OutSystems Security Specialist study guide
OutSystems Security Specialist · Work through your exam, one topic at a time.
The Security Specialist (O11 and ODC) is a Specialization exam in the OutSystems Certification program. OutSystems describes Specializations as shorter exams focused on a specific topic or area, which can serve as the final outcome for a role or experience level, or as a path to a new certification. This one focuses on fundamental knowledge of security best practices, including authentication, access control, secure connections, handling sensitive data, and related topics. It is aimed at developers who are fairly autonomous in designing OutSystems Reactive Web applications that follow security best practices, and OutSystems positions it as an important step toward becoming an OutSystems Professional Web/Mobile Developer. The OutSystems Security Specialist study guide has 5 sections and about 1,653 words.
01Authentication
Authentication on OutSystems separates IT users from end users. IT users sign in to LifeTime and Service Center to build, deploy, and operate apps.
365 words, about 2 min02Access control
Access control in OutSystems is role-based and enforced server-side. Roles are defined inside modules, granted to users or groups, and checked on screens, exposed integrations, and entity operations.
349 words, about 2 min03Secure connections
Secure connections cover TLS for browser traffic, certificates, and outbound integrations. The exam checks whether you can keep data encrypted in transit and avoid weakening certificate validation for convenience.
310 words, about 2 min04Handling sensitive data
Sensitive data handling is about classifying data, minimizing collection, protecting it at rest and in transit, and preventing leaks through UI, logs, and errors. OutSystems gives you platform controls, but design decisions determine whether they work.
332 words, about 2 min05Security best practices
Security best practices cover secure development lifecycle, least privilege, platform hygiene, and monitoring. The exam expects judgment: which controls to apply before go-live and how to keep them effective after deployment.
297 words, about 1 min