We may earn an affiliate commission when you visit our partners.

Secure Software Supply Chain for CSSLP®

This course will teach you to identify, assess, and mitigate the risk associated with the software supply chain needed for the Certified Secure Software Lifecycle Professional examination.

An application cannot be considered secure if there is no awareness of the risk associated with the many external components that are used in constructing the application. In this course, Secure Software Supply Chain for CSSLP®, you’ll learn to identify and mitigate the security risk associated with third party software components. First, you’ll explore supply chain risk management standards. Next, you’ll discover the evaluation of third party software. Finally, you’ll learn how to verify supplier compliance with security requirements and SLAs. When you’re finished with this course, you’ll have the skills and knowledge of secure software supply chain needed for the Certified Secure Software Lifecycle Professional examination.

Enroll now

Or start your subscription today

And complete this course over a free trial

Here's a deal for you

We found an offer that may be relevant to this course.

Save money when you learn. All coupon codes, vouchers, and discounts are applied automatically unless otherwise noted.

Valid for a limited time only

Future-proof your career

Access O'Reilly books, live events, courses, and more. Save with an annual subscription.

Take

15%

off

What's inside

Syllabus

Course Overview

Supply Chain Risk Management

Third-party Software Analysis

Domain Summary

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Covers the identification, assessment, and mitigation of risks in the software supply chain, which is essential knowledge for professionals responsible for software security

Provides a comprehensive understanding of supply chain risk management standards and their application in the software development lifecycle

Examines third-party software analysis methods and techniques to evaluate and mitigate security risks associated with external components

Emphasizes the verification of supplier compliance with security requirements and service level agreements, ensuring the integrity of the software supply chain

Taught by Kevin Henry, an experienced professional in software security, ensuring the delivery of up-to-date and industry-relevant knowledge

Specifically designed to prepare learners for the Certified Secure Software Lifecycle Professional (CSSLP®) examination, increasing their chances of success in the certification process

Save this course

Save Secure Software Supply Chain for CSSLP® to your list so you can find it easily later:

Save

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Secure Software Supply Chain for CSSLP® with these activities:

Evaluate Third-Party Software Components

Show steps

Practice evaluating third-party software components to identify potential risks.

Show steps

Identify a third-party software component that you want to evaluate.
Gather information about the component, including its source code, documentation, and security advisories.
Analyze the component for potential security risks.
Document your findings and make a recommendation on whether to use the component.

Show all one activities

Career center

Learners who complete Secure Software Supply Chain for CSSLP® will develop knowledge and skills that may be useful to these careers:

Software Security Engineer

Software Security Engineers play a crucial role in ensuring the security and integrity of software products. This course will provide you with the knowledge and skills necessary to identify and mitigate risks associated with the software supply chain, which is essential for Software Security Engineers. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to develop secure software applications and protect them from potential vulnerabilities.

See salaries and explore the career path for Software Security Engineer

Cybersecurity Analyst

Cybersecurity Analysts are responsible for protecting computer systems and networks from unauthorized access, use, disclosure, disruption, modification, or destruction. This course will provide you with a strong foundation in secure software supply chain management, which is crucial for Cybersecurity Analysts to understand in order to effectively protect software systems and networks from potential vulnerabilities and threats.

See salaries and explore the career path for Cybersecurity Analyst

Software Development Manager

Software Development Managers are responsible for overseeing the development of software products. This course will provide you with the knowledge and skills necessary to manage the software supply chain securely and effectively. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to lead your team in developing secure software products.

See salaries and explore the career path for Software Development Manager

Security Architect

Security Architects are responsible for designing and implementing security solutions for organizations. This course will provide you with the knowledge and skills necessary to design and implement a secure software supply chain. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to develop secure software solutions for your organization.

See salaries and explore the career path for Security Architect

Information Security Manager

Information Security Managers are responsible for developing and implementing security policies and procedures to protect an organization's information assets. This course will provide you with a comprehensive understanding of secure software supply chain management, which is essential for Information Security Managers to have in order to effectively protect their organization's information assets from potential vulnerabilities and threats.

See salaries and explore the career path for Information Security Manager

Security Consultant

Security Consultants provide security advice and guidance to organizations. This course will provide you with the knowledge and skills necessary to advise organizations on how to secure their software supply chain. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to help organizations protect their information assets from potential vulnerabilities and threats.

See salaries and explore the career path for Security Consultant

Software Quality Assurance Engineer

Software Quality Assurance Engineers are responsible for testing and validating software products to ensure that they meet quality standards. This course will provide you with the knowledge and skills necessary to ensure that the software supply chain is secure and that software products are free from vulnerabilities.

See salaries and explore the career path for Software Quality Assurance Engineer

Cloud Security Engineer

Cloud Security Engineers are responsible for securing cloud-based infrastructure and applications. This course will provide you with the knowledge and skills necessary to secure the software supply chain in a cloud environment. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to develop and implement secure cloud-based solutions.

See salaries and explore the career path for Cloud Security Engineer

DevOps Engineer

DevOps Engineers are responsible for bridging the gap between development and operations teams. This course will provide you with the knowledge and skills necessary to manage the software supply chain securely and effectively. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to collaborate with both development and operations teams to ensure that software products are developed and deployed securely.

See salaries and explore the career path for DevOps Engineer

Business Analyst

Business Analysts are responsible for understanding the business needs of organizations and translating them into technical requirements. This course will provide you with the knowledge and skills necessary to understand the security risks associated with the software supply chain and how to communicate them to stakeholders. By understanding how to evaluate and verify the compliance of third-party software components, you will be well-equipped to help organizations make informed decisions about their software supply chain.

See salaries and explore the career path for Business Analyst

Risk Manager

Risk Managers are responsible for identifying, assessing, and mitigating risks to organizations. This course will provide you with the knowledge and skills necessary to manage the risks associated with the software supply chain. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to develop and implement risk management strategies for the software supply chain.

See salaries and explore the career path for Risk Manager

Systems Administrator

Systems Administrators are responsible for maintaining and securing computer systems and networks. This course will provide you with the knowledge and skills necessary to secure the software supply chain on computer systems and networks. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to protect systems and networks from potential vulnerabilities and threats.

See salaries and explore the career path for Systems Administrator

Project Manager

Project Managers are responsible for planning, executing, and controlling projects. This course will provide you with the knowledge and skills necessary to manage software supply chain projects effectively. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to lead projects that deliver secure software products.

See salaries and explore the career path for Project Manager

Security Auditor

Security Auditors are responsible for evaluating the security of organizations' information systems and networks. This course will provide you with the knowledge and skills necessary to audit the security of the software supply chain. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to identify and mitigate vulnerabilities in organizations' software supply chains.

See salaries and explore the career path for Security Auditor

Software Engineer

Software Engineers are responsible for designing, developing, and testing software applications. This course will provide you with the knowledge and skills necessary to develop secure software applications. By understanding the security risks associated with third-party software components and how to evaluate and verify their compliance, you will be well-equipped to develop software applications that are free from vulnerabilities.

See salaries and explore the career path for Software Engineer

Reading list

We've selected seven books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Secure Software Supply Chain for CSSLP®.

OSINT Techniques

Save

This comprehensive guide provides practical techniques for gathering and analyzing open source intelligence. It offers valuable insights into using online resources to identify vulnerabilities and assess risks within the software supply chain.

Hacking Exposed 7

Save

This classic book provides a comprehensive overview of network security threats and vulnerabilities. It offers practical advice and techniques for detecting and mitigating attacks, including supply chain attacks.

Hacking Exposed 7: Network Security Secrets and...

Paperback

Threats

Save

This practical guide provides a step-by-step approach to threat modeling, a critical technique for identifying and mitigating security risks. It offers valuable insights for architects and developers seeking to build more secure systems.

Threat Modeling: Designing for Security

Paperback

Threats: What Every Engineer Should Learn From Star...

Kindle Edition

Security Engineering and Tobias on Locks Two-Book...

Save

This classic book provides a comprehensive overview of security engineering principles and practices. It offers valuable insights into designing and implementing secure systems.

Security Engineering and Tobias on Locks Two-Book...

Hardcover

$$$$

The Art of Deception

Save

This fascinating book provides insights into the techniques used by social engineers to manipulate and deceive people. It offers valuable lessons for security professionals seeking to protect against supply chain attacks.

The Art of Deception: Controlling the Human Element...

Hardcover

The Art of Deception: Controlling the Human Element...

Kindle Edition

The Practice of Network Security Monitoring

Save

This practical guide provides a comprehensive overview of network security monitoring, focusing on incident detection and response. It offers valuable insights into identifying and mitigating security threats.

The Practice of Network Security Monitoring

Paperback

Check price

The Practice of Network Security Monitoring

Kindle Edition

Check price

Java Coding Guidelines

Save

This comprehensive guide provides a deep dive into secure coding practices for C and C++ programming languages. It offers valuable insights into common vulnerabilities and provides guidance for writing more secure code.

Java Coding Guidelines: 75 Recommendations for...

Kindle Edition

Help others find this course page by sharing it with your friends and followers:

Facebook

Copy Link

Similar courses

Here are nine courses similar to Secure Software Supply Chain for CSSLP®.

Secure Software Lifecycle Management for CSSLP®

Most relevant

Supply Chain Risk Management with OWASP Dependency-Check

Most relevant

Secure Software Architecture and Design for CSSLP®

Most relevant

Secure Software Requirements for CSSLP®

Most relevant

Secure Software Testing for CSSLP®

Most relevant

Secure Software Deployment, Operations, and Maintenance for CSSLP®

Secure Software Deployment, Operations, and Maintenance...

Most relevant

Cloud Application Security for CCSP®

Most relevant

Exam Tips and Tricks for CSSLP®

Most relevant

Secure Software Implementation for CSSLP®

Most relevant

Time

54 hours

Level

Introductory

Via

Pluralsight

Instructor

Kevin Henry

Language

English

Good to know

Covers the identification, assessment, and mitigation of risks in the software supply chain, which is essential knowledge for professionals responsible for software security

Provides a comprehensive understanding of supply chain risk management standards and their application in the software development lifecycle

Examines third-party software analysis methods and techniques to evaluate and mitigate security risks associated with external components

Emphasizes the verification of supplier compliance with security requirements and service level agreements, ensuring the integrity of the software supply chain

Taught by Kevin Henry, an experienced professional in software security, ensuring the delivery of up-to-date and industry-relevant knowledge

Specifically designed to prepare learners for the Certified Secure Software Lifecycle Professional (CSSLP®) examination, increasing their chances of success in the certification process

Share and help others discover this course.

Facebook

Link

Don't miss out

Enroll today to gain access to this course

Enroll in this course

Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.