ISC CSSLP 認定試験の出題範囲:
| トピック | 出題範囲 |
|---|
| トピック 1 | - Secure Software Architecture and Design: Covers designing secure systems through threat modeling, architectural risk assessments, secure interface design, and technology evaluation across cloud, mobile, IoT, and embedded environments.
|
| トピック 2 | - Secure Software Requirements: Focuses on defining functional and non-functional security requirements, compliance obligations, data classification, privacy needs, access provisioning, and third-party vendor security expectations.
|
| トピック 3 | - Secure Software Implementation: Addresses secure coding practices, code analysis, integration of security controls, and build-time security measures like code signing and compiler hardening.
|
| トピック 4 | - Secure Software Supply Chain: Covers managing third-party software risks through supplier assessments, software bill of materials, provenance verification, and contractual security requirements.
|
| トピック 5 | - Secure Software Concepts: Covers foundational security principles like confidentiality, integrity, availability, authentication, and authorization, along with secure design principles such as least privilege, defense in depth, and open design.
|
参照:https://www.isc2.org/certifications/csslp/csslp-certification-exam-outline#Domain%208:%20Secure%20Software%20Supply%20Chain
ISC CSSLP 試験概要:
| 認定ベンダー: | (ISC)2 |
| 試験名: | Certified Secure Software Lifecycle Professional (CSSLP) |
| 試験番号: | CSSLP |
| 合格点: | 700 / 1000 (換算スコア) |
| 試験時間: | 180 minutes |
| 対応言語: | 英語 |
| 受験料: | USD 749 |
| 関連資格: | CISSP SSCP |
| 認定の有効期間: | 3年間 (CPEクレジットにより更新可能) |
| 試験形式: | 多肢選択式, コンピュータベース試験 (CBT) |
| 出題数: | 125 |
| サンプル問題: | ISC CSSLP サンプル問題 |
| 受験方法: | Pearson VUEテストセンターまたはオンライン監督試験 |
| 前提条件: | 推奨:セキュアソフトウェア開発ライフサイクル(SDLC)における通算4年以上の有給実務経験。関連する学位または認定資格により、最大1年間の免除が適用可能。 |
| 公式シラバスのURL: | https://www.isc2.org/certifications/csslp |