This SecDevOps Foundation® (SDOF) Certification Training course will help you prepare for and successfully attain the SecDevOps Foundation Certification. In this course, you will learn the following:
- Benefits, concepts, and vocabulary of SecDevOps and DevSecOps
- How SecDevOps and DevSecOps evolved from Agile
- Differences between DevOps practices and other cybersecurity approaches
SecDevOps Training Delivery Methods
SecDevOps Foundation Training Information
In this SecDevOps Foundation Course, you will:
- Prepare for the DevOps Institute SecDevOps Foundation Certification (SDOF) with the world's first accredited SecDevOps certification course
- Trace the history and evolution of SecDevOps
- Integrate SecDevOps roles with a DevOps culture and organization
- Receive official certification from the DevOps Institute (DOI)
- Continue learning and face new challenges with after-course one-on-one instructor coaching
Prerequisites
None.
SecDevOps Foundation Certification Details
- The 60-minute certification exam is open-book, taken in class, and included in the course tuition.
- It is highly recommended that candidates attend the SecDevOps Foundation course with a DevOps Institute-accredited Education Partner to prepare for the certification exam.
- The certification exam is administered through DOI.
SecDevOps Foundation Training Outline
- What is Agile/DevOps?
- DevOps Goals
- DevOps Values
- DevOps Stakeholders
- Key terms and concepts
- Why SecDevOps is important
- 3 Ways to think about DevOps + Security
- Key principles of SecDevOps
- SecDevOps security-first philosophy
- SecDevOps evolution from DevSecOps
- Key terms and concepts
- How much security is enough?
- Threat modeling
- Context is everything
- High-velocity risk management
- Team security profiling
- Avoiding the checkbox trap
- Basic security hygiene
- Architectural considerations
- Federated identity
- Log management
- Configuration management
- Centralized workflow
- Workflow branch classifications
- Pre- and post-commit
- Deployment and release orchestration
- Needs Phase requirements vs. security
- Acquisition Review Board (ARB)
- Analyze/Select Phase measurement metrics
- Obtain phase life cycle
- Planning and scheduling
- Dispose phase concerns
- Key terms and concepts
- Identity and Access Management (IAM) basic concepts
- Why IAM is important
- Implementation guidance
- Automation opportunities
- How to hurt yourself with IAM
- Application Security Testing (AST)
- Testing Techniques
- Prioritizing Testing Techniques
- Issue Management Integration
- Threat Monitoring
- Leveraging Automation
- Secure coding and Open Web Application Security Project (OWASP) compliance
- Key terms and concepts
- Basic security hygiene practices
- Role of operations management
- The Ops environment
- Embracing fail-early, fail-first
- Security infrastructure as code
- Key terms and concepts
- Establishing trust
- Promoting shared responsibility
- Team verification techniques
- Embedded point-of-contact
- Security, development, and operations sprints
- SecDevOps Coach
- Product Owner Expanded Responsibilities
- Program and Project Manager
- Information System Security Officer (ISSO)
- SecDevOps Engineer
- Site Reliability Engineer
- Key terms and concepts
- What is GRC?
- Why care about GRC?
- Rethinking policies
- Policy as code
- Shifting audit left
- Three myths of segregation of duties vs. DevOps
- Key terms and concepts
- Setting up log management
- Incident response and forensics
- Threat intelligence and information sharing
- Retrospectives
- Continuous learning
- Open Collaboration (including security)
- Shared intelligence
- Exam review
- Key course concepts
- Next steps
