CISAW Secure Software study materials
CISAW Secure Software study resources

CISAW Secure Software study plan

CISAW Secure Software · Give each week a clear focus.

8 weeks · About 5 hours per week

Week 1

Security foundations, governance and Chinese context

  • Review Security foundations, governance and Chinese context using the mapped guide and reference terms.

  • Attempt relevant questions before reading answers and explain the distinction or calculation.

Your checkpoint

A checked study log for Security foundations, governance and Chinese context, with supporting reasoning and unresolved questions.

Week 2

Identity, access and cryptographic protection

  • Review Identity, access and cryptographic protection using the mapped guide and reference terms.

  • Attempt relevant questions before reading answers and explain the distinction or calculation.

Your checkpoint

A checked study log for Identity, access and cryptographic protection, with supporting reasoning and unresolved questions.

Week 3

Application and data protection

  • Review Application and data protection using the mapped guide and reference terms.

  • Attempt relevant questions before reading answers and explain the distinction or calculation.

Your checkpoint

A checked study log for Application and data protection, with supporting reasoning and unresolved questions.

Week 4

Secure development, review and software supply chain

  • Review Secure development, review and software supply chain using the mapped guide and reference terms.

  • Attempt relevant questions before reading answers and explain the distinction or calculation.

Your checkpoint

A checked study log for Secure development, review and software supply chain, with supporting reasoning and unresolved questions.

Week 5

Vulnerability discovery, prioritization and verification

  • Review Vulnerability discovery, prioritization and verification using the mapped guide and reference terms.

  • Attempt relevant questions before reading answers and explain the distinction or calculation.

Your checkpoint

A checked study log for Vulnerability discovery, prioritization and verification, with supporting reasoning and unresolved questions.

Week 6

Security operations, monitoring and response

  • Review Security operations, monitoring and response using the mapped guide and reference terms.

  • Attempt relevant questions before reading answers and explain the distinction or calculation.

Your checkpoint

A checked study log for Security operations, monitoring and response, with supporting reasoning and unresolved questions.

Week 7

Security foundations, governance and Chinese context & Identity, access and cryptographic protection & Application and data protection & Secure development, review and software supply chain & Vulnerability discovery, prioritization and verification & Security operations, monitoring and response & Cyber-risk identification and analysis

  • Apply the cases before reading model responses.

  • Retest recurring errors with a mixed set and compare preparation with the actual syllabus.

Your checkpoint

A checked study log for Security foundations, governance and Chinese context, Identity, access and cryptographic protection, Application and data protection, Secure development, review and software supply chain, Vulnerability discovery, prioritization and verification, Security operations, monitoring and response, Cyber-risk identification and analysis, with supporting reasoning and unresolved questions.

Week 8

Security foundations, governance and Chinese context & Identity, access and cryptographic protection & Application and data protection & Secure development, review and software supply chain & Vulnerability discovery, prioritization and verification & Security operations, monitoring and response & Cyber-risk identification and analysis

  • Apply the cases before reading model responses.

  • Retest recurring errors with a mixed set and compare preparation with the actual syllabus.

Your checkpoint

A checked study log for Security foundations, governance and Chinese context, Identity, access and cryptographic protection, Application and data protection, Secure development, review and software supply chain, Vulnerability discovery, prioritization and verification, Security operations, monitoring and response, Cyber-risk identification and analysis, with supporting reasoning and unresolved questions.

Milestones

Week 2: Explain the principal concepts using evidence rather than memorized option positions.

Week 5: Apply subject concepts to cases and identify assumptions and limits.

Week 8: Review mixed performance and the exact current qualification requirements.