CSSLP – The Industry’s Premier Secure Software Development Certification
Become a CSSLP – Certified Secure Software Lifecycle Professional
Earning the globally recognized CSSLP secure software development certification is a proven way to build your career and better incorporate security practices into each phase of the software development lifecycle (SDLC).
CSSLP certification recognizes leading application security skills. It shows employers and peers you have the advanced technical skills and knowledge necessary for authentication, authorization and auditing throughout the SDLC using best practices, policies and procedures established by the cybersecurity experts at (ISC)².
Prove your skills, advance your career, and gain support from a community of cybersecurity leaders here to help you throughout your professional journey.
First step: become an (ISC)² Candidate
Start strong on your path to CSSLP certification as an (ISC)² Candidate. You’ll save 20% on Official (ISC)² Online Instructor-Led Training so you can start preparing for the exam. You’ll also access a long list of career-building benefits, including:
- Professional development
- Events
- Peer-to-peer networking
- Volunteer opportunities and more!
Sign up now. Your first year is free — no cost to you.*
*If you choose to renew after the first year, U.S. $50 due annually.
Become an (ISC)² Candidate Get New Pricing For Online Training
Please Note: Effective September 15, 2023, the CSSLP exam will be based on a new exam outline. Please refer to the CSSLP Exam Outline and FAQs for details.
Already an (ISC)² Member? Claim your 20% discount.
Free CSSLP Ultimate Guide
Learn everything you need to know about preparing for the CSSLP exam, including:
- Why you should get certified
- CSSLP Fast Facts
- What to expect on the exam
- How to prepare for the exam
- Value of (ISC)² certification
Your Pathway to Certification
- 1 Ensure the CSSLP is Right for You
- 2 Register and Prepare for the Exam
- 3 Get Certified
- 4 Become an (ISC)² Member
Who Earns the CSSLP?
The CSSLP is ideal for software development and security professionals responsible for applying best practices to each phase of the SDLC – from software design and implementation to testing and deployment – including those in the following positions:
- Software Architect
- Software Engineer
- Software Developer
- Application Security Specialist
- Software Program Manager
- Quality Assurance Tester
- Penetration Tester
- Software Procurement Analyst
- Project Manager
- Security Manager
- IT Director/Manager
Work in government? See how the CSSLP meets the U.S. Department of Defense (DoD) Directive 8570.1.
Is the CSSLP Right for You?
The CSSLP isn’t the best cybersecurity certification option for everyone. Before you start down your certification path, make sure you aren’t missing an opportunity to pursue a credential more aligned with your immediate career goals.
Our broad portfolio of accredited security certifications, include:
Entry-level Certification
Cybersecurity Strategy and Implementation
IT/ICT Security Administration
Cloud Security
Security Assessment and Authorization
Healthcare Security & Privacy
What will You Need to Know to Pass the CSSLP Exam?
The CSSLP exam evaluates your expertise across eight security domains. Think of the domains as topics you need to master based on your professional experience and education.
CSSLP Domains
- Domain 1.Secure Software Concepts
- Domain 2. Secure Software Requirements
- Domain 3. Secure Software Architecture and Design
- Domain 4. Secure Software Implementation
- Domain 5. Secure Software Testing
- Domain 6. Secure Software Lifecycle Management
- Domain 7. Secure Software Deployment, Operations, Maintenance
- Domain 8. Secure Software Supply Chain
Please Note: Effective September 15, 2023, the CSSLP exam will be based on a new exam outline. Please refer to the CSSLP Exam Outline and FAQs for details.
Register for Your CSSLP Exam
Don’t wait. If you’re ready to pursue the CSSLP secure software development certification, commit yourself now by registering for the exam.
Schedule your exam by creating an account with Pearson VUE, the leading provider of global, computer-based testing for certification and licensure exams. You can find details on testing locations, policies, accommodations and more on their website.
Get CSSLP Training that's Right for You
With instructor-led online and classroom courses, (ISC)² has a training option to fit your schedule and learning style. Trainings, seminars, courseware and self-study aids directly from (ISC)² or one of our many Official Training Providers help you get ready for the rigorous CSSLP exam by reviewing relevant domains and topics. Visit the (ISC)² Training Finder to register for the course that best meets your needs, including:
(ISC)² Self-Study Tools Keep Your Skills Sharp
Studying on your own or looking for a supplement to your seminar courseware? Check out our official self-study tools:
- Official textbooks: What you need to know to be successful and review relevant domains.
- Official study guides: Strengthen your knowledge in a specific domain and get in more exam practice time.
- Official study flash cards: Prepare for the CSSLP exam anytime, anywhere.
Gain the Necessary Work Experience
To qualify for this certification, you must pass the exam and have at least four years of cumulative, paid work experience as a software development lifecycle professional in one or more of the eight domains of the (ISC)² CSSLP Common Body of Knowledge (CBK).
Learn more about CSSLP Experience Requirements and how a relevant four-year degree can satisfy one year of required experience.
Don’t have enough experience yet? You can still pass the CSSLP exam and become an Associate of (ISC)² while you earn the required work experience.
Complete the Certification Application Process
Once you receive notification informing you that you have successfully passed the exam, you can start the online certification application process. This process attests that your assertions regarding professional experience are true, that you are in good standing within the cybersecurity industry. It also contains the agreements to abide by the (ISC)² Code of Ethics and privacy policy.
Agree to the (ISC)² Code of Ethics
All information security professionals who are certified by (ISC)² recognize that such certification is a privilege that must be both earned and maintained. All (ISC)² members are required to commit to fully support (ISC)² Code of Ethics Canons:
- Protect society, the common good, necessary public trust and confidence, and the infrastructure.
- Act honorably, honestly, justly, responsibly, and legally.
- Provide diligent and competent service to principles.
- Advance and protect the profession.
Pay Your First Annual Maintenance Fee
Annual Maintenance Fees (AMFs) are used by (ISC)² to support the costs of maintaining the (ISC)² certifications and related support systems.
Certified Members AMFs
(ISC)² certified members pay a single AMF of U.S. $125 which is due each year upon the anniversary of their certification date. Members only pay a single AMF of U.S. $125 regardless of how many certifications they earn. AMFs for members with multiple certifications are due on their earliest certification anniversary.
Associates of (ISC)² AMFs
Associates of (ISC)² pay an AMF of U.S. $50 which is due each year upon the anniversary of achieving their associate status.
Join A Global Community Of Cybersecurity Leaders
Once you are certified and become an (ISC)² member, you’re a part of a global community of certified cybersecurity professionals focused on inspiring a safe and secure cyber world. In addition to that extensive network, a wealth of continuing education opportunities help you keep your skills sharp, informed of the latest trends and best practices, and ensures your expertise remains relevant throughout your career. Learn more about (ISC)² member benefits.
The CSSLP is ideal for software development and security professionals responsible for applying best practices to each phase of the SDLC – from software design and implementation to testing and deployment – including those in the following positions:
- Software Architect
- Software Engineer
- Software Developer
- Application Security Specialist
- Software Program Manager
- Quality Assurance Tester
- Penetration Tester
- Software Procurement Analyst
- Project Manager
- Security Manager
- IT Director/Manager
Work in government? See how the CSSLP meets the U.S. Department of Defense (DoD) Directive 8570.1.
Is the CSSLP Right for You?
The CSSLP isn’t the best cybersecurity certification option for everyone. Before you start down your certification path, make sure you aren’t missing an opportunity to pursue a credential more aligned with your immediate career goals.
Our broad portfolio of accredited security certifications, include:
Entry-level Certification
Cybersecurity Strategy and Implementation
IT/ICT Security Administration
Cloud Security
Security Assessment and Authorization
Healthcare Security & Privacy
The CSSLP exam evaluates your expertise across eight security domains. Think of the domains as topics you need to master based on your professional experience and education.
CSSLP Domains
- Domain 1.Secure Software Concepts
- Domain 2. Secure Software Requirements
- Domain 3. Secure Software Architecture and Design
- Domain 4. Secure Software Implementation
- Domain 5. Secure Software Testing
- Domain 6. Secure Software Lifecycle Management
- Domain 7. Secure Software Deployment, Operations, Maintenance
- Domain 8. Secure Software Supply Chain
Please Note: Effective September 15, 2023, the CSSLP exam will be based on a new exam outline. Please refer to the CSSLP Exam Outline and FAQs for details.
Register for Your CSSLP Exam
Don’t wait. If you’re ready to pursue the CSSLP secure software development certification, commit yourself now by registering for the exam.
Schedule your exam by creating an account with Pearson VUE, the leading provider of global, computer-based testing for certification and licensure exams. You can find details on testing locations, policies, accommodations and more on their website.
Get CSSLP Training that's Right for You
With instructor-led online and classroom courses, (ISC)² has a training option to fit your schedule and learning style. Trainings, seminars, courseware and self-study aids directly from (ISC)² or one of our many Official Training Providers help you get ready for the rigorous CSSLP exam by reviewing relevant domains and topics. Visit the (ISC)² Training Finder to register for the course that best meets your needs, including:
(ISC)² Self-Study Tools Keep Your Skills Sharp
Studying on your own or looking for a supplement to your seminar courseware? Check out our official self-study tools:
- Official textbooks: What you need to know to be successful and review relevant domains.
- Official study guides: Strengthen your knowledge in a specific domain and get in more exam practice time.
- Official study flash cards: Prepare for the CSSLP exam anytime, anywhere.
To qualify for this certification, you must pass the exam and have at least four years of cumulative, paid work experience as a software development lifecycle professional in one or more of the eight domains of the (ISC)² CSSLP Common Body of Knowledge (CBK).
Learn more about CSSLP Experience Requirements and how a relevant four-year degree can satisfy one year of required experience.
Don’t have enough experience yet? You can still pass the CSSLP exam and become an Associate of (ISC)² while you earn the required work experience.
Complete the Certification Application Process
Once you receive notification informing you that you have successfully passed the exam, you can start the online certification application process. This process attests that your assertions regarding professional experience are true, that you are in good standing within the cybersecurity industry. It also contains the agreements to abide by the (ISC)² Code of Ethics and privacy policy.
Agree to the (ISC)² Code of Ethics
All information security professionals who are certified by (ISC)² recognize that such certification is a privilege that must be both earned and maintained. All (ISC)² members are required to commit to fully support (ISC)² Code of Ethics Canons:
- Protect society, the common good, necessary public trust and confidence, and the infrastructure.
- Act honorably, honestly, justly, responsibly, and legally.
- Provide diligent and competent service to principles.
- Advance and protect the profession.
Pay Your First Annual Maintenance Fee
Annual Maintenance Fees (AMFs) are used by (ISC)² to support the costs of maintaining the (ISC)² certifications and related support systems.
Certified Members AMFs
(ISC)² certified members pay a single AMF of U.S. $125 which is due each year upon the anniversary of their certification date. Members only pay a single AMF of U.S. $125 regardless of how many certifications they earn. AMFs for members with multiple certifications are due on their earliest certification anniversary.
Associates of (ISC)² AMFs
Associates of (ISC)² pay an AMF of U.S. $50 which is due each year upon the anniversary of achieving their associate status.
Once you are certified and become an (ISC)² member, you’re a part of a global community of certified cybersecurity professionals focused on inspiring a safe and secure cyber world. In addition to that extensive network, a wealth of continuing education opportunities help you keep your skills sharp, informed of the latest trends and best practices, and ensures your expertise remains relevant throughout your career. Learn more about (ISC)² member benefits.
Interested in CSSLP certification for your team? Learn more about (ISC)² Enterprise Solutions.
Certification Magazine lists the top 75 certifications in its 2021 Annual Salary Survey. The CSSLP is listed among the top 50 certifications that IT professionals aspire to achieve within the next 12 months. See what CSSLPs are earning in the Salary Survey.
Did you know? Our certifications are accredited, recognized and endorsed by leading organizations around the world.
Connect with other professionals on the (ISC)² Community. Join the virtual CSSLP Study Group.
Free CSSLP Ultimate Guide
Lead the Way in Developing Secure Software