CertNexus Cyber Secure Coder Certification Details

Cyber Secure Coder

CSC is the comprehensive certification for validating secure coding practices — for all developers, in all programming languages, on all platforms. Build applications that stand up to real-world threats.

Mar 2020 Launch

80 Questions

60% Pass Score

Secure Coder Career Paths

CSC is designed for software developers, testers, and architects who develop in multiple programming languages for any platform and desire to build highly protected applications.

Lead Developer Jr. Programmer Application Tester / QA Tester Software Designer / Architect Security Developer DevSecOps Engineer Code Reviewer Full Stack Developer

CSC-210 Exam Details

The CSC exam certifies that candidates can design, develop, and test secure applications across multiple programming languages and platforms.

Exam Code

CSC-210

Launch Date

March 2020

Duration

120 Minutes

Questions

80 Items

Passing Score

60%

Exam Platform

Pearson VUE

Target Candidate

Software developers, testers, and architects who develop in multiple programming languages for any type of platform who desire or are required to develop highly protected applications for business and organizational use.

Why Get Cyber Secure Coder Certified?

Developers are tasked with ensuring software includes code that results in protected applications. CSC proves you can follow safe practices throughout the entire creative process.

🛡️

Prove Your Skills

Validate you can identify security vulnerabilities and remediate them throughout all phases of software development.

👨‍💻

Lead Secure Coding Teams

Ensure team members apply an approach that eliminates vulnerabilities from initial design through deployment.

🔐

Language Agnostic

CSC training uses Python and JavaScript to cover universal secure coding concepts applicable to any language.

🏛️

DoD 8140 Approved

CertNexus CSC certification has been DoD Directive 8140 approved for government and defense use.

Secure Coding Training

CertNexus CSC is the premier certification for those who address security issues in software creation. Using Python and JavaScript, CSC training teaches key concepts and reinforces through hands-on activities.

5-Module Comprehensive Curriculum

58 video classes spanning 70.5 working hours covering security concepts through application implementation.

Hands-On Coding Exercises

Practice secure coding techniques using Python and JavaScript with real vulnerability scenarios.

SDLC Security Integration

Learn how to embed security across every phase — design, development, review, testing, and deployment.

Pearson VUE Proctored Exam

Sit for the exam in person at Pearson VUE centers or online via Pearson OnVUE proctoring.

Course Modules

Five comprehensive modules covering secure application development from terminology through implementation and testing.

Basic security principles — encryption, CIA Triad, AAA, least privilege, defense in depth, fail safe, separation of duties

Common hacking terminology — black/gray/white hat, social engineering, vulnerability, exploits and attacks

Software development lifecycle — SDLC phases, Secure SDLC

Role of the designer/architect — design deliverables, whiteboarding, compliance assurance

Role of the developer — debugging tools, standard libraries and APIs

Role of the code reviewer — static analysis tools, dynamic code analysis tools

Role of the application tester — testing deliverables, penetration testing

Use and abuse cases — design intentions, attacks

Architecture best practices — modular design, design methodologies, security design patterns, identity management

Common regulations — HIPAA, PCI DSS, ISO 27001, SOX, country-specific privacy laws

Organizational requirements — internal processes and policies for secure software development

Common threats and vulnerabilities — OWASP Top 10, CWE/SANS Top 25, attack vectors, assets, risks, countermeasures

Risk assessment best practices — quantitative assessment, qualitative assessment, policy adjustments, architectural review

Input validation — input vulnerabilities, validation techniques

Restrict sensitive data output — output vulnerability, output security techniques

Implement cryptography — crypto libraries, key management, algorithm implementation, secure data storage

Authentication and access control — password verification, roles/permissions, session management, account lockouts

Error handling and logging — error message logging, security exception logging, log centralization

Communication security — SSL/TLS, encrypted tunnels, mobile app, IoT app, web services security

Security parameters and configuration — parameterizing security settings, configuration file protection

Secure database access — SQL injection prevention, connection access control