
0%
3 stars
0%
2 stars
0%
1 stars
0%

Be the first to review “Certified Secure Software Lifecycle Professional (CSSLP®)”

Related Courses

Main Content