DevOps, Git & Automation
DevSecOps Foundation
Build security into DevOps from the start.
2 daysFoundation13 modules
About this course
Build security into DevOps from the start. You will understand the culture and strategy of DevSecOps, identity and access management, application and operational security, and governance, risk and compliance within fast delivery.
What you'll learn
- Understanding organizational culture and how DevSecOps roles fit within a DevOps organization
- Strategies to support an organizational transformation that integrates security as code
- Managing conflict and building feedback loops
- Using meaningful metrics and demonstrating DevOps ROI
- Applying data and security sciences to reduce risk and protect the organization and customer
- Integrating security programs early in the development process
- Understanding the vocabulary of DevSecOps and how the practices covered support business and security alignment
Curriculum
13 modules
- Course goals and structure
- Agenda overview
- Key terms and concepts
- Importance of integrating security into DevOps
- Core principles of DevSecOps
- Incentive models and resilience
- DevOps culture and organization
- Organizational models (Westrum, LaLoux)
- Exercise: Influencing culture
- Threat modeling and contextual risk
- High-velocity risk management
- Exercise: Measuring for success
- Avoiding the checkbox trap
- Security hygiene and architectural considerations
- Federated identity and log management
- IAM concepts and implementation
- Automation opportunities
- Pitfalls and common vulnerabilities
- Exercise: Overcoming IAM challenges
- Application Security Testing (AST)
- Testing techniques and prioritization
- Issue management and automation
- Threat modeling and continuous testing
- Security hygiene in operations
- Role of ops management
- Exercise: Adding security to your CI/CD pipeline
- Importance of GRC in DevOps
- Rethinking policies and shifting audit left
- Policy as code and automation
- Exercise: Making policies, audit, and compliance “consumable as a service”
- Log management setup
- Incident response and forensics
- Threat intelligence and information sharing
- Recap of key concepts and exercises
- Creating a personal action plan
- Exam requirements and structure
- Common DevOps and DevSecOps vocabulary
- Sample DSOF certification exam questions
Who it's for
Developers, security staff, DevOps engineers and managers.
Before you start
- While there are no formal prerequisites for the DevSecOps Foundation (DSOF) certification, it is recommended that candidates have a basic understanding of DevOps concepts and practices
Related courses
More in DevOps, Git & Automation →Foundation
DevOps Foundation
DevOps, Git & Automation
View course →Foundation
DevOps Site Reliability Engineering (SRE) Foundation
DevOps, Git & Automation
View course →Foundation
Project Management Foundations Workshop
Project Management
View course →IntermediateAZ-2001T00
AZ-2001T00 Implement security through a pipeline using Azure DevOps
DevOps, Git & Automation
View course →IntermediateAZ-2006
AZ-2006 Automate Azure Load Testing by using GitHub Actions
DevOps, Git & Automation
View course →FoundationAZ-2008
AZ-2008 DevOps Foundations: The Core Principles and Practices
DevOps, Git & Automation
View course →Let's plan your next step together.
Tell us the course or certification you have in mind and we'll send the outline, upcoming dates, fees and private-team options.