diff --git a/2.Curriculum/06.Error Handling/06.00 - Objectives.md b/2.Curriculum/06.Error Handling/06.00 - Objectives.md index 0c4a469..6995c9a 100644 --- a/2.Curriculum/06.Error Handling/06.00 - Objectives.md +++ b/2.Curriculum/06.Error Handling/06.00 - Objectives.md @@ -12,9 +12,26 @@ After completing this module, developers will be able to: --- ## Knowledge +The student will need knowledge of the following topics for Module 6: +- What is secure error handling +- Security implications of improper error handling +- Information disclosure through stack traces and verbose errors +- Secure exception handling and propagation techniques +- Fail-secure versus fail-open design principles +- Global and centralized error handling approaches +- Secure logging practices and sensitive data sanitization +- Differences between development and production error modes ## Skills +- Ability to implement secure exception handling mechanisms +- Ability to identify insecure error messages and information leakage risks +- Ability to configure secure logging without exposing sensitive information +- Ability to apply fail-secure principles during application failures +- Ability to configure centralized and framework-specific error handling controls ## Competencies +With the above knowledge points, a developer would be able to securely manage application errors and exceptions while minimizing information disclosure and maintaining application security during failure conditions. This competency would support the development of resilient, secure, and production-ready applications aligned with secure coding best practices. + +