EIEIOTECHNOVATION
← Training programmes

EIEIO / AUTOMATION & EMERGING TECHNOLOGY

DevSecOps Foundation

Course outline

DSOF2 days
Discuss this programme →

Duration

Classroom: 2 days; Virtual: 3 days (2x2 hours a day)

OVERVIEW

The DevSecOps Foundation course explains how DevOps security practices differ from other approaches then delivers the education needed to apply changes to your organization. Participants learn the purpose, benefits, concepts, vocabulary and applications of DevSecOps . Most importantly, students learn how DevSecOps roles fit with a DevOps culture and organization. At the course’s end, participants will understand “security as code” to make security and compliance value consumable as a service.

No course would be complete without practical application and this course teaches the steps to integrate security programs from the developers and operators through the business C level. Every stakeholder plays a part and the learning material highlights how professionals can use these tools as the primary means of protecting the organization and customer through multiple case studies, video presentations, discussion options, and exercise material to maximize learning value. These real life scenarios create tangible takeaways participants can leverage upon their return to the home office.

TARGET AUDIENCE

The target audience for the DevSecOps Engineering course are professionals including:

  • Anyone involved or interested in learning about DevSecOps strategies and automation
  • Anyone involved in Continuous Delivery toolchain architectures
  • Compliance Team, Delivery Staff, DevOps Engineers, IT Managers, IT Security Professionals, Maintenance and support staff, Managed Service Providers, Quality Assurance Teams, Release Managers, Scrum Masters, Site Reliability Engineers, Software Engineers or Testers.

EXAM FORMAT

  • 40 Multiple Choice Question
  • 60 minutes duration
  • Pass Mark 65% (26/40 marks)
  • Open Book

LEARNING OBJECTIVES

The learning objectives include a practical understanding of:

  • The purpose, benefits, concepts, and vocabulary of DevSecOps
  • How DevOps security practices differ from other security approaches
  • Business driven security strategies
  • Understanding and applying data and security sciences
  • The use and benefits of Red and Blue Teams
  • Integrating security into Continuous Delivery workflows
  • How DevSecOps roles fit with a DevOps culture and organization

Realizing DevSecOps Outcomes

  • Origins of DevOps
  • Evolution of DevSecOps
  • CALMS
  • The Three Ways

Defining the Cyberthreat Landscape

  • What is the Cyber Threat Landscape?
  • What is the threat?
  • What do we protect from?
  • What do we protect, and why?
  • How do I talk to security?

Building a Responsive DevSecOps Model

  • Demonstrate Model
  • Technical, business and human outcomes
  • What’s being measured?
  • Gating and thresholding

Integrating DevSecOps Stakeholders

  • The DevSecOps State of Mind
  • The DevSecOps Stakeholders
  • What’s at stake for who?
  • Participating in the DevSecOps model

Establishing DevSecOps Best Practices

  • Start where you are
  • Integrating people, process and technology and governance
  • DevSecOps operating model
  • Communication practices and boundaries
  • Focusing on outcomes

Best Practices to get Started

  • The Three Ways
  • Identifying target states
  • Value stream-centric thinking

DevOps Pipelines and Continuous Compliance

  • The goal of a DevOps pipeline
  • Why continuous compliance is important
  • Archetypes and reference architectures
  • Coordinating DevOps Pipeline construction
  • DevSecOps tool categories, types and examples

Learning Using Outcomes

  • Security Training Options
  • Training as Policy
  • Experiential Learning
  • Cross-Skilling
  • The DevSecOps Collective Body of Knowledge
  • Preparing for the DevSecOps Foundation certification exam

Programme scope, delivery arrangements and suitability are confirmed during enquiry.