DevSecOps Foundation

ابنِ الأمن داخل DevOps منذ البداية. تفهم ثقافة DevSecOps واستراتيجيته، وإدارة الهوية والوصول، وأمن التطبيقات والعمليات، والحوكمة والمخاطر والامتثال ضمن التسليم السريع.

يومانتأسيسي13 وحدة

سجّل أو استفسر ←اسأل عبر واتساب

نظرة عامة

ما ستتعلّمه

المحتوى التقني أدناه معروضٌ باللغة الإنجليزية كما ورد في منهاج الدورة، حفاظاً على دقّة المصطلحات.

Understanding organizational culture and how DevSecOps roles fit within a DevOps organization
Strategies to support an organizational transformation that integrates security as code
Managing conflict and building feedback loops
Using meaningful metrics and demonstrating DevOps ROI
Applying data and security sciences to reduce risk and protect the organization and customer
Integrating security programs early in the development process
Understanding the vocabulary of DevSecOps and how the practices covered support business and security alignment

المنهاج

13 وحدة

Course goals and structure
Agenda overview

Key terms and concepts
Importance of integrating security into DevOps
Core principles of DevSecOps

Incentive models and resilience
DevOps culture and organization
Organizational models (Westrum, LaLoux)
Exercise: Influencing culture

Threat modeling and contextual risk
High-velocity risk management
Exercise: Measuring for success

Avoiding the checkbox trap
Security hygiene and architectural considerations
Federated identity and log management

IAM concepts and implementation
Automation opportunities
Pitfalls and common vulnerabilities
Exercise: Overcoming IAM challenges

Application Security Testing (AST)
Testing techniques and prioritization
Issue management and automation
Threat modeling and continuous testing

Security hygiene in operations
Role of ops management
Exercise: Adding security to your CI/CD pipeline

Importance of GRC in DevOps
Rethinking policies and shifting audit left
Policy as code and automation
Exercise: Making policies, audit, and compliance “consumable as a service”

Log management setup
Incident response and forensics
Threat intelligence and information sharing

Recap of key concepts and exercises
Creating a personal action plan

Exam requirements and structure

Common DevOps and DevSecOps vocabulary
Sample DSOF certification exam questions

لمن هذه الدورة

المطوّرون وموظفو الأمن ومهندسو DevOps والمديرون.

قبل أن تبدأ

While there are no formal prerequisites for the DevSecOps Foundation (DSOF) certification, it is recommended that candidates have a basic understanding of DevOps concepts and practices