CSSLP Cert Prep: 2 Secure Software Requirements

Learn how to define and validate security requirements for applications as you prepare for the second domain of the CSSLP exam: Secure Software Requirements.

Introduction

• Determining security requirements

1. Security Requirements

• Functional requirements
• Nonfunctional requirements
• Policy decomposition
• Legal, regulatory, and industry

2. Privacy Requirements

• Security vs. privacy
• Data anonymization
• User consent
• Disposition
• Private data storage

3. Data Classification Requirements

• Data ownership
• Labeling
• Types of data
• Data life cycle

4. Validating Your Requirements

• Misuse and abuse cases
• Software requirement specifications
• Security requirement traceability matrix

Conclusion

• Next steps