Developing Secure Applications

• 45 Minutes
• For all staff
• UK

Software and systems are being built faster and with more automation than ever, which changes where security has to sit. This 45-minute course explains why secure development and deployment matter, sets out the major principles, helps teams find the weak points in their own process, and covers practical improvements.

For FCA-regulated firms, technology failures are a conduct and operational resilience issue, not just an IT one, and the regulator has been explicit about board accountability for it. Development practice is where a large share of that exposure originates. Training your engineers gives you a demonstrable control at the point where risk is introduced rather than at the point where it is discovered.

What you’ll learn in
this course

• Recognise the importance of developing and deploying software securely
• Understand the major principles of secure development
• Identify areas of your development process that could be vulnerable or made more secure
• Take steps to improve the security of your development process
• Know what our regulators consider to be key risk areas when developing secure applications
• Understand the importance of compliance with the Senior Managers and Certification Regime (SM&CR) when developing secure applications

Hear from our customers

Being able to personalise our own training has been a game-changer! Excellent training was provided on how to use the CMS and the support team have been so helpful, patient and quick to reply when I've got stuck.

Feefo Customer Rating  ★★★★★ 4.9/5

Generating FCA compliance e-learning success for our customers

UK firms spend £28.7 billion a year meeting compliance obligations, making clarity essential. Our CPD-accredited FCA courses cut through the complexity to help your team understand the key rules that apply to them.

Browse the complete FCA Handbook training package

Conduct Risk

In-depth 50 Minutes For all staff

Conduct risk is easy to state and hard to operationalise. Teams that never handle a customer directly still shape the outcome, through pricing, process design, service levels and the way exceptions get handled. Extending this training beyond customer-facing roles is what stops conduct risk being treated as a front-office concern, and it strengthens the outcomes evidence your firm reports upward.

Conduct Risk

In-depth 50 Minutes For all staff

The FCA judges firms on customer outcomes, and outcomes are produced by thousands of small decisions taken by people who are not thinking about regulation at the time. That is what makes conduct risk hard to control through policy alone. This course gives staff the vocabulary to recognise a conduct issue while it is still a choice rather than a complaint.

Explore the course

Developing Secure Applications

In-depth 45 Minutes For all staff

For FCA-regulated firms, technology failures are a conduct and operational resilience issue, not just an IT one, and the regulator has been explicit about board accountability for it. Development practice is where a large share of that exposure originates. Training your engineers gives you a demonstrable control at the point where risk is introduced rather than at the point where it is discovered.

Explore the course