CSSLP Domain 7: Secure Software Deployment, Operations, Maintenance

episode

InfosecTrain not yet transcribed

▲ 0

Transcript

This episode hasn't been transcribed yet Upvotes decide what gets transcribed next — 0 so far. Sign in to upvote

More from InfosecTrain

Security Architecture Explained: Zero Trust, AI, and Quantum 4 min · 20 Dec 2025

All episodes from InfosecTrain →

Report any issue

Source

Recorded15 Dec 2022

Publisheranchor.fm ↗

Handlerec:6459732

Show notes

(ISC)² ® CSSLP Domain 7: Secure Software Deployment, Operations, Maintenance (12%) CSSLP’s seventh domain accounts for 12% of the exam weightage. This domain explores the deployment process. When an application is developed, the next step is to arrange its deployment, which requires a safe environment in which the deployment process is accomplished. This domain covers continuous integration & continuous delivery (CI/CD) pipeline, secret codes that manage the application, disaster recovery, resiliency, and information security continuous monitoring (ISCM). It explains how to do patch management (e.g., secure release, testing) and vulnerability management (e.g., scanning, tracking, triaging). This domain is further divided into: Perform operational risk analysis Release software securely Securely store and manage security data Ensure secure installation Perform post-deployment security testing Obtain security approval to operate Perform information security continuous monitoring (ISCM) Support incident response Perform patch management Perform vulnerability management Runtime protection Support continuity of operations Integrate Service Level Objectives (SLO) and Service Level Agreements (SLA) Read More: (ISC)² ® CSSLP Domain 7: Secure Software Deployment, Operations, Maintenance

Ask this episode

“What did the council decide on item 42?” — answered with the speaker and the moment.