After this seminar you can build security into every phase of software development: you derive security requirements, review architecture decisions, plan secure implementation and testing, and keep operations, maintenance and third-party components under control. Along the way you cover all eight domains of the CSSLP exam and practise typical questions. The course suits experienced developers, software architects and AppSec specialists, as well as managers who are responsible for secure software and want to demonstrate it with the ISC2 CSSLP certification.
What you’ll take away.
- Apply secure software principles and secure lifecycle management to projects
- Gather security requirements and translate them into architecture and design
- Plan secure implementation and security testing and assess the results
- Secure deployment, operations, maintenance and the software supply chain
Your training in detail
- Who is it for?
- Software architects, developers, application security specialists, QA and penetration testers, and project, programme and security managers who steer security across the development process. Software procurement specialists will also benefit.
- Prerequisites
- You have professional experience in software development or application security. For certification, ISC2 requires four years of relevant work experience; the exact rules are on isc2.org.
- Format & planning
- Standard length: 5 training days. A different length can be arranged for companies.
Agenda: from understanding to application
Our independently developed agenda proposal. Focus areas, lab environment and scope are agreed before booking.
Exam structure, secure software concepts and secure lifecycle management
Security requirements: sources, classification, misuse cases and traceability
Architecture and design: threat modelling, security patterns and design reviews
Secure implementation: coding practices, code reviews and analysis tools
Security testing: test strategy, test types and handling findings
Deployment, operations and maintenance: hardening, patching and vulnerability management
Software supply chain: third-party components, supplier risk and exam practice
You take a sample application through every phase: you write security requirements, build a threat model, define test cases and assess the open-source components in use. The result is a concise security plan for the project.
Exams, licences & credentials
The seminar prepares you for the ISC2 CSSLP exam (125 items in 3 hours with a passing score of 700 out of 1000, according to ISC2). The exam and fees are included only if the offer confirms it. The certificate is issued solely by ISC2 after you pass and meet the experience requirements. It is not official ISC2 training unless the offer explicitly says so.
Vendor references & review date
Sources checked on 2026-11-10. These sources describe the technology or external exam requirements. They do not imply a partnership with NextNowa.
Your learning content
These objectives describe the training topic. The specific syllabus, dates and trainer are agreed before booking; the written offer is binding.
Frequently asked questions
How does CSSLP differ from CISSP?
CISSP covers information security across the board. CSSLP focuses on software, from requirements through development and testing to operations and the supply chain.
Which domains carry the most weight?
According to the current exam outline, architecture and design carries the largest share at 15 per cent, followed by implementation and testing at 14 per cent each.
Does CSSLP (Certified Secure Software Lifecycle Professional): security across the software lifecycle include a certificate?
The seminar prepares you for the ISC2 CSSLP exam (125 items in 3 hours with a passing score of 700 out of 1000, according to ISC2). The exam and fees are included only if the offer confirms it. The certificate is issued solely by ISC2 after you pass and meet the experience requirements. It is not official ISC2 training unless the offer explicitly says so.