Secure Coding, Risk Assessment & Remediation
Find and fix insecure code, assess risk with a likelihood-times-impact register, and manage remediation from ticket to verified fix. Connects engineering practice to the risk decisions government managers must defend.
- Level
- Intermediate
- Study time
- 7 hours
- Lessons
- 5
- Practice labs
- 4
- Assessments
- 2
- Format
- Self-paced, online
What you will learn
By the end of this course you will be able to:
- Describe a secure SDLC and apply a code review checklist
- Identify hard-coded secrets, injection and access-control flaws in code
- Score and prioritise a risk register using likelihood and impact
- Choose a risk treatment option and justify it
- Write a remediation ticket and verify closure from a re-scan
Before you start
Basic programming (Python or JavaScript) and SQL; familiarity with web applications
Tools you will use
Course outline
5 lessons in 2 modules.
Module 1: Secure engineering
- Secure SDLC and code review checklists
- Input validation and injection
- Secrets, dependencies and access-control mistakes
Module 2: Risk and remediation
- Risk assessment and the risk register
- Treatment, frameworks and remediation tickets
Practice labs and assessments
Labs run in the browser as simulations. They never touch a real system.
4 practice labs
- Find secrets and unsafe code in snippets Beginner, 30 min
- Score and prioritise the risk register Intermediate, 30 min
- Dependency audit report triage Intermediate, 30 min
- Final: choose treatments and verify fixes from a re-scan Advanced, 40 min, final lab
2 assessments
- Secure coding and risk knowledge check
- Secure coding, risk and remediation final quiz
The pass mark is 70%. You can retake an assessment.
Take Secure Coding, Risk Assessment & Remediation
Request access and your instructor will set up your account.