ISC2 · CISSP
Security in the SDLC and development ecosystems
CISSP · Lesson 32 of 34 · 4:03:24
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: Waterfall, Agile, SAFe, DevOps, and DevSecOps, CMM and SAMM, the NIST SSDF and SBOMs, shift left, memory safe languages, libraries, tool sets, IDEs, runtimes, CI/CD, repositories, SAST, and DAST. Includes three original practice questions.
Preview the topics
- A hospital buyer asks every software supplier for a machine-readable list of the components and dependencies inside each product. What is the buyer asking for?
- Larkspur wants to find SQL injection flaws in source code before the code even runs. Which testing fits?
- Which practice moves security into requirements, design, and coding, where flaws are cheaper to fix?