What the course covers
About this course map
CSSLP — Certified Secure Software Lifecycle Professional — is ISC2's certification for the place most vulnerabilities are actually born: the software development lifecycle. It is not a penetration-testing certification and not a management one. It sits with the people who build software — developers, architects, engineers, and the security professionals who work alongside them — and it covers how to bake security into every stage, from the first requirement to the retirement of the system.
The premise is simple and correct: a flaw caught in design costs a fraction of the same flaw caught in production, and almost every expensive breach traces back to a decision made early and cheaply. CSSLP is the credential that proves someone thinks about security across the whole lifecycle rather than bolting it on at the end.
This preparation programme follows the eight CSSLP domains, each mapped to a phase of the lifecycle it governs.
Domain 01 — Secure software concepts
The principles every later domain applies.
Domain 02 — Secure software requirements
Security starts before a line of code is written.
Domain 03 — Secure software architecture and design
Designing a system that is secure by construction.
Domain 04 — Secure software implementation
Writing the code without the classic flaws.
Domain 05 — Secure software testing
Proving the security, not assuming it.
Domain 06 — Secure software lifecycle management
Running the whole thing as a repeatable process.
Domain 07 — Secure software deployment, operations and maintenance
Security does not end at release.
Domain 08 — Secure software supply chain
The domain that has become the story of the last several years.
Sitting the official exam
Exam voucher sold separately. We buy it from the certification body on your behalf and send you the code — you book your own exam date. This course is Hacky Security's own preparation training; the certification itself is awarded by the certification body, not by us.
Similar courses
Independent preparation training delivered from Hacky Security's own curriculum. Hacky Security is not affiliated with or endorsed by the certification body named above. Certification names and codes are the trademarks of their respective owners and are used only to describe what this course prepares you for.
