National CAE Designated Institution
  • Online, Instructor-Led
Course Description

Prerequisite: SDEV 360. An examination of the risks and threats associated with application development. The objective is to identify valuable assets, create system architecture diagrams, decompose applications, identify and prioritize threats, and document results in a threat model. Topics include security requirements and objectives, threat identification and mitigation, and calculating risk.

Learning Objectives

After completing this course, you should be able to:

  • Analyze the security and technical components of a software application
  • Document risk and threat models associated with a software application
  • Identify threats, attacks, vulnerabilities, and countermeasures to mitigate potential software vulnerabilities
  • Select and use appropriate tools to identify and mitigate risks in a software application

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Specialty Areas

  • Risk Management
  • Test and Evaluation