CSSLP Cert Prep: 8 Supply Chain and Software Acquisition

In this course—the eighth and final installment in the CSSLP Cert Prep series—explore what you need to know about the eighth exam domain: Secure Software Supply Chain.

Introduction

• Secure software supply chain

1. Supply Chain Risk Management

• Identity your risks
• Assess those risks
• Respond to those risks
• Monitor risks over time

2. Ensure Software Security

• Analyzing third-party software security
• Verifying pedigree and provenance

3. Get It in Writing

• Security in the acquisition process
• Contractual requirements

Conclusion

• Next steps