VCE Software Development U4O2: Security controls for development practices and stored data
Students learn the controls that protect development and application data: version control, identity and access management, encryption, code review, patching, separated environments and supply chain protections.
One content description from the full VCE Software Development - U4O2 - Cyber Security: secure software development practices journey. All 23 modules below are in that journey too, with the same content — add just these to a class, or the whole strand.
Modules (23)
1
Version control for software projects
2
Code repositories
3
Securing a code repository
4
Authentication vs authorisation
5
The principle of least privilege
6
Role-based access control
7
Types of MFA
8
How MFA protects an account when the password is stolen
9
Access logs and audit trails
10
Encryption and decryption
11
Symmetric encryption
12
Asymmetric encryption
13
Encrypting data at rest and in transit
14
HTTPS and the padlock
15
Peer code review process
16
Automated code analysis tools
17
Patch management
18
Operating system updates
19
Separating development, testing and production environments
20
Managing secrets outside source code
21
Code signing and trusted sources
22
Software bill of materials (SBOM)
23
Reducing supply chain risk
For Teachers
Add this journey to your class and track every student in real time.
Create a free teacher account →No credit card. No setup fee. Make a class and invite students in under three minutes.
For Students
Start this journey on Cloodit — track progress, earn badges, and play live sprints with your class.
Start Learning Free →