CSSLP Course Outline

Domain 1: Secure Software Concepts

• Fundamental Concepts
• Principles of Security Design

Domain 2: Secure Software Requirements

• Establish Software Security Requirements
• Identify and Analyze Compliance Needs
• Identify and Analyze Data Classification Needs
• Identify and Analyze Privacy Considerations
• Develop Misuse and Abuse Scenarios
• Create a Security Requirement Traceability Matrix (STRM)
• Ensure Security Requirements are Communicated to Suppliers/Providers

Domain 3: Secure Software Architecture and Design

• Conduct Threat Modeling
• Define the Security Architecture
• Implement Secure Interface Design
• Perform Architectural Risk Assessments
• Model (Non-Functional) Security Properties and Constraints
• Model and Classify Data
• Evaluate and Select Reusable Secure Designs
• Conduct Security Architecture and Design Reviews
• Define Secure Operational Architecture
• Utilize Secure Architecture and Design Principles, Patterns, and Tools

Domain 4: Secure Software Implementation

• Follow Relevant Secure Coding Standards
• Analyze Code for Security Vulnerabilities
• Implement Security Controls
• Mitigate Security Risks
• Securely Reuse Third-Party Code or Libraries
• Safely Integrate Components
• Apply Security Measures During the Build Process

Domain 5: Secure Software Testing

• Create Security Test Cases
• Develop a Security Testing Strategy and Plan
• Verify and Validate Documentation
• Identify Undocumented Features
• Analyze Security Implications of Test Results
• Classify and Track Security Issues
• Secure Test Data
• Conduct Verification and Validation Testing

Domain 6: Secure Software Lifecycle Management

• Ensure Secure Configuration and Version Control
• Define Strategy and Roadmap
• Manage Security Within a Software Development Methodology
• Identify Security Standards and Frameworks
• Create and Maintain Security Documentation
• Develop Security Metrics
• Decommission Software
• Report on Security Status
• Incorporate Integrated Risk Management (IRM)
• Foster a Security Culture in Software Development
• Implement Continuous Improvement

Domain 7: Secure Software Deployment, Operations, and Maintenance

• Conduct Operational Risk Analysis
• Release Software Securely
• Safely Store and Manage Security Data
• Ensure Secure Installation Procedures
• Perform Post-Deployment Security Testing
• Obtain Security Approval for Operation
• Conduct Information Security Continuous Monitoring (ISCM)
• Support Incident Response Efforts
• Execute Patch Management
• Manage Vulnerabilities
• Implement Runtime Protection
• Support Operational Continuity
• Integrate Service Level Objectives (SLO) and Service Level Agreements (SLA)

Domain 8: Secure Software Supply Chain

• Implement Software Supply Chain Risk Management
• Analyze the Security of Third-Party Software
• Verify Software Pedigree and Provenance
• Ensure Supplier Security Requirements are Met During Acquisition
• Support Contractual Security Requirements 

1. 5 day interactive instructor-led training 

2. Training provided by highly qualified, certified, and accredited trainers 

3.Certified Secure Software Lifecycle Professional (CSSLP) Certification course accredited by Authorised Governing Body and Mindbel 

4. Certification