Certification     (ISC)2     Certified Secure Software Lifecycle Professional (CSSLP)     Certified Secure Software Lifecycle Professional (CSSLP)

---

Regardless of how encompassing your software designs are, there's always a possibility that vulnerabilities still exist in the software or new vulnerabilities will be discovered later in the software development lifecycle. In this course, you'll learn different pre- and post-release activities to address these such as the pre-release testing process, completion criteria, risk acceptance practices, post-release plans, and independent testing options. You'll also be introduced to installation and deployment controls that you can use to mitigate vulnerabilities such as bootstrapping, configuration management practices, and release management. Finally, this course will cover operations and maintenance best practices for managing vulnerabilities such as incident and problem management, change management, and software disposal planning and execution for end-of-phase iterations. This course is one of a series in the learning path that covers the objectives for the Certified Secure Software Lifecycle Professional or CSSLP exam.

---

---

Objectives

Software Acceptance Pre-release Activities start the course identify the characteristics of the pre-release testing process list the six generic criteria for judging the suitability of a product identify the characteristics of risk acceptance Software Acceptance Post-release Activities identify characteristics of a post-release plan recognize characteristics of validation and verification recognize characteristics of independent testing Installation and Deployment identify the role of bootstrapping in deployment activities recognize characteristics of configuration management roles and plan distinguish between the six configuration management process activities recognize characteristics of release management activities Operations and Maintenance recognize characteristics of monitoring during operations and maintenance distinguish between the different activities of incident management recognize characteristics of problem management recognize characteristics of change management recognize characteristics of backup, recovery, and archiving Software Disposal identify the components of an effective software disposal plan identify key activities during software disposal execution Practice: Software Deployment and Maintenance identify best practices for software deployment, operations, maintenance, and disposal activities