National CAE Designated Institution
  • Online, Instructor-Led

Prerequisite: SDEV 360. An examination of the risks and threats associated with application development. The objective is to identify valuable assets, create system architecture diagrams, decompose applications, identify and prioritize threats, and document results in a threat model. Topics include security requirements and objectives, threat identification and mitigation, and calculating risk.

Learning Objectives

After completing this course, you should be able to:

  • Analyze the security and technical components of a software application
  • Document risk and threat models associated with a software application
  • Identify threats, attacks, vulnerabilities, and countermeasures to mitigate potential software vulnerabilities
  • Select and use appropriate tools to identify and mitigate risks in a software application

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Risk Management
  • Test and Evaluation

Specialty Areas have been removed from the NICE Framework. With the recent release of the new NICE Framework data, updates to courses are underway. Until this course can be updated, this historical information is provided to give better context as to how it can help you with your cybersecurity goals.

Feedback

If you would like to provide feedback for this course, please e-mail the NICCS SO at NICCS@hq.dhs.gov.