NUS
 
ISS
 

Secure Software Development Lifecycle for Agile

Overview

Reference No TGS-2020001465
Part of Graduate Certificate in Securing Ubiquitous Systems
Duration 3 days
Course Time 9:00am - 5:00pm
Enquiry Please contact ask-iss@nus.edu.sg for more details.

In light of heightened information security concerns, software development lifecycle processes must be approached through implementation of ‘Secure by Design’ practices.

Without such focus on designing secure software applications, security exposures may lead to serious breaches or costly redevelopment.

Hence, software developers must be trained to understand security concerns, where they may impact on the solution, and be able to implement the application in a security-aware manner.  They must also be able to conduct security risk assessments and incorporate suitable mitigation measures in their software design.

Software is increasingly being developed within an agile project framework, such as Scrum. Such frameworks encourage iterative and incremental development in multiple iterations or sprints.

The objective of this course is to instill ‘Secure by Design’ practices into the agile software development process so as to enable the team to produce applications that meet security requirements.

This course is part of the Cybersecurity series, Software Systems series, Digital Strategy & Leadership series as well as Graduate Certificate in Securing Ubiquitous Systems series offered by NUS-ISS. 

CPE-Submitter
(ISC)² members could earn up to 13 Continuing Professional Education (CPEs Group A) credits after completion of this course. CPEs will be submitted automatically to the (ISC)² members' accounts (Member ID required) within 4-6 weeks.


Upcoming Classes

Class 1 04 Sep 2024 to 06 Sep 2024 (Full Time)

Duration: 3 days

Time:
09:00am to 05:00pm

Class 2 15 Feb 2025 to 01 Mar 2025 (Full Time)

Duration: 3 days

Time:
09:00am to 05:00pm



Key Takeaways

On completion of the course, participants will be able to:

  • Understand the importance of designing secure software applications, risks and mitigations
  • Identify key Bodies of Knowledge for secure software development
  • Adopt secure development practices within an existing process
  • Adopt secure development practices for the end-to-end processes 
(ISC)² members could earn up to 13 Continuing Professional Education (CPEs Group A) credits after completion of this course. CPEs will be submitted automatically to the (ISC)² members' accounts (Member ID required) within 4-6 weeks.



Who Should Attend

  • System Analysts
  • Software Architects
  • Software Engineers
  • DevOps Engineers
  • Project Managers
  • Project Leaders

Prerequisites
Some experience or knowledge in software development

What to Bring

No printed copies of course materials are issued.
Participants must bring their internet-enabled computing device (laptops, tablet etc) with power charger to access and download course materials. No printed copies of course materials are issued.

If you are bringing a laptop, please see below for the tech specs:

 

Minimum

Recommended

Computer and processor

1.6 GHz or faster, 4-core Intel Core i5 or equivalent

1.8 GHz, 4-core Intel Core i7 or equivalent

Memory

8GB RAM

16GB RAM

Hard Disk

256 GB disk size, with 30GB of available disk space

256 GB disk size, with 40GB of available disk space

Display

1280 x 768 screen resolution (32-bit requires hardware acceleration for 4K and higher)

 

Graphics

Graphics hardware acceleration requires DirectX 9 or later, with WDDM 2.0 or higher for Windows 10 (or WDDM 1.3 or higher for Windows 10 Fall Creators Update).

DirectX 10 graphics card for graphics hardware acceleration

Others

An internet connection – broadband wired or wireless

Speakers and a microphone – built-in or USB plug-in or wireless Bluetooth

A webcam or HD webcam - built-in or USB plug-in

 

Software VirtualBox, Microsoft Word, Excel VirtualBox, Microsoft Word, Excel




What Will Be Covered

  • Security aspects of software solutions
  • Secure software lifecycle frameworks
  • Designing secure software applications within an agile SDLC
  • Formulating software security requirements
  • Threat modelling and software architectural analysis
  • Secure design principles
  • Secure coding practices
  • Security quality assurance and testing
  • Bridging Security and DevOps
  • Hands-on workshops with simulation of application security attacks
    • Linux virtual machine will be provided, with pre-installed security tools and multiple sample applications

Format

Lectures and workshops




Fees & Subsidies

Fees for 2024
  Full Fee Singaporeans & PRs
(self-sponsored)
Full course fee S$2700 S$2700
ISS Subsidy  - (S$270)
Nett course fee S$2700 S$2430
9% GST on nett course fee S$243 S$218.70
Total nett course fee payable, including GST S$2943 S$2648.70
Note:
  1. All fees and subsidies are valid from January 2024, unless otherwise advised.
  2. All self-sponsored Singaporeans aged 25 and above can use their SkillsFuture Credit to pay for course fees. For more information about SkillsFuture Credit, click here.
  3. From 1st January 2024, the GST will be increased to 9%.



loading

Certificate

Certificate of Completion
Participants have to meet a minimum attendance rate of 75% and are required to pass the assessment to be issued a Certificate of Completion.




Preparing for Your Course

NUS-ISS Course Registration Terms and Conditions

Find out more.

NUS-ISS and Learner’s Commitment and Responsibilities

Find out more.

WIFI Access

WIFI access will be made available to participants.

Venue

NUS-ISS
25 Heng Mui Keng Terrace
Singapore 119615

Click HERE for directions to NUS-ISS

In the event of a change of venue, participants are advised to refer to the acceptance email sent one week prior to the commencement date.

Course Confirmation

All classes are subject to confirmation and NUS-ISS will send an acceptance email to participants one week prior to the commencement date. Confirmed registrants are to attend and complete all lectures, class exercises, workshops and assessments (where applicable). Additionally, all responses to feedbacks and surveys conducted by NUS-ISS and its partners must be submitted. All training and assessments will be delivered as described in the course webpage.

General Enquiry

Please feel free to write to ask-iss@nus.edu.sg if you have any enquiry or feedback.




Course Resources

Develop your Career in the Following
Training Roadmap(s)

Please click on the discipline(s) to view the training roadmap of related courses to assess your training needs and goals.

Software Systems

Architecting the backbones of smart cities

Read More
Digital Strategy & Leadership

Develop leadership and strategy capabilities to lead digital transformation in your organisation

Read More
Cybersecurity

Protecting your organisation against cyberthreats in a hyper-connected world

Read More

You Might be Interested in...

A+
A-
Scrolltop