CSSLP Cert Prep: 6 Secure Lifecycle Management

Learn the foundations of secure software lifecycle management as you prepare for the sixth domain of the Certified Secure Software Lifecycle Professional (CSSLP) exam.

Change is a certainty throughout the software development lifecycle (SDLC). To enhance the security state of their organization’s software, information security professionals must create a lifecycle management program that lays out how to apply clear security standards throughout the SDLC. In this course, the sixth installment of the CSSLP Cert Prep series, instructor Jerod Brennen dives into the subject of secure software lifecycle management, helping prepare you for the sixth domain of the Certified Secure Software Lifecycle Professional (CSSLP) exam: Secure Software Lifecycle Management. Jerod discusses how to define your strategy and roadmap, manage security in both adaptive and predictive methodologies, and promote security culture within your organization. He also discusses the importance of generating and maintaining software security documentation, developing security metrics, applying lessons learned to enable continuous improvement, and more.

Introduction

• Secure software lifecycle management

1. Laying Your Foundation

• Strategy and roadmap
• Development methodologies
• Integrated risk management
• Promote security culture

2. Setting Expectations

• Security standards and frameworks
• Security documentation
• Hardware and software configuration
• Ongoing configuration management

3. Improving over Time

• Decommission software
• Manage licenses and archives
• Security metrics
• Reporting security status
• Continuous improvement

Conclusion

• Next steps