Reviews 4,2
Reviews 4,5
100% fundable

Certified Secure Software Lifecycle Professional (CSSLP)

Security in software is not an afterthought – it must be built into every step of development. CSSLP trains participants to systematically address risks, architecture decisions, and compliance requirements across all project phases.

Key topics

  • Building and implementing a Secure Software Development Lifecycle (SSDLC)
  • Applying Security by Design principles and Threat Modeling
  • Securing architectures, APIs, and cloud infrastructure
  • Integrating DevSecOps, test automation, and AI-based security testing
  • Risk assessment, regulatory compliance, and governance requirements
  • Identifying vulnerabilities and protecting software supply chains

Prerequisite
Knowledge of software development, IT architecture, or information security is beneficial.

Target group
Teams developing or responsible for software in security-critical environments – from developers and architects to DevOps, security, and QA professionals.

For those looking to strategically embed software security, CSSLP provides an internationally recognized framework – practical, methodologically sound, and aligned with the demands of modern development environments.

Course content
  • Core principles and concepts of application security.
  • Guidelines for security-oriented software design.
  • Gathering and specifying security requirements for software.
  • Analyzing and categorizing compliance requirements.
  • Recognizing and assessing data classification requirements.
  • Identifying and implementing data protection requirements.
  • Developing misuse and abuse case scenarios.
  • Building a security requirements traceability matrix (STRM).
  • Communicating security requirements to suppliers and external service providers.
  • Applying threat modeling for early risk detection.
  • Establishing a comprehensive security architecture.
  • Designing secure interfaces between system components.
  • Assessing architectural risks and vulnerabilities.
  • Modeling security-relevant properties and constraints.
  • Classifying and managing data in a structured way.
  • Selecting and evaluating reusable, security-compliant solutions.
  • Reviewing and validating architecture and design decisions.
  • Defining secure operational architectures.
  • Applying recognized security principles, patterns, and tools in design.
  • Applying recognized secure coding practices in day-to-day development.
  • Security-relevant code analysis and vulnerability identification.
  • Integrating appropriate security controls into the codebase.
  • Addressing identified security risks during development.
  • Security-compliant reuse of third-party libraries and code.
  • Secure integration of external and internal components.
  • Implementing security measures in the build and deployment process.
  • Designing and creating security test cases.
  • Developing a strategy and plan for security validation.
  • Reviewing and approving security-relevant documentation.
  • Detecting undocumented or hidden functionality.
  • Assessing the security impact of test results.
  • Classifying and tracking security-critical bugs.
  • Providing and managing secure test data.
  • Performing verification and validation test cycles.
  • Implementing secure configuration and version control.
  • Developing a security strategy and roadmap for software projects.
  • Managing security requirements within development methodologies.
  • Selecting and applying relevant security standards and frameworks.
  • Establishing and maintaining security documentation.
  • Defining and monitoring security metrics.
  • Planning the secure decommissioning of software.
  • Reporting on the current security status.
  • Integrating integrated risk management (IRM) into development processes.
  • Fostering a security culture and implementing continuous improvement.

Up to 100% funding for your continuing education

Attractive funding opportunities are available for numerous continuing education programs – depending on the funding program, up to 100% funding is possible.
The requirement is that you live or work in Germany. Our funding opportunities are not available outside of Germany.

Funding opportunities are available for career starters, job seekers, career changers, startups, experienced professionals, those seeking career advancement, and specialists.

Frequently asked questions

  • CSSLP (Certified Secure Software Lifecycle Professional) is an ISC2 certification that demonstrates a professional's ability to embed security consistently across the entire software lifecycle.
  • CSSLP targets professionals involved in secure software development – including developers, security architects, DevOps specialists, and teams from IT management and quality assurance.
  • The certification program covers all phases of the software lifecycle: requirements, design, implementation, testing, deployment, and maintenance – with a focus on risk management, compliance, and security standards.
  • CSSLP demonstrates deep understanding of secure development processes, strengthens perceived expertise, and opens doors to security-critical positions and leadership roles in IT.
  • Several years of practical experience in software development or related fields are required. Educational degrees or other certifications can partially substitute for missing hands-on experience.
  • Unlike CISSP with its broad IT security overview, CSSLP focuses specifically on application security and development processes – not on network or general infrastructure security.
  • With increasingly interconnected systems, cloud architectures, and regulatory requirements such as GDPR or NIS2, security in the software lifecycle is becoming an essential core competency for organizations.

Your Personal Path to the Right Continuing Education Program—We Provide Personalized Guidance

Our experienced educational advisors will guide you from your very first question all the way to the start of your continuing education program.