Duration
4 days
Session 1: Introduction to DevOps
- Introduction to Secure SDLC
- OWASP Top 10 & OWASP ASVS
- DevOps Principles
- Overview of DevOps Tools
- Security & Compliance Challenges in DevOps
Session 2: Incorporating Security
- Case Study on DevOps
- OWASP Proactive Controls
- Secure by Default
- Security as-a Self-Service (SaaSS)
- Using Infrastructure as Code
Session 3: Secure Design in DevOps
- Risk Assessment
- Threat Modelling
- Securing the Software Supply Chain
- OWASP Dependency Check
- Secure Coding Practices
- Static Analysis
- Code Review
- SAST
- Advantage of Pair Programming
- Automated Dynamic Analysis
- Vulnerability Management in DevOps
Session 4: Security in Production
- Runtime Defense
- Cloud Security Solutions
- Runtime Checks & Monitoring
- Security Monitoring
- Log Parsing & syslog
- Container Security
- Security Concerns with Containers
- Compliance as Code
- Defining Policies
- Managing Changes in Continuous Delivery
Programme scope, delivery arrangements and suitability are confirmed during enquiry.