Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

ISC2 Partner of the Year

ISC2 CSSLP Self-Paced Training

Building security into every phase of the software lifecycle — requirements, architecture, coding, testing and deployment. Study every domain the exam tests, at whatever pace suits you.

Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Master CSSLP

On-Demand

Official ISC2

Authorized Training

Learn at Your Pace. Pass When You’re Ready.

Learn Smarter. Pass Faster. Now Adaptive!
AI-Powered Learning AI-powered personalized instruction adapts content, pace, and difficulty to your unique learning needs.
Your Success.

Official ISC2 Online Self-Paced Training uses artificial intelligence to customize your CSSLP learning journey—pinpointing areas that need focus and guiding you through exam prep in a way that's truly personalized.

Program Abstract

REF: CSSLP-2025 6
Curriculum aligned to the latest Exam Outline.
Format Self-Paced, Adaptive Learning
Access 180 Days

The CSSLP is Hard. We Know How to Pass It.

You don't need a classroom to pass the CSSLP—you need the right system. ISC2's adaptive learning platform uses AI to identify your knowledge gaps, adjust difficulty in real-time, and focus your study time where it matters most. With the official ISC2 eTextbook, interactive flash cards, domain quizzes, and 24/7 support, you'll build mastery at your own pace. When you're consistently scoring well on practice assessments, you'll know you're ready to pass.

AI-Powered Adaptive Learning.

Personalized instructionContent adapts to your knowledge, learning speed, and confidence level that identifies gaps in your knowledge and focuses your study time where it matters most.

Adaptive Engine
Adaptive Learning AI-Powered
Official ISC2 eTextbook Included
Course Access 180 Days
Exam Voucher INCLUDED

Official ISC2 Study Materials.

Official ISC2 eTextbookDigital textbook included—study on any device, interactive flash cards, domain quizzes, study sheets, and a complete glossary. Everything designed to work together.

Official Material

ISC2 eTextbook

Official digital textbook—read on any device, anywhere.

Assessment

Pre & Post Tests

Measure progress with course assessments and domain quizzes.

Study Tools

Flash Cards & Glossary

Interactive cards and comprehensive glossary of terms.

Study Sheets

Domain Quick Refs

Domain-by-domain key points for quick review.

180 Days + Exam Voucher.

Exam voucher includedYour CSSLP certification exam fee is included—schedule when ready.. 180 days to master the material at your own pace, then test when you're confident.

Day 1
Instant Access Start your adaptive learning journey immediately.
Begin Learning
180 Days Access
AI-Driven Progress The platform adapts to focus on areas you need most.
Build Mastery
When Ready
Exam Voucher Ready Schedule at Pearson VUE testing center or take remotely proctored.
Get Certified
·
CSSLP training materials including coursebook and study guides
Official ISC2
Authorized ISC2 courseware included.

"The adaptive learning really works—it identified my weak spots and focused my study time exactly where I needed it."

Self-Paced Student

Verified CSSLP Graduate

Why Adaptive Learning?

AI-Powered Results
AI

Personalized Path

The platform learns how you learn—adapting content difficulty and pacing to maximize retention.

  • Dynamic difficulty
  • Immediate feedback
âš¡

Efficient Study

Skip what you already know. Focus on gaps. The AI optimizes every minute of your study time.

  • Gap identification
  • Targeted support
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Official ISC2 Courseware

Authorized ISC2 courseware for the current CSSLP exam, updated as the exam changes.

Clock icon

180 Days of Access

Start the day you enroll and study on your own schedule for a full 180 days.

Flower icon

CSSLP Exam Voucher Included

Your exam fee is covered. Book the CSSLP exam with the testing provider when you feel ready.

Light bulb icon

Every Exam Domain Covered

All eight CSSLP domains, from Secure Software Concepts to Secure Software Supply Chain.

Stars icon

Practice Before You Sit

Practice questions and review tools so you can measure readiness before booking the CSSLP exam.

Sunglasses icon

DoD 8140 Approved

CSSLP is recognized under the DoD 8140 framework for qualifying cyber roles.

ISC2 CSSLP Self-Paced Training

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    What the CSSLP Exam
    Covers

    Every domain the exam tests, and what sits inside it.
    Work through them in any order, at whatever pace suits you.

    EXAM DOMAIN

    Self-Paced Topics: 8
    START HERE
    On the Exam

    Getting Started

    Activate ISC2 Adaptive Learning Platform Access and Profile
    L.prep.1
    Download the Official ISC2 CSSLP eTextbook and Flash Cards
    L.prep.2
    Review the CSSLP Exam Outline, Weights and Question Format
    L.prep.3
    Confirm Experience Requirements and Endorsement Process
    L.prep.4
    Complete the Baseline Knowledge Assessment Across All Domains
    L.prep.5
    Build a Weekly Study Planner for the 180-Day Window
    L.prep.6
    Set Up Domain Quizzes and Question Bank Review Habits
    L.prep.7
    Locate 24/7 Platform Support and Progress Dashboards
    L.prep.8

    EXAM DOMAIN

    Self-Paced Topics: 14
    DOMAIN 1
    On the Exam

    Secure Software Concepts (12%)

    Confidentiality, Integrity and Availability Applied to Software
    L.01.1
    Authentication, Authorization, Accountability and Non-Repudiation
    L.01.2
    Least Privilege, Separation of Duties and Defense in Depth
    L.01.3
    Fail Secure, Economy of Mechanism and Complete Mediation
    L.01.4
    Open Design, Least Common Mechanism and Psychological Acceptability
    L.01.5
    Component Reuse, Leveraging Existing Components and Diversity of Defense
    L.01.6
    Secure Defaults and Eliminating Single Points of Failure
    L.01.7
    Map Design Principles to Common Software Vulnerability Classes
    L.01.8
    Scenario Questions on Privacy and Confidentiality Trade-Offs
    L.01.9
    Chapter 1 eTextbook Reading and Flash Card Drill
    L.01.10
    Domain 1 Adaptive Quiz and Gap Analysis
    L.01.11
    Review Security Models and Access Control Terminology
    L.01.12
    Timed 25-Question Domain 1 Practice Set
    L.01.13
    Log Weak Topics in the Study Planner for Revisit
    L.01.14

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 2
    On the Exam

    Secure Software Lifecycle Management (11%)

    Integrating Security Into Waterfall, Agile, Scrum and DevOps
    L.02.1
    Secure Software Lifecycle Standards: ISO/IEC 27034, NIST SSDF, OWASP SAMM
    L.02.2
    Security Documentation, Release Notes and Standard Operating Procedures
    L.02.3
    Defining Security Metrics, KPIs and Defect Density Targets
    L.02.4
    Secure Software Governance Roles and Security Champions
    L.02.5
    Risk Management Frameworks Applied to the Software Lifecycle
    L.02.6
    Security Requirements in Outsourced and Contracted Development
    L.02.7
    Secure Software Decommissioning and End-of-Life Processes
    L.02.8
    Compare Security Activities Across Lifecycle Models
    L.02.9
    Scenario Questions on Measuring Program Effectiveness
    L.02.10
    Chapter 2 eTextbook Reading and Flash Card Drill
    L.02.11
    Domain 2 Adaptive Quiz and Gap Analysis
    L.02.12
    Review Change, Configuration and Version Control Terminology
    L.02.13
    Timed 25-Question Domain 2 Practice Set
    L.02.14
    Update Study Planner With Domain 2 Weak Areas
    L.02.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 3
    On the Exam

    Secure Software Requirements (13%)

    Functional Security Requirements and Non-Functional Quality Attributes
    L.03.1
    Misuse and Abuse Cases to Derive Security Requirements
    L.03.2
    Security Requirements Traceability Matrix and Acceptance Criteria
    L.03.3
    Identifying Compliance Requirements: PCI DSS, HIPAA, GDPR, SOX
    L.03.4
    Data Classification, Ownership, Labeling and Handling Requirements
    L.03.5
    Privacy Requirements: Data Anonymization, Retention and User Consent
    L.03.6
    Third-Party and Vendor Security Requirements in Contracts
    L.03.7
    Security Requirements for Interfaces and Operational Environment
    L.03.8
    Write Security Requirements From a Sample Business Case
    L.03.9
    Scenario Questions on Privacy by Design Obligations
    L.03.10
    Chapter 3 eTextbook Reading and Flash Card Drill
    L.03.11
    Domain 3 Adaptive Quiz and Gap Analysis
    L.03.12
    Review Data Classification and Regulatory Terminology
    L.03.13
    Timed 25-Question Domain 3 Practice Set
    L.03.14
    Update Study Planner With Domain 3 Weak Areas
    L.03.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 4
    On the Exam

    Secure Software Architecture and Design (15%)

    Threat Modeling With STRIDE, PASTA and Attack Trees
    L.04.1
    Architectural Risk Assessment and Attack Surface Evaluation
    L.04.2
    Security Architecture Patterns: Zero Trust, Microservices, Service-Oriented
    L.04.3
    Secure Interface Design: APIs, Protocols and Out-of-Band Management
    L.04.4
    Evaluating Technologies: Cloud, Containers, Mobile, IoT and Embedded
    L.04.5
    Cryptographic Design, Key Management and Secure Storage Decisions
    L.04.6
    Operational Architecture: CI/CD Pipelines, Logging and Monitoring
    L.04.7
    Secure Design Review, Documentation and Reusable Components
    L.04.8
    Threat Model a Sample Web Application Data Flow Diagram
    L.04.9
    Scenario Questions on Selecting Security Architecture Patterns
    L.04.10
    Chapter 4 eTextbook Reading and Flash Card Drill
    L.04.11
    Domain 4 Adaptive Quiz and Gap Analysis
    L.04.12
    Review Trust Boundaries, Zones and Data Flow Terminology
    L.04.13
    Timed 30-Question Domain 4 Practice Set
    L.04.14
    Update Study Planner With Domain 4 Weak Areas
    L.04.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 5
    On the Exam

    Secure Software Implementation (14%)

    Secure Coding Practices: Input Validation, Output Encoding, Error Handling
    L.05.1
    Memory Safety, Integer Overflow and Injection Prevention
    L.05.2
    OWASP Top 10 and CWE Top 25 Vulnerability Classes
    L.05.3
    Static Application Security Testing and Code Review Workflows
    L.05.4
    Dynamic and Interactive Application Security Testing
    L.05.5
    Implementing Security Controls: Session Management, Cryptography APIs
    L.05.6
    Integrating Third-Party Components and Software Composition Analysis
    L.05.7
    Securing the Build: Compiler Flags, Signing and Reproducible Builds
    L.05.8
    Identify Vulnerabilities in Sample Code Snippets
    L.05.9
    Scenario Questions on Choosing Static Versus Dynamic Analysis
    L.05.10
    Chapter 5 eTextbook Reading and Flash Card Drill
    L.05.11
    Domain 5 Adaptive Quiz and Gap Analysis
    L.05.12
    Review Defect Tracking, Severity Rating and Remediation Priority
    L.05.13
    Timed 30-Question Domain 5 Practice Set
    L.05.14
    Update Study Planner With Domain 5 Weak Areas
    L.05.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 6
    On the Exam

    Secure Software Testing (14%)

    Developing a Security Test Strategy and Test Plan
    L.06.1
    Security Test Cases From Requirements, Misuse Cases and Threat Models
    L.06.2
    Functional, Non-Functional, Regression and Integration Security Tests
    L.06.3
    Fuzzing, Vulnerability Scanning and Automated Security Testing
    L.06.4
    Penetration Testing, Simulation and Crypto Validation
    L.06.5
    Test Data Management, Masking and Production Data Protection
    L.06.6
    Verification and Validation Against Security Requirements
    L.06.7
    Tracking, Classifying and Reporting Security Test Results
    L.06.8
    Design Test Cases for a Sample Authentication Feature
    L.06.9
    Scenario Questions on Interpreting Scan and Pen Test Results
    L.06.10
    Chapter 6 eTextbook Reading and Flash Card Drill
    L.06.11
    Domain 6 Adaptive Quiz and Gap Analysis
    L.06.12
    Review Bug Bar, Severity and Exploitability Terminology
    L.06.13
    Timed 30-Question Domain 6 Practice Set
    L.06.14
    Update Study Planner With Domain 6 Weak Areas
    L.06.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 7
    On the Exam

    Secure Software Deployment, Operations, Maintenance (11%)

    Operational Risk Analysis Before Release and Deployment
    L.07.1
    Secure Configuration Management and Hardening of Runtime Environments
    L.07.2
    Secure Release Management and CI/CD Pipeline Controls
    L.07.3
    Continuous Monitoring, Logging and Security Information Sources
    L.07.4
    Software Incident Response, Root Cause Analysis and Disclosure
    L.07.5
    Patch and Vulnerability Management for Deployed Software
    L.07.6
    Business Continuity and Disaster Recovery for Software Services
    L.07.7
    Secure Software Maintenance and End-of-Life Transitions
    L.07.8
    Scenario Questions on Rollback, Hotfix and Patch Decisions
    L.07.9
    Walk Through a Software Incident From Detection to Lessons Learned
    L.07.10
    Chapter 7 eTextbook Reading and Flash Card Drill
    L.07.11
    Domain 7 Adaptive Quiz and Gap Analysis
    L.07.12
    Review Monitoring Metrics and Service Level Terminology
    L.07.13
    Timed 25-Question Domain 7 Practice Set
    L.07.14
    Update Study Planner With Domain 7 Weak Areas
    L.07.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 8
    On the Exam

    Secure Software Supply Chain (10%)

    Software Supply Chain Risk Management Across the Lifecycle
    L.08.1
    Analyzing Third-Party and Open-Source Software Security
    L.08.2
    Software Bill of Materials and Dependency Inventory
    L.08.3
    Verifying Pedigree and Provenance With Signing and Attestation
    L.08.4
    Supplier Security Requirements, Assessments and Monitoring
    L.08.5
    Contractual Obligations: SLAs, Right to Audit and Vulnerability Disclosure
    L.08.6
    Secure Software Acquisition and Vendor Maintenance Commitments
    L.08.7
    Supply Chain Frameworks: NIST SP 800-161, SLSA and SSDF
    L.08.8
    Scenario Questions on Evaluating a Compromised Dependency
    L.08.9
    Assess a Sample Vendor Against Supplier Security Requirements
    L.08.10
    Chapter 8 eTextbook Reading and Flash Card Drill
    L.08.11
    Domain 8 Adaptive Quiz and Gap Analysis
    L.08.12
    Review SBOM, Provenance and Attestation Terminology
    L.08.13
    Timed 25-Question Domain 8 Practice Set
    L.08.14
    Update Study Planner With Domain 8 Weak Areas
    L.08.15

    EXAM DOMAIN

    Self-Paced Topics: 8
    START HERE
    On the Exam

    Exam Prep

    Full-Length Timed CSSLP Practice Exam Under Exam Conditions
    L.prep.1
    Analyze Readiness Scores by Domain and Rank Weak Areas
    L.prep.2
    Targeted Re-Study of Lowest-Scoring Domains and Flash Cards
    L.prep.3
    Second Full-Length Practice Exam and Review of Missed Items
    L.prep.4
    Practice Answering From the Manager and Risk-Owner Perspective
    L.prep.5
    Schedule the Exam at a Pearson VUE Test Center With Your Voucher
    L.prep.6
    Exam-Day Logistics, Identification Rules and Time Management
    L.prep.7
    Exam: CSSLP
    L.prep.8
    COURSE PROGRESS Domain 0 of 9
    Frequently Asked Questions

    CSSLP Self-Paced
    Questions, Answered

    Real questions from real professionals who passed.
    Here's how we answer them.

    Official ISC2 courseware, on-demand video instruction, practice questions and your CSSLP exam voucher, with 180 days of access from enrollment. Everything is online, so you start the day you enroll.

    180 days from the date you enroll. There is no fixed schedule and no cohort to keep up with — you work through the material at whatever pace fits around your job.

    Yes. Your CSSLP exam voucher is included in the price, so there is nothing further to buy before you sit the exam. You book it with the testing provider once you are ready.

    CSSLP has eight exam domains: Secure Software Concepts, Secure Software Lifecycle Management, Secure Software Requirements, Secure Software Architecture and Design, Secure Software Implementation, Secure Software Testing, Secure Software Deployment, Operations and Maintenance, and Secure Software Supply Chain. The course is organized the same way, so each section maps to the domain it prepares you for.

    Yes. Training Camp is an authorized ISC2 training partner and this course uses official ISC2 CSSLP courseware, kept aligned to the current exam version.

    It suits developers, architects and QA engineers who build security into the software lifecycle. CSSLP is also approved under DoD 8140 for qualifying roles.

    Yes. Our Success Guarantee lets you apply 100% of your self-paced course investment toward any of our live CSSLP training classes within 30 days of your initial purchase. Contact the enrollment team and they will handle the transfer and help you pick a class date. Self-paced itself does not include an exam retake.

    Get the Free
    CSSLP Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    Industry
    Articles

    Dive into our library of articles covering today’s most in-demand IT certifications, from cybersecurity and cloud to networking and project management. You’ll find practical tips, exam prep strategies, and industry updates to help you advance your career.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    ★★★★★

    The ISSEP self-paced training fit into my weekends and lunch breaks perfectly. I liked that I could rewind and review sections, though I missed having live discu...

    NH
    Nic*** Har*** I**ormation Security Specialist
    ★★★★★

    I really liked the self-paced format because I could learn at my own speed, especially when reviewing risk management topics.

    DM
    Dav** Mon** C**er Technician
    ★★★★★

    I walked into the exam feeling completely prepared and passed on my first attempt.

    BD
    B Dan**** R** Lead
    ★★★★★

    The flexibility of this program was exactly what I needed. Being able to study on my own schedule made it possible to prep for certification without disrupting w...

    CJ
    Car*** Jim**** C**ersecurity Program Coordinator
    ★★★★★

    This OnDemand class, mixed with the live Training Camp review session was the perfect combo to pass the CISSP!

    Continue Your Journey

    CSSLP SP Related Courses

    Advance your career with these recommended certifications

    Featured on