ISC2 · CISSP
Software security assessment and acquired software
CISSP · Lesson 33 of 34 · 4:10:06
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 CISSP exam, on the 2027 outline. In this lesson: auditing and logging of changes, risk analysis and mitigation, commercial off-the-shelf software, open source and software composition analysis, third-party software, managed services, and SaaS, PaaS, IaaS, and FaaS. Includes three original practice questions.
Preview the topics
- A scan shows that a Larkspur application uses an open source library with a known critical vulnerability. Which tool found it?
- Larkspur uses an email service where the provider runs everything, up to the application. What does Larkspur still manage?
- A software vendor might go out of business. What protects Larkspur’s access to the code of a critical application?