CSSLP Certification Exam ExamFOCUS Study Notes & Review Questions 2012

According to the ISC2, the Certified Secure Software Lifecycle Professional certification aims to ensure that security is considered throughout the entire software development lifecycle. This is a relatively new certification, with these domains covered: Secure Software Concepts Security Software Requirements Secure Software Design Secure Software Implementation/Coding Secure Software Testing Software Acceptance Software Deployment, Operations, Maintenance and Disposal You don’t have to be a CISSP in order to go for this certification. However, knowledge covered by the CISSP certification will be VERY USEFUL. In fact, this is an advanced level exam. If you do not have real world experience, you will not be able to pick the right answers for the corresponding scenarios. When we develop our material we do not classify topics the BOK way. In fact, we follow our own flow of instructions which we think is more logical for the overall learning process. Don’t worry, it does not hurt to do so, as long as you truly comprehend the material. To succeed in the exams, you need to read as many reference books as possible. There is no single book that can cover everything! This ExamFOCUS book focuses on the more difficult topics that will likely make a difference in exam results. The book is NOT intended to guide you through every single official topic. You should therefore use this book together with other reference books for the best possible preparation outcome. We divide the book into two major sections. The first section deals with foundation knowledge on security. The second deals mainly with software development.