Course Details

Developed and maintained by (ISC)², the Certified Secure Software Lifecycle Professional (CSSLP) is a globally recognised, vendor-neutral certification that validates expertise in integrating security throughout the software development lifecycle. The CSSLP course provides you with the knowledge and skills required to pass the CSSLP certification exam, after which you’ll have the ability to design, develop, and manage secure software applications that reduce vulnerabilities and mitigate risk.

This certification enables professionals to demonstrate their competence in applying security best practices across the entire software development process, from requirements to design, implementation, testing, deployment, and maintenance. CSSLP-certified professionals are trusted to identify and address software security issues early, reducing costs and improving overall security posture.

CSSLP is a standard of achievement that confirms an individual’s understanding of secure software development practices and principles, aligning with industry requirements for building safer, more resilient software systems. It is ideal for software developers, engineers, architects, security professionals, and anyone involved in the software development lifecycle who is committed to enhancing security at every stage.

Learners are provided with the following resources:

• eLearning resources – exercises, quizzes, flashcards and a glossary
• Exam study guide – condensed study material on the specific skills objectives you need to master for the exams
• Video lessons
• Hands on labs
• Exam pre-assessment and practice exams

Who Should Complete This CSSLP Certification course?

Software Developers and Engineers: For professionals who design, build, and maintain applications, this course provides secure coding practices and threat modelling skills to help reduce vulnerabilities throughout the SDLC.

Application Security Professionals: Supports those focused on software security in gaining expertise in secure architecture, vulnerability classifications (CWE/SANS, OWASP), and effective countermeasures to prevent breaches.

DevOps and Development Team Leads: Helps leaders embed security in DevOps pipelines, ensuring secure design, deployment, and maintenance of software products.

Risk Management and Compliance Specialists: Provides professionals who assess software risk and ensure regulatory compliance with the technical understanding needed to collaborate effectively with development teams.

IT Professionals Looking to Specialise in Secure Software Development: For IT staff wanting to transition into application security, offering hands-on experience with security controls and secure development environments.

Entry Requirements / Prerequisites

• Learners intending to take the exams should ensure they meet any specific entry requirements. More details can be found on the exam information page.
• View the technical requirements for accessing CMIT eLearning.
• Learn more about the suitability of this course.