- Understand core concepts including confidentiality, integrity, availability, authentication, authorization, accountability, and nonrepudiation.
- Apply security design principles such as least privilege, segregation of duties, defense in depth, resiliency, and open design.
ISC2 Certification Training Course
ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course
Build the application security expertise that modern development teams need with Accumentum’s ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course, developed to help you build security into every phase of the software development lifecycle.
Course focus: Secure software concepts, lifecycle management, requirements, architecture and design, implementation, testing, deployment and operations, and the software supply chain.
Course Overview
Master the eight CSSLP domains.
The ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course with Accumentum gives you a complete look at the CSSLP credential. CSSLP validates that software professionals can incorporate security practices, including authentication, authorization, and auditing, into each phase of the software development lifecycle, from design and implementation to testing and deployment. This course covers all eight domains of the current CSSLP exam outline, including the dedicated Secure Software Supply Chain domain. You work through security design principles, threat modeling with STRIDE and PASTA, secure coding and code analysis, security testing strategies, secure CI/CD pipelines, and software bill of materials practices, along with the AI topics the updated outline adds. You leave ready to sit the CSSLP exam and to lead secure development work.
Course Benefits
Build CSSLP certification readiness and real-world capability.
01
Secure Software Foundations
Apply core security concepts and design principles such as least privilege, defense in depth, and complete mediation.
02
Requirements, Architecture, and Design
Define security, compliance, data, and privacy requirements, build secure architectures, and perform threat modeling.
03
Implementation and Testing
Apply secure coding practices, analyze code for risk, and plan and run security testing.
04
Deployment and Supply Chain
Release software securely through CI/CD, operate and monitor it, and manage third-party and supply chain risk.
Who Should Attend
- Software developers, engineers, and architects who build or design applications.
- Application security specialists and DevSecOps engineers.
- QA and test professionals who own security testing.
- Project and product leaders responsible for secure delivery of software.
Prerequisites
- ISC2 requires a minimum of four years cumulative, full-time experience in one or more of the eight domains of the current CSSLP exam outline. A qualifying degree may satisfy up to one year.
- Candidates without the required experience can become an Associate of ISC2 by passing the CSSLP exam and then have five years to earn the required experience.
- Familiarity with software development methods and at least one programming environment.
- Willingness to engage with design, code, and testing scenarios in preparation for the CSSLP exam.
Pathway Map
The CSSLP training course spans the eight official ISC2 exam domains.
The curriculum covers Secure Software Concepts (12%), Secure Software Lifecycle Management (11%), Secure Software Requirements (13%), Secure Software Architecture and Design (15%), Secure Software Implementation (14%), Secure Software Testing (14%), Secure Software Deployment, Operations, Maintenance (11%), and Secure Software Supply Chain (10%).
Course Content
- Set security milestones and checkpoints in the development strategy and roadmap.
- Incorporate integrated risk management methods using standards and models such as NIST, OWASP, SAMM, and BSIMM.
- Implement secure operation practices and decommission applications securely.
- Define functional and non-functional software security requirements.
- Identify compliance, data classification, and privacy requirements.
- Define data access provisioning and develop misuse and abuse cases.
- Define the security architecture across distributed, service-oriented, cloud, mobile, embedded, and IoT systems.
- Perform secure interface design and evaluate reusable technologies.
- Perform threat modeling with methods such as STRIDE and PASTA.
- Adhere to secure coding practices covering input validation, error handling, session management, cryptography, and access control.
- Analyze code for security risks with SAST, manual review, and vulnerability lists such as the OWASP Top 10 and CWE.
- Evaluate and integrate third-party components and apply security during the build process.
- Develop a security testing strategy and plan.
- Develop security test cases including DAST, IAST, penetration testing, fuzzing, and regression tests.
- Classify and track security errors, secure test data, and perform verification and validation testing.
- Perform operational risk analysis and manage secure configuration and version control.
- Release software securely through a secure CI/CD pipeline and manage secrets, keys, and certificates.
- Perform continuous monitoring, execute the incident response plan, and support continuity of operations.
- Implement software supply chain risk management, including maintaining a software bill of materials.
- Analyze the security of third-party software and verify pedigree and provenance.
- Ensure and verify supplier security requirements in the acquisition process.
Course Features
Designed for practical training and CSSLP exam preparation.
Interactive Learning
Participate in training sessions, discussions, and applied exercises with experienced instructors.
Comprehensive Study Materials
Access extensive resources, including e-books, video lectures, and practice exams.
Real-World Applications
Engage in practical exercises and case studies to apply CSSLP concepts.
Certification Preparation
Receive guidance and tips to successfully prepare for the ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification exam.
Certification Exam
Prepare for the official ISC2 CSSLP certification exam.
CSSLP Exam Readiness
Accumentum’s CSSLP Training Course prepares learners to apply the eight CSSLP domains in real work and on exam day.
Upon completing the ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course with Accumentum, you will be equipped to pursue the Certified Secure Software Lifecycle Professional (CSSLP) exam. The official exam is 3 hours, includes 125 items in multiple choice and advanced item types format, and requires a passing grade of 700 out of 1000 points. It is offered in English at Pearson VUE testing centers. CSSLP is listed in the DoD 8140 Foundational Qualification Matrix V2.1 (effective September 19, 2025), so it can support qualification for applicable DoD cyber workforce roles. Confirm your work role and proficiency level with your supervisor. CSSLP shows that you can build security into software from the start, which supports application security, DevSecOps, and secure development leadership roles across government and industry.
Frequently Asked Questions
Understand how Accumentum’s ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course supports certification preparation, eligibility, course content, delivery, and career advancement.
Certified Secure Software Lifecycle Professional (CSSLP) is an ISC2 certification. CSSLP validates that software professionals can incorporate security practices, including authentication, authorization, and auditing, into each phase of the software development lifecycle, from design and implementation to testing and deployment.
Software developers, engineers, and architects who build or design applications. Application security specialists and DevSecOps engineers. QA and test professionals who own security testing. Project and product leaders responsible for secure delivery of software.
ISC2 requires a minimum of four years cumulative, full-time experience in one or more of the eight domains of the current CSSLP exam outline. A qualifying degree may satisfy up to one year. Candidates without the required experience can become an Associate of ISC2 by passing the CSSLP exam and then have five years to earn the required experience.
The curriculum covers the eight official CSSLP domains: Secure Software Concepts, Secure Software Lifecycle Management, Secure Software Requirements, Secure Software Architecture and Design, Secure Software Implementation, Secure Software Testing, Secure Software Deployment, Operations, Maintenance, and Secure Software Supply Chain.
Yes. Accumentum’s CSSLP Training Course is designed to prepare you for the official ISC2 CSSLP certification exam and the competencies it assesses.
Yes. Participate in training sessions, discussions, and applied exercises with experienced instructors. Engage in practical exercises and case studies to apply CSSLP concepts.
Access extensive resources, including e-books, video lectures, and practice exams.
Eight domains, with weights of 12%, 11%, 13%, 15%, 14%, 14%, 11%, and 10% respectively, per the current ISC2 CSSLP Certification Exam Outline.
Accumentum is an Army CA and Air Force COOL Approved Vendor for ISC2. Talk with our team to confirm eligibility for your branch and credential before you enroll.
Enroll in the ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course with Accumentum via Accumentum’s registration page linked below, or explore PathPay Enrollment options.
CSSLP shows that you can build security into software from the start, which supports application security, DevSecOps, and secure development leadership roles across government and industry.
Enrollment
Enroll in the ISC2 CSSLP® Certification Training Course with Accumentum.
Enroll in the ISC2 CSSLP® Certified Secure Software Lifecycle Professional Certification Training Course with Accumentum to advance your expertise and earn a globally recognized ISC2 credential. Accumentum is an Army CA and Air Force COOL Approved Vendor, and our team can walk you through funding options before you register.
Advance your cybersecurity career with CSSLP training.
Prepare for the ISC2 CSSLP certification exam and build the secure software concepts and secure software supply chain skills that employers look for.