Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. FFS

FFS

Scheduled Pinned Locked Moved The Lounge
designsysadminsecuritytestingbusiness
27 Posts 14 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • realJSOPR Offline
    realJSOPR Offline
    realJSOP
    wrote on last edited by
    #1

    New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

    ".45 ACP - because shooting twice is just silly" - JSOP, 2010
    -----
    You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
    -----
    When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

    R S S M S 11 Replies Last reply
    0
    • realJSOPR realJSOP

      New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

      ".45 ACP - because shooting twice is just silly" - JSOP, 2010
      -----
      You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
      -----
      When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

      R Offline
      R Offline
      raddevus
      wrote on last edited by
      #2

      requirements

      The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions.

      X| I'm so bored. I love technology and learning tech, but I really dislike long tests like that.

      realJSOPR 1 Reply Last reply
      0
      • R raddevus

        requirements

        The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions.

        X| I'm so bored. I love technology and learning tech, but I really dislike long tests like that.

        realJSOPR Offline
        realJSOPR Offline
        realJSOP
        wrote on last edited by
        #3

        I dislike the over-the-f*ckin-top certification requirements imposed by the DoD. I think they have some as*hole sitting in a dark room somewhere in Washington trying to dream up ways to make working as a developer for the government the most distasteful job imaginable.

        ".45 ACP - because shooting twice is just silly" - JSOP, 2010
        -----
        You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
        -----
        When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

        S R 2 Replies Last reply
        0
        • realJSOPR realJSOP

          New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

          ".45 ACP - because shooting twice is just silly" - JSOP, 2010
          -----
          You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
          -----
          When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

          S Offline
          S Offline
          Slacker007
          wrote on last edited by
          #4

          John Simmons / outlaw programmer wrote:

          175 multiple choice questions.

          I just select "C" all they way down the line. Works every time. :-D Also, for the 40th time, get a new job. :doh:

          realJSOPR 1 Reply Last reply
          0
          • realJSOPR realJSOP

            I dislike the over-the-f*ckin-top certification requirements imposed by the DoD. I think they have some as*hole sitting in a dark room somewhere in Washington trying to dream up ways to make working as a developer for the government the most distasteful job imaginable.

            ".45 ACP - because shooting twice is just silly" - JSOP, 2010
            -----
            You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
            -----
            When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

            S Offline
            S Offline
            Slacker007
            wrote on last edited by
            #5

            Even if you don't have a lot of "security" experience, I know you hit 2-4 items off the list as it is, or you would not be where you are at right now in your career. •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition

            realJSOPR 1 Reply Last reply
            0
            • S Slacker007

              John Simmons / outlaw programmer wrote:

              175 multiple choice questions.

              I just select "C" all they way down the line. Works every time. :-D Also, for the 40th time, get a new job. :doh:

              realJSOPR Offline
              realJSOPR Offline
              realJSOP
              wrote on last edited by
              #6

              This is DoD wide. It doesn't matter what DoD contract I'm on.

              ".45 ACP - because shooting twice is just silly" - JSOP, 2010
              -----
              You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
              -----
              When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

              R D 2 Replies Last reply
              0
              • S Slacker007

                Even if you don't have a lot of "security" experience, I know you hit 2-4 items off the list as it is, or you would not be where you are at right now in your career. •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition

                realJSOPR Offline
                realJSOPR Offline
                realJSOP
                wrote on last edited by
                #7

                But I have to take the test to "prove my skills" (according to the ICS2 website). I do get a "digital badge" when I pass, so I guess, silver lining.

                ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                -----
                You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                -----
                When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                D 1 Reply Last reply
                0
                • realJSOPR realJSOP

                  This is DoD wide. It doesn't matter what DoD contract I'm on.

                  ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                  -----
                  You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                  -----
                  When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                  R Offline
                  R Offline
                  raddevus
                  wrote on last edited by
                  #8

                  John Simmons / outlaw programmer wrote:

                  This is DoD wide. It doesn't matter what DoD contract I'm on.

                  Come out and play in the Private Sector with the rest of us.

                  Thomas Edison (altered):

                  "Hell, there are no [certifciations] here -- we are trying to accomplish something."*

                  * https://i.stack.imgur.com/BhCMr.png^

                  1 Reply Last reply
                  0
                  • realJSOPR realJSOP

                    New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                    ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                    -----
                    You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                    -----
                    When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                    S Offline
                    S Offline
                    stoneyowl2
                    wrote on last edited by
                    #9

                    Every time I see something like this, I thank any available deity that I got out of that mess when I did. The last time I played in that arena was at JSOC at hurlburt Field in Florida, some 10 year ago.

                    A human being should be able to change a diaper, plan an invasion, butcher a hog, navigate a ship, design a building, write a sonnet, balance accounts, build a wall, set a bone, comfort the dying, take orders, give orders, cooperate, act alone, solve equations, analyze a new problem, pitch manure, program a computer, cook a tasty meal, fight efficiently, die gallantly. Specialization is for insects! - Lazarus Long

                    1 Reply Last reply
                    0
                    • realJSOPR realJSOP

                      New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                      ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                      -----
                      You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                      -----
                      When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                      M Offline
                      M Offline
                      MarkTJohnson
                      wrote on last edited by
                      #10

                      But you only have to make a C on the test. Really, only a C? Makes you wonder about the necessity of this training. Conversely Really, only a C? Cool I only have to halfway pay attention in class.

                      1 Reply Last reply
                      0
                      • realJSOPR realJSOP

                        New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                        ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                        -----
                        You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                        -----
                        When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                        S Offline
                        S Offline
                        SkysTheLimit
                        wrote on last edited by
                        #11

                        Thanks for the info. It looks quite arduous, especially since you need to meet some requirements to be re-certified every 3 years. It also encompasses a lot of different areas that a person may never be involved with. I feel your pain! I may have to go down that path as well in the future. :sigh:

                        1 Reply Last reply
                        0
                        • realJSOPR realJSOP

                          But I have to take the test to "prove my skills" (according to the ICS2 website). I do get a "digital badge" when I pass, so I guess, silver lining.

                          ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                          -----
                          You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                          -----
                          When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                          D Offline
                          D Offline
                          DRHuff
                          wrote on last edited by
                          #12

                          John Simmons / outlaw programmer wrote:

                          digital badge

                          Badges? We don't need no stinking badges! What's that? Oooooh - well apparently we do need stinking badges! My bad. :-D

                          Socialism is the Axe Body Spray of political ideologies: It never does what it claims to do, but people too young to know better keep buying it anyway. (Glenn Reynolds)

                          1 Reply Last reply
                          0
                          • realJSOPR realJSOP

                            New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                            ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                            -----
                            You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                            -----
                            When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                            M Offline
                            M Offline
                            MarkTJohnson
                            wrote on last edited by
                            #13

                            175 question 1000 points. Doesn't divide evenly. Try to find out which questions are the more weighty ones and focus on that material.

                            L realJSOPR 2 Replies Last reply
                            0
                            • realJSOPR realJSOP

                              New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                              ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                              -----
                              You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                              -----
                              When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                              M Offline
                              M Offline
                              Marc Clifton
                              wrote on last edited by
                              #14

                              And does all that time and effort and taxpayer cost actually improve application security????

                              Latest Article - A Concise Overview of Threads Learning to code with python is like learning to swim with those little arm floaties. It gives you undeserved confidence and will eventually drown you. - DangerBunny Artificial intelligence is the only remedy for natural stupidity. - CDP1802

                              D 1 Reply Last reply
                              0
                              • realJSOPR realJSOP

                                New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                                ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                                -----
                                You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                                -----
                                When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                                L Offline
                                L Offline
                                Lost User
                                wrote on last edited by
                                #15

                                Natural talents are born with all this.

                                They buy shoes, then they wear them! They make them sound old! Dairy! Dairy!

                                1 Reply Last reply
                                0
                                • realJSOPR realJSOP

                                  New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                                  ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                                  -----
                                  You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                                  -----
                                  When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                                  R Offline
                                  R Offline
                                  RickZeeland
                                  wrote on last edited by
                                  #16

                                  Here is a song to cheer you up: The Stranglers - Always The Sun - YouTube[^] :-\

                                  1 Reply Last reply
                                  0
                                  • realJSOPR realJSOP

                                    I dislike the over-the-f*ckin-top certification requirements imposed by the DoD. I think they have some as*hole sitting in a dark room somewhere in Washington trying to dream up ways to make working as a developer for the government the most distasteful job imaginable.

                                    ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                                    -----
                                    You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                                    -----
                                    When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                                    R Offline
                                    R Offline
                                    Rick York
                                    wrote on last edited by
                                    #17

                                    They seem to be succeeding.

                                    1 Reply Last reply
                                    0
                                    • realJSOPR realJSOP

                                      New DoD requirement for software developers that MUST be fulfilled by July 2019... CSSLP (certified secure software lifecycle professional) is a certification from (ISC)2 that focuses on application security within the software development lifecycle (SDLC). Launched in 2008, the CSSLP certification is designed for programmers, project managers, IT analysts or engineers involved in the SDLC. The certification's curriculum focuses on application vulnerabilities, risk and compliance issues that arise during the application development lifecycle and is broken down into eight domains: •Secure Software Concepts •Secure Software Requirements •Software Design •Secure Software Implementation/Coding •Secure Software Testing •Software Acceptance, Software Deployment •Operations, Maintenance and Disposal •Supply Chain and Software Acquisition CSSLP is intended to help candidates validate their expertise in application security, be able to better handle application vulnerabilities and demonstrate a working knowledge of application security. In order to be considered for the CSSLP certification, candidates must have at least four years cumulative paid full-time work experience in at least one of the eight domains of the CSSLP. Alternatively, candidates can substitute a year of this work experience with a four-year college degree in a related field. The CSSLP exam takes four hours to complete and consists of 175 multiple choice questions. Candidate need to achieve a minimum of 700 out of 1000 points to pass the exam and gain the certification.

                                      ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                                      -----
                                      You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                                      -----
                                      When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                                      S Offline
                                      S Offline
                                      SkysTheLimit
                                      wrote on last edited by
                                      #18

                                      Does this apply to ALL software developers working on DoD contracts or just those in certain roles?

                                      realJSOPR 1 Reply Last reply
                                      0
                                      • M MarkTJohnson

                                        175 question 1000 points. Doesn't divide evenly. Try to find out which questions are the more weighty ones and focus on that material.

                                        L Offline
                                        L Offline
                                        Lost User
                                        wrote on last edited by
                                        #19

                                        1 point for each question, 825 for getting your name right?

                                        1 Reply Last reply
                                        0
                                        • S SkysTheLimit

                                          Does this apply to ALL software developers working on DoD contracts or just those in certain roles?

                                          realJSOPR Offline
                                          realJSOPR Offline
                                          realJSOP
                                          wrote on last edited by
                                          #20

                                          From what I was told, it's all developers.

                                          ".45 ACP - because shooting twice is just silly" - JSOP, 2010
                                          -----
                                          You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
                                          -----
                                          When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013

                                          S J 2 Replies Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups