BUILD TOMORROW.
FOR A MORE
SECURE TOMORROW.
Certified Secure Software Lifecycle Professional (CSSLP)
ISC2 / CSSLPBuild the skills for your next mission.
The Certified Secure Software Lifecycle Professional (CSSLP) certification validates advanced expertise in integrating security practices throughout the entire Software Development Lifecycle (SDLC).
Course objectives
Build practical skills across the key domains covered in Certified Secure Software Lifecycle Professional (CSSLP) (CSSLP).
Secure Software ConceptsUnderstand and apply security design principles and patterns.
- Understand and apply security design principles and patterns.
- Evaluate and implement secure coding principles and practices.
- Analyze and integrate security standards, frameworks, and regulations.
- Differentiate between various security control types and their application.
- Identify and address common software vulnerabilities and attack vectors.
- Understand the impact of security on software quality and reliability.
Secure Software RequirementsIdentify and analyze security requirements (e.g., functional, non-functional).
- Identify and analyze security requirements (e.g., functional, non-functional).
- Define and document security use and misuse cases.
- Perform threat modeling and risk analysis.
- Integrate security into the software development lifecycle (SDLC) process.
- Establish security acceptance criteria for software.
- Understand legal and regulatory compliance requirements for software.
Secure Software DesignDesign secure software architectures and components.
- Design secure software architectures and components.
- Apply security design patterns and principles.
- Evaluate and select appropriate security controls for design.
- Perform security architecture reviews.
- Design for secure data storage and transmission.
- Design for secure authentication and authorization mechanisms.
- Design for secure error handling and logging.
Secure Software ImplementationApply secure coding practices and guidelines.
- Apply secure coding practices and guidelines.
- Implement security controls in code.
- Perform secure code review.
- Utilize secure development tools and environments.
- Understand and mitigate common coding vulnerabilities (e.g., OWASP Top 10).
- Implement secure configuration management for software.
Secure Software TestingDevelop and execute security test plans and cases.
- Develop and execute security test plans and cases.
- Perform various types of security testing (e.g., static, dynamic, interactive, penetration).
- Analyze and interpret security test results.
- Automate security testing processes.
- Integrate security testing into the continuous integration/continuous delivery (CI/CD) pipeline.
- Understand the role of security quality assurance (SQA).
Secure Software Deployment, Operations, and MaintenancePlan and implement secure deployment processes.
- Plan and implement secure deployment processes.
- Configure and secure deployment environments.
- Manage software security in operational environments.
- Perform security monitoring and logging.
- Implement incident response and recovery procedures for software.
- Manage software updates, patches, and version control securely.
Secure Software Supply ChainAnalyze and manage supply chain risks.
- Analyze and manage supply chain risks.
- Evaluate and secure third-party software and components.
- Implement secure acquisition and procurement practices.
- Understand software composition analysis (SCA) and its application.
- Establish and enforce security requirements for vendors and suppliers.
- Manage open-source software (OSS) security risks.
Find your DoD 8140 pathway
Explore how this training may align to DoD 8140 work roles and proficiency levels.
About this course
The Certified Secure Software Lifecycle Professional (CSSLP) certification validates advanced expertise in integrating security practices throughout the entire Software Development Lifecycle (SDLC). This rigorous program delves into the critical stages of software development, from requirements gathering and design to implementation, testing, deployment, and maintenance, ensuring that security is not an afterthought but an intrinsic component of every phase. Participants will master the methodologies and best practices for developing and deploying secure software, mitigating vulnerabilities, and adhering to compliance mandates in complex, mission-critical environments.
Training alone does not establish DoD 8140 qualification. Confirm position-specific requirements with your organization.