Does WEBSEC have an exam of its own?

The Albion WEBSEC course has no exam and earns CPSA-A credit points. Certification involves an assignment and an oral exam assessed by experts appointed by the iSAQB, after all admission requirements have been met.

How many credit points does WEBSEC carry?

The Albion WEBSEC course carries 30 credit points under the iSAQB WEBSEC curriculum 2020.1: 20 in technical competence, 10 in methodical competence and none in communicative competence.

What do I get for attending?

For the Albion WEBSEC course you receive the Albion certificate of participation from 80 percent attendance. It records that you attended and depends on no exam.

Do I need CPSA-F to attend WEBSEC?

The Albion WEBSEC course requires no CPSA-F certification. The iSAQB curriculum 2020.1 names basic knowledge of network communication, web technologies and web applications; CPSA-F is required only for CPSA-A admission.

Is WEBSEC only about web applications?

The Albion WEBSEC course follows the iSAQB curriculum's focus on web applications. At the relevant points the curriculum also allows content on information systems or embedded systems.

What does the WEBSEC curriculum leave out?

The iSAQB WEBSEC curriculum leaves out organisational access control, structural measures, hardware attacks and a detailed discussion of the legal foundations. The Albion WEBSEC course works on design, process and infrastructure.

Does WEBSEC run differently online and on site?

The Albion WEBSEC course follows the same programme online and on site.

Is there a discount for several seats?

A group discount applies to several seats booked together for the Albion WEBSEC course. The date row and checkout show whether it applies and the minimum number of seats.

iSAQB WEBSEC Web Security Training

About the course

What this course is.

You derive the protection a web application needs from the threats it faces.

Current curriculum: 2020.1; iSAQB · Advanced Level · WEBSEC

Read the curriculum

After the course you can:

Select hashing and encryption methods
Design authentication and authorisation
Counter injection and DoS in the design
Place a WAF and TLS around an application

Credit point and certificate details

Dates

Dates for this course.

No public WEBSEC dates are scheduled right now.

The next public date has not been announced. Join the waitlist to hear when it is set. For a team of four or more, we can run the course inhouse on your date.

Request inhouse training

Before you book

Is this the right course for you?

Who it's for

If one of these four describes your work, you are in the right room.

You design web applications that are reachable from the internet.
You justify security decisions in a review or an acceptance test.
You answer for the third-party code your system pulls in.
You choose the authentication and authorisation for your services.

Prerequisites

Recommended

Focus:
The curriculum ties prior knowledge to a course's focus, and this course puts it on web applications
Networks:
Basic knowledge of network communication
Web technologies:
Basic knowledge of technologies such as HTML, CSS and JavaScript
Web applications:
Basic knowledge of building web applications

Curriculum, 6 topics

What the course covers.

The topics follow the iSAQB WEBSEC curriculum 2020.1. Your trainer works through them live with the group.

Analysis
Secure design and development process
Cryptography
Web: Technical foundation
Web: Known attacks and attack vectors
Web: Security and infrastructure

After the course you can

Model threats and classify the assets worth protecting
Weigh security against usability and the business purpose
Design applications so input validation and output escaping stay simple
Choose a secure development process and place SAST, DAST and SCA in it
Select hashing, encryption and trust mechanisms for a given case
Design authentication and authorisation with OAuth, OIDC, SAML or JWT
Counter injection, DoS and man-in-the-middle attacks in the design
Place firewalls, a WAF and TLS around a web application

How it works

How the training works.

Before the date
Before the course
Before the Albion WEBSEC course you receive the materials and either the joining details or the address of the venue.
Day 1
Day 2
The course days
The course days follow the same programme online and on site; the times are on the date you booked.
After the course
After the course
From 80 percent attendance you get the Albion certificate of participation; the credit points count toward CPSA-A admission.
Credit points and certificate

After this course

Credit points, and the certificate you take home.

Certificate of participation

Albion

To receive it: At least 80% of the course time attended

Credit points

iSAQB

30 credit points toward CPSA-A

This course has no exam.

Technical: 20 credit points
Methodical: 10 credit points
Communicative: 0 credit points

What you still need for CPSA-A

This course contributes 30 of the 70 credit points required. Your total across modules must include at least 10 points in each area.

You also need the CPSA-F (Foundation) certificate; the official rules cover the remaining eligibility and assessment requirements.

Official CPSA-A requirements

Why Albion

Why book with Albion.

Every promise here is one the Terms can be held to, on every course.

Verified digital certificate
Public verification page
Every certificate Albion issues has a public verification page, and the certificate showroom shows a sample of each one.
See the certificate showroom
Accredited trainers who work as architects
iSAQB accreditation
Your trainers are accredited iSAQB trainers who work as architects, so the exercises come from systems they have built.

Related modules.

Web Security adds 20 technical and 10 methodical points toward CPSA-A. Communicative is still open.

Technical: 20Minimum of 10 met
Methodical: 10Minimum of 10 met
Communicative: 0Open: minimum is 10

This course only. Your previous modules are not included. CPSA-A requires 70 points, at least 10 in each area, plus the Foundation certificate.

Modules that add communicative points

FAQ

Questions before you book.

Credit points and certificate

The Albion WEBSEC course has no exam and earns CPSA-A credit points. Certification involves an assignment and an oral exam assessed by experts appointed by the iSAQB, after all admission requirements have been met.
The Albion WEBSEC course carries 30 credit points under the iSAQB WEBSEC curriculum 2020.1: 20 in technical competence, 10 in methodical competence and none in communicative competence.
For the Albion WEBSEC course you receive the Albion certificate of participation from 80 percent attendance. It records that you attended and depends on no exam.

The course

The Albion WEBSEC course requires no CPSA-F certification. The iSAQB curriculum 2020.1 names basic knowledge of network communication, web technologies and web applications; CPSA-F is required only for CPSA-A admission.
The Albion WEBSEC course follows the iSAQB curriculum's focus on web applications. At the relevant points the curriculum also allows content on information systems or embedded systems.
The iSAQB WEBSEC curriculum leaves out organisational access control, structural measures, hardware attacks and a detailed discussion of the legal foundations. The Albion WEBSEC course works on design, process and infrastructure.
The Albion WEBSEC course follows the same programme online and on site.

Booking and price

A group discount applies to several seats booked together for the Albion WEBSEC course. The date row and checkout show whether it applies and the minimum number of seats.

Your question is not here? Ask us

Next step

No date yet that suits you?

Tell us when, and we plan the next public date around it. Or run the course inhouse.

Inhouse for your team

iSAQB WEBSECWeb Security Training