Ashford Global IT
1800 Pembrook Dr. Suite 300
Orlando, Florida 32810
Toll Free: (888) 838-5498
Local: (407) 612-6999
Domains of CISSP: Application Development Security
Overview
Application security refers to the controls that are included within systems and applications software and the steps used in their development. Applications refer to agents, applets, software, databases, data warehouses, and knowledge-based systems. These applications may be used in distributed or centralized environments.
The candidate should fully understand the security and controls of the systems development process, system life cycle, application controls, change controls, data warehousing, data mining, knowledge-based systems, program interfaces, and concepts used to ensure data and application integrity, security, and availability.
Key Areas of Knowledge
- Understand and apply security in the system life cycle
- Systems Development Life Cycle (SDLC)
- Maturity models
- Operation and maintenance
- Change Management
- Perform risk analysis
- Understand the application environment and security controls
- Security of the application environment
- Security issues of programming languages
- Security issues in source code (e.g., buffer overflow)
- Configuration management
- Assess the effectiveness of application security
- Certification and accreditation
- Auditing and logging
- Corrective actions
