Re: [SC-L] CSSLP

2009-03-23 Thread Paco Hope
On 3/21/09 6:43 PM, Jim Manico j...@manico.net wrote: What really bothers me is that the CSSLP looks appsec operations focused - not developer SDLC focused (or so I've heard). The SANS cert for software security seems to drill a lot more into actual activities a developer should take in order

Re: [SC-L] CSSLP

2009-03-23 Thread Rob Floodeen
Paco, Does certification belong in the realm of Secure Coding? What is it we are really trying to achieve with a certification? -Rob On Mon, Mar 23, 2009 at 4:22 PM, Paco Hope p...@cigital.com wrote: On 3/21/09 6:43 PM, Jim Manico j...@manico.net wrote: What really bothers me is that the