Certified Secure Software Lifecycle Professional (CSSLP) - Hong Kong

Certified Secure Software Lifecycle Professional Course Outline

Domain 1: Secure Software Concepts

• Core Concepts
• Security Design Principles

Domain 2: Secure Software Requirements

• Define Software Security Requirements
• Identify and Analyse Compliance Requirements
• Identify and Analyse Data Classification Requirements
• Identify and Analyse Privacy Requirements
• Develop Misuse and Abuse Cases
• Develop Security Requirement Traceability Matrix (STRM)
• Ensure Security Requirements Flow Down to Suppliers/Providers

Domain 3: Secure Software Architecture and Design

• Perform Threat Modelling
• Define the Security Architecture
• Performing Secure Interface Design
• Performing Architectural Risk Assessment
• Model (Non-Functional) Security Properties and Constraints
• Model and Classify Data
• Evaluate and Select Reusable Secure Design
• Perform Security Architecture and Design Review
• Define Secure Operational Architecture
• Use Secure Architecture and Design Principles, Patterns, and Tools

Domain 4: Secure Software Implementation

• Adhere to Relevant Secure Coding Practices
• Analyse Code for Security Risks
• Implement Security Controls
• Address Security Risks
• Securely Reuse Third-Party Codes or Libraries
• Securely Integrate Components
• Apply Security During the Build Process

Domain 5: Secure Software Testing

• Develop Security Test Cases
• Develop Security Testing Strategy and Plan
• Verify and Validate Documentation
• Identify Undocumented Functionality
• Analyse Security Implications of Test Results
• Classify and Track Security Errors
• Secure Test Data
• Perform Verification and Validation Testing

Domain 6: Secure Software Lifecycle Management

• Secure Configuration and Version Control
• Define Strategy and Roadmap
• Manage Security Within a Software Development Methodology
• Identify Security Standards and Frameworks
• Define and Develop Security Documentation
• Develop Security Metrics
• Decommission Software
• Report Security Status
• Incorporate Integrated Risk Management (IRM)
• Promote Security Culture in Software Development
• Implement Continuous Improvement

Domain 7: Secure Software Deployment, Operations, and Maintenance

• Perform Operational Risk Analysis
• Release Software Securely
• Securely Store and Manage Security Data
• Ensure Secure Installation
• Perform Post-Deployment Security Testing
• Obtain Security Approval to Operate
• Perform Information Security Continuous Monitoring (ISCM)
• Support Incident Response
• Perform Patch Management
• Perform Vulnerability Management
• Runtime Protection
• Support Continuity of Operations
• Integrate Service Level Objectives (SLO) and Service Level Agreements (SLA)

Domain 8: Secure Software Supply Chain

• Implement Software Supply Chain Risk Management
• Analyse the Security of Third-Party Software
• Verify Pedigree and Provenance
• Ensure Supplier Security Requirements in the Acquisition Process
• Support Contractual Requirements

Who Should Attend this Certified Secure Software Lifecycle Professional Course?

The Certified Secure Software Lifecycle Professional (CSSLP) Course provides the skills and knowledge needed to pass the CSSLP exam. This course is beneficial for various professionals, including:

• Software Developers
• Software Architects
• Application Security Specialists
• IT Managers
• Security Auditors
• Project Managers
• Quality Assurance Testers
• Penetration Testers

Prerequisites of the Certified Secure Software Lifecycle Professional Course

There are no formal prerequisites required for attending the Certified Secure Software Lifecycle Professional (CSSLP) Course. However, professionals must have at least 4 years of experience in software development or related field to fully benefit from the course.

Certified Secure Software Lifecycle Professional Course Overview

The CSSLP Course is a specialised training focused on secure software development across the lifecycle. It covers secure design, coding practices, risk management, and vulnerability control, helping delegates embed security into every development stage.

This training strengthens the ability to identify threats early, apply secure coding standards, and support resilient software environments through improved collaboration and structured security practices.

This 4-Day course offered by The Knowledge Academy enables delegates to apply secure lifecycle principles confidently in real-world development and deployment scenarios.

Certified Secure Software Lifecycle Professional Course Objectives

• To understand the key domains of CSSLP
• To apply security across the software lifecycle
• To identify and mitigate software vulnerabilities
• To strengthen secure development practices
• To progress in application and software security roles

Upon completion of the CSSLP Course, delegates will have acquired a thorough understanding of secure software development practices, ready to apply this knowledge in real-world scenarios. This course not only boosts professional growth but also significantly enhances the ability to develop and manage secure software applications, making it an invaluable asset for any software development professional.

What’s Included in this Certified Secure Software Lifecycle Professional Course?

• World-Class Training Sessions from Experienced Instructors
• Digital Delegate Pack
• Interactive Learning with 24*7 Support