Training Camp Adds (ISC)² CSSLP Secure Software Training

PHILADELPHIA — 2008 — Training Camp added a boot camp for the (ISC)² Certified Secure Software Lifecycle Professional, or CSSLP, in the same year the credential was introduced, aimed squarely at developers rather than network defenders.

(ISC)² launched CSSLP in 2008 to certify something the industry had mostly treated as an afterthought: security built into software while it is being written, not patched in after an incident. Where the CISSP spoke to security managers and defenders, CSSLP addressed the people who design, code, test, and maintain applications. It covered secure requirements, design, implementation, testing, and the later stages of the software lifecycle.

The timing mattered. Web applications had become a common point of compromise, and a growing share of breaches traced back to flaws baked into code long before deployment. Teaching developers to think about input validation, threat modeling, and secure design early was cheaper and more durable than cleaning up afterward. The credential gave that skill set a name and a way to prove it.

The boot camp is written for practicing software professionals: developers, architects, QA engineers, and the project leads who sit between them. Training Camp runs it as an in-person, hands-on week, working through each lifecycle phase and preparing candidates to sit the exam. It is not an introduction to programming, and it is not a general security overview. It assumes people who already ship software and want to ship it more securely.

“For years security was something you added after the fact, usually after something went wrong,” said Chris Porter, Chief Executive Officer. “CSSLP put the responsibility with the people writing the code, which is where a lot of the real fixes actually live.”

Secure software development was becoming its own discipline, distinct from network defense, and the CSSLP gave developers a recognized way to demonstrate it.

About Training Camp: Training Camp delivers accelerated, exam-focused certification boot camps for IT and cybersecurity professionals, working with major certifying bodies to prepare individuals as well as corporate, government, and military teams.

Media Contact: Magnus Carter, mcarter@trainingcamp.com