Application DevSecOps & Cloud Security Auditing Practices

Course Description:

This course delves into the practices of Application DevSecOps and Cloud Security Auditing, focusing on integrating security into the development process, leveraging cloud technologies securely, and auditing practices to ensure compliance and risk mitigation.

Course Objectives:

• 1. Define DevOps and its phases, emphasizing security integration.
• 2. Illustrate the role of Audit & Risk in DevOps and DevSecOps.
• 3. Explain the components of a DevOps Culture with a security lens.
• 4. Recognize the impact of Cloud technologies within DevOps and DevSecOps.
• 5. Differentiate DevSecOps from DevOps and outline DevSecOps practices.
• 6. Plan a strategic path forward for IT, Audit, and DevSecOps alignment.

Session 1. Introduction to DevOps and DevSecOps

Define DevOps and its phases

Integration of security in DevOps

Differentiating DevSecOps from DevOps

Session 2. Audit & Risk in DevOps and DevSecOps

Role of Audit & Risk in DevOps

Intersections of risk management and DevOps

Auditing practices in DevSecOps

Course Outline :: Application DevSecOps & Cloud Security Auditing Practices::

Session 3. DevOps Culture and Practices

Collaboration, visibility, and alignment in DevOps

Shifts in accountability and scope with a security focus

Agile software development and security considerations

Session 4. Cloud Impact on DevOps and DevSecOps

Cloud agility and its implications for DevOps

Secure cloud technologies like Kubernetes and serverless computing

Ensuring security in cloud-based DevOps practices

Session 5. DevSecOps Practices

Security education and awareness in DevSecOps

Implementing security best practices in DevSecOps

Continuous monitoring and security in DevSecOps pipelines

Session 6. Planning for IT, Audit, and DevSecOps Alignment

Strategies for aligning IT, Audit, and DevSecOps practices

Tools and resources for successful integration

Developing a roadmap for implementing DevSecOps and auditing practices

Course Outline :: Application DevSecOps & Cloud Security Auditing Practices::

Day 1 Day 2

09.00am-10.00am Introduction Session 4

10.00am-10.15am Morning tea break Morning tea break

10.15am-12.00pm Session1 Session 5

12.00pm- 01.00pm Lunch Lunch

01.00pm- 03.00pm Session 2 Session 6

03.00pm- 03.15pm Afternoon tea break Afternoon tea break

03.15pm- 05.00pm Session 3 Recap

**The training schedule may change depending on the progress of the class

Programme scope, delivery arrangements and suitability are confirmed during enquiry.