Overview
CSSLP: Certified Secure Software Lifecycle Professional is a ISC2 credential. Prepare for the ISC2 CSSLP exam with training across eight domains of secure software, from requirements to supply chain. This PathKey™ guide summarizes the domains, format, cost signals, eligibility, and renewal pattern so you can decide before you book. Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISC2 exam. ISC2 sets exam content, fees, and policies.
Accumentum is an Army CA and Air Force COOL Approved Vendor. We teach preparation for the ISC2 exam. ISC2 sets exam content, fees, and policies.
Who it is for
- Software developers, engineers, and architects who build or design applications.
- Application security specialists and DevSecOps engineers.
- QA and test professionals who own security testing.
Exam domains
Weights follow the official outline.
- 01
Secure Software Concepts
Understand core concepts including confidentiality, integrity, availability, authentication, authorization, accountability, and nonrepudiation, and Apply security design principles such as least privilege, segregation of duties, defense in depth, resiliency, and open design.
- 02
Secure Software Lifecycle Management
Set security milestones and checkpoints in the development strategy and roadmap, Incorporate integrated risk management methods using standards and models such as NIST, OWASP, SAMM, and BSIMM, and Implement secure operation practices and decommission applications securely.
- 03
Secure Software Requirements
Define functional and non-functional software security requirements, Identify compliance, data classification, and privacy requirements, and Define data access provisioning and develop misuse and abuse cases.
- 04
Secure Software Architecture and Design
Define the security architecture across distributed, service-oriented, cloud, mobile, embedded, and IoT systems, Perform secure interface design and evaluate reusable technologies, and Perform threat modeling with methods such as STRIDE and PASTA.
- 05
Secure Software Implementation
Adhere to secure coding practices covering input validation, error handling, session management, cryptography, and access control, Analyze code for security risks with SAST, manual review, and vulnerability lists such as the OWASP Top 10 and CWE, and Evaluate and integrate third-party components and apply security during the build process.
- 06
Secure Software Testing
Develop a security testing strategy and plan, Develop security test cases including DAST, IAST, penetration testing, fuzzing, and regression tests, and Classify and track security errors, secure test data, and perform verification and validation testing.
- 07
Secure Software Deployment, Operations, Maintenance
Perform operational risk analysis and manage secure configuration and version control, Release software securely through a secure CI/CD pipeline and manage secrets, keys, and certificates, and Perform continuous monitoring, execute the incident response plan, and support continuity of operations.
- 08
Secure Software Supply Chain
Implement software supply chain risk management, including maintaining a software bill of materials, Analyze the security of third-party software and verify pedigree and provenance, and Ensure and verify supplier security requirements in the acquisition process.
Exam format and cost
- Questions
- Confirm on the vendor site
- Duration
- Confirm on the vendor site
- Format
- Multiple choice and related item types (confirm on the vendor outline)
- Passing score
- Confirm the passing score on the vendor site
- Cost
- Confirm the current exam fee on the vendor site before you register
- Delivery
- Pearson VUE test center or online where the vendor offers it
- Languages
- Confirm available languages on the vendor site
Experience and eligibility
ISC2 requires a minimum of four years cumulative, full-time experience in one or more of the eight domains of the current CSSLP exam outline. A qualifying degree may satisfy up to one year. Candidates without the required experience can become an Associate of ISC2 by passing the CSSLP exam and then have five years to earn the required experience.
Renewal
Renewal rules for CSSLP: Certified Secure Software Lifecycle Professional are set by ISC2. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.
Roles this credential fits
- Secure software concepts, lifecycle management, requirements, architecture and design, implementation, testing, deployment and operations, and the software supply chain.
- Secure Software
- Teams standardizing on this credential for hiring or compliance
CSSLP questions
Is CSSLP worth it?
CSSLP is worth it when employers or contracts in your market ask for ISC2 proof, or when the domains match work you already do or want next. Common roles include Secure software concepts, lifecycle management, requirements, architecture and design, implementation, testing, deployment and operations, and the software supply chain., Secure Software, and Teams standardizing on this credential for hiring or compliance. Read the roles and domains on this page, then decide against your timeline and budget.
How hard is CSSLP?
You get Confirm on the vendor site in Confirm on the vendor site. Format: Multiple choice and related item types (confirm on the vendor outline). Passing score: Confirm the passing score on the vendor site. Delivery: Pearson VUE test center or online where the vendor offers it. ISC2 requires a minimum of four years cumulative, full-time experience in one or more of the eight domains of the current CSSLP exam outline. People who pass usually mix domain study with timed practice, not reading alone.
Does CSSLP expire?
Renewal rules for CSSLP: Certified Secure Software Lifecycle Professional are set by ISC2. Many credentials use a multi-year cycle with continuing education, a renewal fee, or a newer exam. Confirm the current cycle on the vendor site.
How does Accumentum help with CSSLP?
We offer Expert-led training mapped to the CSSLP domains, PathPay® payment options, PathPass™ practice where the exam is in our catalog, and military funding support where you qualify. We are an Army CA and Air Force COOL Approved Vendor. Our pass rate across Accumentum certification attempts since August 2022 is 98.8% (2,412 certified of about 2,441 attempts).
How much does the CSSLP exam cost?
Published pricing for CSSLP: Confirm the current exam fee on the vendor site before you register. Vendors change voucher prices without notice, so confirm on the official store before you buy. PathPay® can spread Accumentum course tuition when you train with us.
What are the CSSLP prerequisites?
ISC2 requires a minimum of four years cumulative, full-time experience in one or more of the eight domains of the current CSSLP exam outline. A qualifying degree may satisfy up to one year. Candidates without the required experience can become an Associate of ISC2 by passing the CSSLP exam and then have five years to earn the required experience.
What should I take after CSSLP?
After CSSLP, pick the next credential that matches the job you want, not a generic ladder. Use the roles on this page and neighboring PathKey™ guides from the same vendor to plan the sequence. If you need a readiness check first, start with ReadyScore™ when we offer one for this exam.
Official sources
Always confirm fees, dates, and eligibility on the vendor site before you register. Vendors change outlines and prices without notice.