From the course: CSSLP Cert Prep: 5 Secure Software Testing

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Security implications of test results

Security implications of test results

From the course: CSSLP Cert Prep: 5 Secure Software Testing

Start my 1-month free trial

Security implications of test results

- [Instructor] Once you've got your security test results in hand, you'll need to decide what to do with them. It's important that you have a plan for how you'll prioritize your findings and that you understand the impact that your test results will have on product management. It's also important to understand when you might break the build and what you should do when that happens. This may not be easy to hear, but you might not be able to fix all the issues you find during your security testing. Every company I've ever worked for has had limited budgets and impending deadlines, and part of being a CSSLP is helping teams make decisions about how to prioritize their remediation activities. As security professionals, we tend to start with the security impact, but a more mature security professional will include the potential business impact when discussing any security findings with the dev team, take password management…

Contents