CISSP Software Development Life Cycle (SDLC) Process Exam Important

[@forum88x]

Thanks Prabh for compiling them at one place! This is probably one of the only videos that has all the cycles in order wrt CBK and NIST. Appreciate the detailed walkthrough! I have been going through some of your videos and they really helped with my preparation for CISSP.

[@anuambuja5665]

😊

[@ratikabairathi2814]

SDLC seems confusing because of different sources stating different stages but you segregated it very well especially from Exam point of view. Thank you for the insightful video Prabh.

[@muhammadadnanbukhari3002]

Today I passed CISSP. Your videos helped me alot

[@sankarravichandran2057]

Excellent Prabh, looking forward more from you...

[@RockyRxx]

Passed my Cissp provisionally today… Thanks a lot Prabh for your selfless contribution to the world… Lots of love and gratitude

[@SannaRangappa-i1w]

Can you please the materials you have used to crack the exam

[@Rc28300]

Hey Prabh. This is really amazing and very helpful. Keep up the good work.

[@sagaryadwad6544]

Thanks alot prabh!!This is amazing and very much helpful..

[@Jana-dt5oi]

Thanks prabh, Its a helpful and Valuable session to understand SDLC

[@irfanhussain1199]

Good explanation and research on topics.. Thanks a lot

[@ahlekko]

very details ..10q very much

[@shraddhashirodkar27]

Very insightful!👏 I had a query - in the video, you mentioned that Brewer Nash is the security model that speaks about SOD. Just wanted to confirm if it is Brewer Nash or Clark Wilson.

[@estrategiaygestiondecibers1673]

Excelente muchas gracias

[@kennethdarlingsrensen2165]

Very useful, thank you Prabh!

[@donnyboy8195]

Thanks Sir, do you have a complete CISSP domains training videos

[@RockyRxx]

This is Gold Pabh... Amazing, can't thank you enough for the sheer hard work you put in

[@shanecoyleproperty]

Hi Prabh, in this video you are talking through the 'system' development lifecycle. Are there any differences in the steps with the 'software' development lifecycle?

[@hpaek1891]

At 18:40 you seem to say that there is a difference between 2 tests and say something about "..might have been exam ..4 NIST only don't get confused? "Can you write what you are saying there?

[@charlesecurity38162]

Thank you so much for that video

[@jimmy_dee]

Great video, thanks

[@jubairaladin5965]

Today, I have provisionally passed CISSP exam, thanks to your excellent youtube videos about critical CISSP contents

[@PrabhNair1]

Thanks bro Glad u find my videos useful

[@anshulsoni6543]

Hi Prabh, Can you create something for domain 7 in CISSP. I don't see any videos of yours for that domain. Thx.

[@anniepei]

how is testing different between phage 6 and phase 4 (development and implementation)?

[@PrabhNair1]

Questions number

[@anniepei]

@@PrabhNair1 video timestamp between 12:00 - 13:00, where test cases are built and conducted in phase 4, but in phase 6, the title says Testing - are the testings differ at this stage.

[@PrabhNair1]

@@anniepei that testing is called UAT from user prespective

[@yusufraza8513]

Hi Prabh, As you suggested I checked CBK 5th ed and found SDLC phases are very different with your CBK phases shown on slides , In CBK 5th ed Common SDLC phases are initiation, requirements, architecture, design, development, testing and validation, release and maintenance, and disposal. please let me know which one I should study.

[@PrabhNair1]

This is my old video and its based on cbk4 and NIST Don't worry by end of day concept remain same

[@kwokjason7297]

Please confirm Accreditation really occur in the Implementation Phase or it is actually started at the Development/Acquisition Phase.

[@PrabhNair1]

It occurred in the implementation phase because its an acceptance of management

[@kwokjason7297]

@@PrabhNair1 thanks. May I ask one more, which exact phase is to perform the functional security test?

[@PrabhNair1]

@@kwokjason7297 cbk based or nist :)

[@dattatrayphatnaik4735]

Don’t we do Theat modelling in Initiation phase than Risk assessment which can be followed once the application is ready to deliver? pls correct me.

[@PrabhNair1]

No until requirement and data flow we don't finalizes

[@samahalghamdi11]

hey Prabh, thanks for the excellent videos. are their list of all CISSP domains ?

[@Wellnesswithbinay]

Hi Prabh, Thank You so much for this video. In CBK 6th edition - SDLC is mentioned in 5 phases. More inline towards NIST. Do we still have to go through 9 phases ? and the comparison that you showed - Certificaiton and Accrediation is clubbed in Development/Acquisition Phase. Isn't it shall be in Implementation Phase ?

[@PrabhNair1]

Bro all are same

[@jackieo7113]

Awesome!

[@jesseverdi1839]

Hi Prabh, Is this System or Software SDLC? SP 800- 64, or 218? I think its the same but I would like to know what you think. Thanks

[@justincox399]

Hey Prahb, thank you so much for videos. My test is in a week. I noticed you chose attack surface analysis over risk analysis. I always thought risk analysis comes first. Or is this already after a risk analysis and we begin attack surface analysis. Cheers

[@PrabhNair1]

hey justin without attack surface analysis we will not able to perform risk analysis

[@navaneethakumar5536]

Can't the Risk analysis be proactive and take precedence..my thoughts

[@justincox399]

I trust your judgement as you are vetted and know the course content. Thank you.

[@PrabhNair1]

@@navaneethakumar5536 definitely it will be answered in the case if question lead to outcome question talk about sequence

[@prajaktashivarkar7019]

I agree that unit, integration and system testings belong to development phase but shon Harris book says testing phase .. confused

[@PrabhNair1]

Testing phase driven uat testing we dont have a source code access in testing phase

[@Joyvillecric]

Very helpful

[@Joyvillecric]

honestly you are "God of Information security. Awesome teaching skill.

[@dieglhix]

Thanks!

[@rajeshgopisetty2999]

Hi Prabh , I have been going through all your videos , which are very helpful in understanding the topics , you have mentioned in one of your session to go through the luke Ahmed study notes and theory for cissp questions , I am unable to get the subscription for that can you kindly help me with that

[@PrabhNair1]

www.studynotesandtheory.com/signup