Course overview
thinQtank® Learning is offering a unique instructor-led training camp that gives students the knowledge and skills needed to build security into software rather than bolt it on afterward. Every phase of the software lifecycle gets its own domain — concepts, lifecycle management, requirements, architecture and design, implementation, testing, deployment and operations, and the supply chain the whole product now depends on.
This course also helps students prepare to take the ISC2 CSSLP exam. It is the rare security certification aimed at the people who write and ship the software rather than the people who audit it afterward, and it carries the highest experience requirement of any course we run — though far more people qualify than the headline suggests. See below.
What's included
14 itemsthinQtank® Learning Accelerated Custom Exam Study Guide for the CSSLP exam
Exam delivery in classroom with 98% success
Custom and focused exam preparation software and materials
Course specific thinQtank® Learning publications to promote a fun and exciting learning
Membership to the thinQtank® Learning University Online
WE DO NOT "TEACH THE TEST" - Students will receive valuable examples and discussion
Receive all reading material and study guides when you register
All courses taught by certified instructors
Additional hours of remote lab access across threat modeling, code review and testing
Custom video recordings with even more in-depth learning of course topics
Customized practice exam software
Digital courseware
Retake any or all portions of the course as many times as you like in person or live on-line for 24 months
Six months mentoring access to our engineers after completing the course
What you'll be able to do
16 objectives- Apply core secure software concepts: confidentiality, integrity, availability and least privilege
- Apply secure design principles, and recognize where each one fails in practice
- Manage a secure software lifecycle, and embed security into the methodology already in use
- Define security and privacy requirements, including abuse and misuse cases
- Perform threat modeling, and turn its output into requirements rather than a document
- Design a secure architecture, and select controls that match the threat model
- Model and validate a design against the security requirements it must meet
- Implement securely: input validation, output encoding, error handling and cryptography
- Recognize and avoid the common vulnerabilities in code you write and code you review
- Perform secure code review, and use static and dynamic analysis deliberately
- Plan and run security testing, including negative and abuse-case tests
- Verify and validate the software before it ships
- Deploy securely: configuration, secrets management and hardening the release
- Operate, monitor and maintain software securely, including patch and incident handling
- Manage the software supply chain: third-party components, provenance and inherited risk
- Handle end of life and decommissioning without leaving data or access behind
The exam
700to pass, of 1000
- ISC2 CSSLP — Certified Secure Software Lifecycle Professional
- Eight domains: Secure Software Concepts; Secure Software Lifecycle Management; Secure Software Requirements; Secure Software Architecture and Design; Secure Software Implementation; Secure Software Testing; Secure Software Deployment, Operations and Maintenance; Secure Software Supply Chain
- ISC2 does not publish an item count, an exam duration or domain weightings for CSSLP in any form we can verify, so we do not quote any
- Four years of cumulative, full-time experience in one or more of the domains is required to certify, reduced to three by a relevant post-secondary degree
- Pass the exam without the experience and you become an Associate of ISC2, with five years to earn it
- Accredited to ISO/IEC 17024 by ANAB, and approved by the US Department of Defense under DoDM 8140.03
- CSSLP Voucher — an exam voucher is available through thinQtank for $599 USD. Ask when you register and we will add it to your enrollment
Who it's for, and what you need first
Target Audience
- Software architects, engineers and developers who own security in their own code
- Application security specialists and secure-code reviewers
- QA testers and penetration testers working against their own products
- DevSecOps engineers putting security into a pipeline rather than after it
- Project managers, security managers and IT directors accountable for what ships
- Service members, veterans and military spouses using AF COOL, Army Credentialing Assistance, MyCAA or VET TEC 2.0
Prerequisites
- Four years of cumulative, full-time experience in one or more of the eight CSSLP domains. This is the highest bar of any course we run
- A DEGREE TAKES A YEAR OFF IT. A post-secondary degree in computer science, IT or a related field satisfies one of the four years
- PART-TIME AND INTERNSHIPS COUNT. Part-time work of 20 to 34 hours a week accrues, with 1,040 hours counting as six months of full-time credit and 2,080 hours as twelve. Internships count, paid or unpaid, with documentation
- AND YOU CAN SIT THE EXAM WITHOUT ANY OF IT. Pass, and ISC2 makes you an Associate of ISC2 with five years to earn the four years required
How it's delivered
Instructor-Led Training
Immersive Live-Online Training
On-Site and Custom Delivery
Training Camp Format
This course is delivered as an instructor-led training camp, with the exam sat in the classroom as part of the camp. Camps are scheduled by cohort, and the balance of lecture and hands-on lab work is set to suit the group and the delivery method. Contact us for the schedule covering your dates.
Dates and locations
25 scheduled| Dates | Location | Status | |
|---|---|---|---|
| Mon Sep 28 – Oct 2, 20265 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Guaranteed to run | Request info |
| Mon Oct 19 – Oct 23, 20265 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Guaranteed to run | Request info |
| Mon Oct 26 – Oct 30, 20265 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Guaranteed to run | Request info |
| Mon Nov 30 – Dec 4, 20265 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon Dec 7 – Dec 11, 20265 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Dec 14 – Dec 18, 20265 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon Jan 25 – Jan 29, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon Feb 1 – Feb 5, 20275 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Feb 22 – Feb 26, 20275 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon Mar 15 – Mar 19, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon Mar 29 – Apr 2, 20275 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Apr 12 – Apr 16, 20275 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon May 10 – May 14, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon May 24 – May 28, 20275 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Jun 7 – Jun 11, 20275 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon Jul 12 – Jul 16, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon Jul 19 – Jul 23, 20275 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Aug 2 – Aug 6, 20275 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon Aug 30 – Sep 3, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon Sep 13 – Sep 17, 20275 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Sep 27 – Oct 1, 20275 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon Oct 25 – Oct 29, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
| Mon Nov 15 – Nov 19, 20275 days · Mon–Fri | Atlanta, GA431 Marietta St NW | Open | Request info |
| Mon Nov 29 – Dec 3, 20275 days · Mon–Fri | Burbank, CA3301 N San Fernando Blvd | Open | Request info |
| Mon Dec 13 – Dec 17, 20275 days · Mon–Fri | Sterling, VA21481 Ridgetop Cir | Open | Request info |
Guaranteed to run means the class goes ahead whatever the enrollment.
Prices shown are MSRP. Qualified military personnel funding through Air Force COOL, Army Credentialing Assistance, MyCAA or VET TEC 2.0 pay a flat $1,500 per class, whatever the listed price. Everyone else — call 855-868-4467 about group pricing, discounts and current promotions.