This is an intermediate course that deliberately spans two audiences who usually get trained separately. It carries enough technical grounding for the people who build and configure web applications, and enough plain-language framing for the system owners, security officers and program staff who oversee them without writing code. The shared vocabulary is the point, because a system owner, a security officer and a developer can take this course together and come out able to talk to each other, which is what actually makes security reviews go faster. There is no lab, and that is deliberate: there is no environment to provision and no technical prerequisites, so the course can be assigned to oversight staff and developers at the same time. All interactivity is interactive categorization exercises and scenario prompts of the form "given this situation, what is the most appropriate action," and no lab environment is required for any module or for the final assessment.
Every topic is anchored to a real policy and standards landscape rather than taught generically. Module 1 is intentionally policy-heavy so the later technical modules can refer back to it, covering security risk management frameworks and the system-authorization process, a major executive cybersecurity order and its amendments, and the NIST Cybersecurity Framework 2.0, and it teaches something rarely taught at all: how to recognize when a policy has been superseded, and why confirming currency matters before relying on it for compliance — a skill that is rare in commercial training and directly transferable to any regulated environment. Module 2 uses the OWASP Top 10, 2025 edition, as its organizing frame and stays focused on recognizing risk rather than writing exploit code, and from there the course moves through the secure development lifecycle and the Secure Software Development Framework, then identity, access control and data protection including Zero Trust and FIPS-validated encryption, before closing on continuous monitoring, event logging and incident reporting. Assessment is by ungraded quick checks in each module plus a graded final covering all five modules proportionally, weighted toward applying concepts rather than recalling facts, at 70% to pass with unlimited retakes.
Basic familiarity with general cybersecurity concepts and everyday web application use. No development experience required.
From our hands-on training style to world-class instructors and custom-crafted curriculum, we deliver results our alumni are proud of.
Learn the concepts and skills covered in this course or your tuition is on us. See details and terms & conditions.
Work on projects proven to boost retention
Refined over many cohorts for an optimal learning experience
The teaching method at Noble Desktop is perfect and the classes provide you with infinite knowledge that makes you eager to take everything they offer. I love Noble!
—Ivonne Ackerman
Experienced educators who are driven to help you succeed
Refresh the materials for free within one year
Attend this course live online or as self-paced training. Engage with expert instructors, ask questions, and get feedback on your exercises and projects.
Unlike other providers, these are not mass open-enrollment classes. At Noble Desktop, you’ll learn in small groups (typically 8-15 students) and receive personalized attention.
Get the same interactivity and access to the instructor as in-person students. There are no extra fees and we’ll work with you to ensure your remote setup is perfect.
Learn at your own pace with pre-recorded video lessons and hands-on exercises. Work through the material on your schedule with access to course content and resources.
Upon completion of this course, you’ll receive an official certificate testifying to your mastery of the curriculum. We’ll send you a link where you can download your certificate, share it online with your friends, post it to your professional network on LinkedIn, and view all your earned certificates. Congratulations on your achievement!
Shareable on
We offer a single free retake of the class within a year.
You can also access recordings of each session in your student portal within one business day of the session’s end. Recordings are available for one month after the session.
Anyone who develops, manages, uses or oversees web applications, technical or not: developers, system owners, security officers and managers, the stakeholders who sign off on production risk, and the program and procurement staff who oversee contracted development.
Basic familiarity with general cybersecurity concepts and everyday web application use. No development experience required.
This course does not qualify for payment plans or student financing. See our Payment Plan FAQ to find related programs that qualify.
Sorry, but this training is not available online.
You have some options:
There are no extra fees or taxes for our courses. The price you see on this page is the maximum you’ll pay us.
However, if you plan to take the course live online, you may need to obtain required software. We’ll help you get set up with a free trial of paid software prior to the class. Most of our coding classes utilize freely-available open-source software. For most of our design and motion graphics courses, we will help you get set up with a free trial of Adobe Creative Cloud. If you attend the course in-person, we will have a computer already set up for you with all of the required software for no additional cost.
We don’t currently offer discounts as we do our best to affordably prices our courses.
