thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Leveraging Existing Components

Reuse proven, vetted security components instead of building new ones, to reduce attack surface and errors.

Definition

CSSLP lists this principle alongside the classic design principles. Reusing well-tested libraries for authentication, cryptography and input handling avoids common implementation flaws, but reused components must be kept updated and tracked in an SBOM.

Example

Using the platform's vetted crypto library instead of writing a custom encryption routine.

Exam tip

Never roll your own crypto; however, reused components introduce supply chain risk that SCA must manage.

Related terms