Secure Programming Foundation (S-SPF)

This secure programming course provides you with a hands-on introduction to secure software development. In this course, you will learn which programming errors can lead to software vulnerabilities, how these errors are exploited by attackers, and how software flaws that enable cyberattacks can be prevented.

The course is developed by security experts with extensive experience in software security, and offers an ideal combination of secure software design principles, threat modelling practice, TryHackMe lab exercises, interactive discussions and fresh insights from the industry.

Exam and Certification:

After this course, you will have the opportunity to demonstrate your knowledge through an online exam supervised by SECO-Institute. Successful candidates are awarded the prestigious S-SPF certification from SECO-Institute.

Benefits of Certification:

Demonstrable knowledge will significantly enhance your value as a professional for your organisation. Additionally, this certification by SECO-Institute ensures improved career prospects for you.

Delivery methods:

  1. Tutored online/ virtual training
  2. Classroom training

Objectives

By the end of this course, participants will be able to:

  • Understand the Secure Software Development Life Cycle (SSDLC) and grasp the fundamental principles of secure design, threat modelling and secure coding;
  • Understand what coding mistakes lead to insecure software and how vulnerabilities are exploited by hackers;
  • Understand how to analyse code, identify common mistakes that may lead to security problems, and verify the security of code;
  • Know how to perform threat modelling, identify threats and determine mitigations.

Pre-requisites

Experience with developing code in a team setting, basic knowledge of information security and familiarity with the most common types of vulnerabilities found in software is recommended.

Audience

This course is suitable for:

  • Software developers as well as security professionals;
  • (Aspiring) software engineers and auditors;
  • Future lead developers, architects and managers.

Training categories

Our cybersecurity trainers

Our cybersecurity trainers are seasoned professionals with extensive backgrounds in cybersecurity, risk management, information security and data-protection.

In-house training

All training courses provided by DNV can be provided as dedicated session customised to your organization.

APQP4Wind Training

APQP4Wind is the common frame of reference to be used in the industry to strengthen the cooperation between manufacturers and suppliers

Cybersecurity Training

Enable specialists and leaders alike to gain job-specific skills and practical knowledge to protect your company and advance your personal career needs.

Environment and energy training

Public concern on environment and energy issues, stricter environmental legislation and increased media attention put more demands on businesses today

Food safety training

The food and beverage industry is moving to satisfy demands from international consumers and to open new market opportunities

Health and safety training

Your company is expected to care for its employees by managing safety and health in a professional way

Healthcare training

Every patient and service user across the globe should get the best care possible

Medical devices training

Production of medical devices is a strictly regulated business. In almost all countries, and for most medical products, there are requirements and standards to which manufacturers need to show compliance

Quality & performance training

An effective quality management system in place can improve your company’s quality processes and overall performance and success

Social responsibility training

Ensuring your commitment to safeguard human rights and operate in an ethical, responsible manner is essential to instill ethical practices and promote a culture of corporate sustainability