CSSLP.AO2

Certified Secure Software Lifecycle Professional (CSSLP) Course

Enhance your software development skills to book your spot in the top management positions.

20 Lecciones interactivas y 128 topics mapped to the official exam objectives
538 Preguntas del examen de práctica y 2 Pruebas completas

Expert A tu propio ritmo · 1 año de acceso

20Lecciones interactivas

128Topics

538Preguntas del examen de práctica

246Tarjetas didácticas

246Glosario de términos

01 / Habilidades que obtendrás

What you will be able to do

Try Free → No se requiere tarjeta de crédito

Data is the new oil, which is why protecting your software isn't just a task, it's a necessity now! So join our CSSLP certification course to learn, strategize, and apply safety provisions. It provides hands-on training with tools built to tackle security challenges presented at every step of the software development cycle (SDLC).

Gain the skills to protect your software from possible risks and errors. Warm up, plan, design, and maintain secure coding practices using our interactive labs, and gamify your learning with 447+ assessment exercises to ace your CSSLP exam.

By the end of this practice course, you'll be ready to pour developed insights into SDLC.

It's time to scale up your professional journey to ‘safe’ heights.

Implement safe coding practices in the various stages of SDLC.
Adapt preventive measures like threat modeling to build secure software architecture.
Gain tools to develop secure software design and applications.
Prevent General Programming and other failures with secure coding practices.
Classify CWE/SANS and OWASP Vulnerability Categories to avoid security risks.
Develop a keen understanding of countermeasures to avoid losses to organizations caused by security breaches.
Implement security controls with techniques such as the Build environment, Anti-tampering, and Defensive Coding.
Become a risk management business partner.

Course Highlights

20 Lecciones estructuradas Cobertura completa de los objetivos principales del curso
538 Preguntas de práctica Pruebas de evaluación con justificaciones de respuesta detalladas
1 año de acceso completo Aprendizaje a tu propio ritmo, accesible en cualquier momento y en todos los dispositivos

02 / Lecciones y laboratorios

See exactly what you will learn and practice

Descargar esquema (PDF)

Plan de estudios

20 Lecciones interactivas · 128 topics

01 Introduction 6 topics

Why Focus on Software Development?
The Role of CSSLP
How to Use This Course
The Examination
Exam Objective Map
CSSLP Version 3 (2020)

02 Core Concepts 10 topics

Confidentiality
Integrity
Availability
Authentication
Authorization
Accountability (Auditing and Logging)
Nonrepudiation
Secure Development Lifecycle
Secure Development Lifecycle Components
Lesson Review

03 Security Design Principles 5 topics

System Tenets
Secure Design Tenets
Security Models
Adversaries
Lesson Review

04 Define Software Security Requirements 4 topics

Functional Requirements
Operational and Deployment Requirements
Connecting the Dots
Lesson Review

05 Identify and Analyze Compliance Requirements 4 topics

Regulations and Compliance
Data Classification
Privacy
Lesson Review

06 Misuse and Abuse Cases 4 topics

Misuse/Abuse Cases
Requirements Traceability Matrix
Software Acquisition
Lesson Review

07 Secure Software Architecture 3 topics

Perform Threat Modeling
Define the Security Architecture
Lesson Review

08 Secure Software Design 9 topics

Performing Secure Interface Design
Performing Architectural Risk Assessment
Model (Nonfunctional) Security Properties and Constraints
Model and Classify Data
Evaluate and Select Reusable Secure Design
Perform Security Architecture and Design Review
Define Secure Operational Architecture
Use Secure Architecture and Design Principles, Patterns, and Tools
Lesson Review

09 Secure Coding Practices 13 topics

Declarative vs. Imperative Security
Memory Management
Error Handling
Interface Coding
Primary Mitigations
Learning from Past Mistakes
Secure Design Principles
Interconnectivity
Cryptographic Failures
Input Validation Failures
General Programming Failures
Technology Solutions
Lesson Review

10 Analyze Code for Security Risks 8 topics

Code Analysis (Static and Dynamic)
Code/Peer Review
Code Review Objectives
Additional Sources of Vulnerability Information
CWE/SANS Top 25 Vulnerability Categories
OWASP Vulnerability Categories
Common Vulnerabilities and Countermeasures
Lesson Review

11 Implement Security Controls 8 topics

Security Risks
Implement Security Controls
Applying Security via the Build Environment
Anti-tampering Techniques
Defensive Coding Techniques
Primary Mitigations
Secure Integration of Components
Lesson Review

12 Security Test Cases 5 topics

Security Test Cases
Attack Surface Evaluation
Penetration Testing
Common Methods
Lesson Review

13 Security Testing Strategy and Plan 8 topics

Develop a Security Testing Strategy and a Plan
Functional Security Testing
Nonfunctional Security Testing
Testing Techniques
Environment
Standards
Crowd Sourcing
Lesson Review

14 Software Testing and Acceptance 6 topics

Perform Verification and Validation Testing
Identify Undocumented Functionality
Analyze Security Implications of Test Results
Classify and Track Security Errors
Secure Test Data
Lesson Review

15 Secure Configuration and Version Control 9 topics

Secure Configuration and Version Control
Define Strategy and Roadmap
Manage Security Within a Software Development Methodology
Identify Security Standards and Frameworks
Define and Develop Security Documentation
Develop Security Metrics
Decommission Software
Report Security Status
Lesson Review

16 Software Risk Management 4 topics

Incorporate Integrated Risk Management
Promote Security Culture in Software Development
Implement Continuous Improvement
Lesson Review

17 Secure Software Deployment 6 topics

Perform Operational Risk Analysis
Release Software Securely
Securely Store and Manage Security Data
Ensure Secure Installation
Perform Post-Deployment Security Testing
Lesson Review

18 Secure Software Operations and Maintenance 9 topics

Obtain Security Approval to Operate
Perform Information Security Continuous Monitoring
Support Incident Response
Perform Patch Management
Perform Vulnerability Management
Runtime Protection
Support Continuity of Operations
Integrate Service Level Objectives and Service Level Agreements
Lesson Review

19 Software Supply Chain Risk Management 4 topics

Implement Software Supply Chain Risk Management
Analyze Security of Third-Party Software
Verify Pedigree and Provenance
Lesson Review

20 Supplier Security Requirements 3 topics

Ensure Supplier Security Requirements in the Acquisition Process
Support Contractual Requirements
Lesson Review

03 / Detalles del examen

Certified Secure Software Lifecycle Professional (CSSLP) Course Detalles

Vayamos al núcleo del examen de Profesional Certificado en Ciclo de Vida de Software Seguro (CSSLP). Consta de 125 preguntas de opción múltiple. Aquí tienes algunos consejos vitales para el examen: presta mucha...

Objetivos oficiales del examen →

Questions 125 (por examen)

Duration 180 minutos (por examen)

Passing Score 700 (en una escala de 1000)

Exam Fee 599 (por examen)

Delivered by Pearson VUE (presencial u online)

Question Format MCQs opción única/múltiple, basado en el desempeño

Exámenes de práctica 538 Preguntas de práctica (alineado con los objetivos oficiales del examen)

Certificación CSSLP.AO2 (ISC)² credencial

¿Listo para presentar el examen?

Agrega tu CSSLP.AO2 bono de examen oficial a tu pedido.

Bono oficial · Entrega rápida · Paquete de repetición disponible

Agregar bono de examen →

El bono de examen se vende por separado y no está incluido en el curso estándar.

04 / Preguntas frecuentes

Preguntas antes de empezar

Contáctanos ↗

What is the CSSLP certification?

CSSLP (Certified Secure Software Lifecycle Professional) is an advanced-level certification availed by software professionals working on the SDLC for career advancement and high-paying roles in cybersecurity.

What are the eligibility criteria for CSSLP certification?

To become a certified secure software lifecycle professional, you must fulfill one of the following criteria:

4 years of paid/full-time (including part-time work & internships) security experience in one or more domains covered in the CSSLP exam.
Bachelors/ Masters in computer science, information technology (IT), and other related fields with 3 years of Paid/full-time relevant experience in secure programming.

Who should take the CSSLP certification course?

The CSSLP training course is ideal for:

Candidates appearing for the CSSLP certification exam.
Software architects, engineers, and developers.
Cybersecurity Professionals looking for career advancement.

Can the CSSLP prep course help in advancing my career?

Yes, our prep course gives you an edge with interesting practice modules to ace your certification exam which results in landing exciting job opportunities such as:

Security Architect
Penetration tester
Compliance officer
Risk manager

What is the difference between CISSP and CSSLP?

Both certifications are popular among software professionals.

CSSLP takes cybersecurity a step further with special emphasis on the security of the software development cycle (SDCL).
CISSP (Certified Information Systems Security Professional) certification is given to individuals who create, execute, and manage cybersecurity security programs.

Both of these certifications remain widely popular in the field of software development and can accelerate your career growth at an exponential rate.

Upgrade Your Tech Skills

Build a successful career in Software Development

1 año de acceso completo
Certificado de finalización

Comprar ahora — $279.99 Try Free

No se requiere tarjeta de crédito