• Course
  • Vendor

Learn the purpose, benefits, concepts, and vocabulary of DevSecOps including DevOps security strategies and business benefits.

  • Course Start Date: 2021-11-04
  • Time: 08:00:00 - 17:00:00
  • Duration: 2 days 08:00 AM - 05:00 PM
  • Location: Virtual
  • Delivery Method(s): Virtual Instructor Led
$1,996.00
REGULAR PRICE $2,495.00 Save $499.00
November 4th
Click for more dates
2 discount seats left!
or make an offer

Course Outline

Pre-Requisites

The DevOps Institute – DevOps Foundation course is a prerequisite for this course to ensure course participants are aligned with the baseline DevOps definitions and principles.

Lessons

Learn the purpose, benefits, concepts, and vocabulary of DevSecOps including DevOps security strategies and business benefits.

As companies are pushing code faster and more often than ever, the rate of vulnerabilities in our systems is accelerating. As we are being asked to do more with less, DevOps has shown immense value to business and security as an integral component that needs to be integrated into the strategy.

Topics covered in the course include how DevSecOps provides the business value of DevOps and the ability DevOps has to enable the business and support an organizational transformation with the ultimate goal of increasing productivity, reducing risk, and optimizing cost in the organization.

This course explains how DevOps security practices differ from other security approaches and provides the education needed to understand and apply data and security sciences. Participants learn the purpose, benefits, concepts, and vocabulary of DevSecOps; particularly how DevSecOps roles fit with a DevOps culture and organization. At the end of this course, participants will understand using “security as code” with the intent of making security and compliance consumable as a service.

The course is designed to teach practical steps on how to integrate security programs into DevOps practices and highlights how professionals can use data and security science as the primary means of protecting the organization and customer.

Using real-life scenarios and case studies, participants will have tangible takeaways to leverage when back at the office.

This course positions you to successfully complete the DevSecOps Engineering exam, which is offered on the last day of class for classroom students. Virtual students will receive a voucher for a webcam proctored exam which they can schedule at their convenience.

WHO SHOULD ATTEND?

  • Anyone involved or interested in learning about DevSecOps strategies and automation
  • Anyone involved in Continuous Delivery toolchain architectures
  • Compliance Team
  • Delivery Staff
  • DevOps Engineers
  • IT Managers
  • IT Security Professionals, Practitioners and Managers
  • Maintenance and support staff
  • Managed Service Providers
  • Project & Product Managers
  • Quality Assurance Teams
  • Release Managers
  • Scrum Masters
  • Site Reliability Engineers
  • Software Engineers
  • Testers

WHAT YOU'LL LEARN

Learners will gain a practical understanding of:

  • Purpose, benefits, concepts and vocabulary of DevSecOps
  • How DevOps security practices differ from other security approaches
  • Business driven security strategies
  • Understanding and applying data and security sciences
  • The use and benefits of Red and Blue Teams
  • Integrating security into DevOps programs
  • Integrating security into Continuous Delivery workflows
  • How DevSecOps roles fit with a DevOps culture and organization

COURSE OUTLINE

Course Agenda

  • Course Introduction
    • Course Goals
    • Course Agenda
  • DevOps Foundation Review
    • What is DevOps?
    • DevOps Goals
    • DevOps Values
    • DevOps Stakeholders
    • Exercise: Diagramming Your CI/CD Pipeline
  • Why DevSecOps?
    • Key Terms and Concepts
    • Why DevSecOps is important
    • 3 Ways to Think About DevOps+Security
    • Key Principles of DevSecOps
  • Instilling a DevSecOps Culture
    • Key Terms and Concepts
    • Incentive Model
    • Resilience
    • Organizational Culture
    • Generativity
    • Erickson, Westrum, and LaLoux
    • Exercise: Influencing Culture
  • Strategic Considerations
    • Key Terms and Concepts
    • How Much Security is Enough?
    • Threat Modeling
    • Context is Everything
    • Risk Management in a High-velocity World
    • Exercise: Measuring For Success
  • General Security Considerations
    • Avoiding the Checkbox Trap
    • Basic Security Hygiene
    • Architectural Considerations
    • Federated Identity
    • Log Management
  • IAM: Identity & Access Management
    • Key Terms and Concepts
    • IAM Basic Concepts
    • Why IAM is Important
    • Implementation Guidance
    • Automation Opportunities
    • How to Hurt Yourself with IAM
    • Exercise: Overcoming IAM Challenges
  • Application Security
    • Application Security Testing (AST)
    • Testing Techniques
    • Prioritizing Testing Techniques
    • Issue Management Integration
    • Threat Modeling
    • Leveraging Automation
  • Operational Security
    • Key Terms and Concepts
    • Basic Security Hygiene Practices
    • Role of Operations Management
    • The Ops Environment
    • Exercise: Adding Security to Your CI/CD Pipeline
  • Governance, Risk, Compliance (GRC) and Audit
    • Key Terms and Concepts
    • What is GRC?
    • Why Care About GRC?
    • Rethinking Policies
    • Policy as Code
    • Shifting Audit Left
    • 3 Myths of Segregation of Duties vs. DevOps
    • Exercise: Making Policies, Audit and Compliance Work with DevOps
  • Logging, Monitoring and Response
    • Key Terms and Concepts
    • Setting Up Log Management
    • Incident Response and Forensics
    • Threat Intelligence and Information Sharing
  • Course Review
    • Where We Started
    • What We Covered
    • Key Reminders of What’s Important
    • Exercise: Creating a Personal Action Plan
  • Exam Preparation
    • Exam Requirements, Question Weighting and Terminology List
    • Sample Exam Review

Cancellation Policy

We require 16 calendar days notice to reschedule or cancel any registration. Failure to provide the required notification will result in 100% charge of the course. If a student does not attend a scheduled course without prior notification it will result in full forfeiture of the funds and no reschedule will be allowed. Within the required notification period, only student substitutions will be permitted. Reschedules are permitted at anytime with 16 or more calendar days notice. Enrollments must be rescheduled within six months of the cancel date or funds on account will be forfeited.

Training Location

Online Classroom
your office

your city, your province
your country   

About Global Knowledge

x

Global Knowledge is the world's leading learning services and professional development solutions provider. We deliver learning solutions to support customers as they adapt to key business transformations and technological advancements that drive the way that organizations around the world differentiate themselves and thrive. Our learning programs, whether designed for a global organization or an individual professional, help businesses close skills gaps and foster an environment of continuous talent development.

Training Provider Rating

This vendor has an overall average rating of 4.38 out of 5 based on 431 reviews.

I would never take another course that starts at 11AM and goes to 9PM again. The way the course was laid out really took away from ... Read more
x

I would never take another course that starts at 11AM and goes to 9PM again. The way the course was laid out really took away from the capturing of what was presented as it was 5-6 hours of watching a screen before getting to the actual labs. There has to be a better way to lay out this particular course. In my previous course, the lectures were broken up by labs which worked out fantastic and kept you engaged in the course. There were days when in order to actually complete the labs, would go over the 9PM day end time frame. Was able to get the primary labs done, but if you want to get all the content completed, you cannot complete it in the window of this course, you will need to come back on your own time.

No comment
No comment
Instructor was great
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
No comment
Wasn’t as advanced as I thought it would be. There was an issue when the day my course was the first time they used a new platfo ... Read more
x

Wasn’t as advanced as I thought it would be. There was an issue when the day my course was the first time they used a new platform.. from adobe to something called zoom; I had to call support line cause it stated our instructor wasn’t present. Thankfully I called cause everyone online was in the adobe virtual classroom waiting for what looked like a teacher who didn’t show up for class (IT didn’t get anything resolved until 10mins after start time). I felt like he was really getting hung up on very basic knowledge for the first half of the course (talking about how to create tabs and drag formulas as an example). I completed files a few times before he was done explaining. There was a scheduled fire drill for them (roughly 30mins)that also cut into our time, which wasn’t deducted from the hour lunch break or the two, fifteen min breaks. I also really wish he touched base more on the automating workbook functions portion which we barely did. I'm happy there were/are those study guides (learning videos) and exams to take on my own time that I hope after I've had the class are still available for me to learn from.

Course Reviews

No Reviews Yet

More Courses from Global Knowledge

GLOBAL KNOWLEDGE
2021-12-10
Virtual
GLOBAL KNOWLEDGE
2022-02-25
Virtual
GLOBAL KNOWLEDGE
2021-10-25
Virtual
GLOBAL KNOWLEDGE
2021-12-13
Virtual

More Courses in 'Category to be Determined' Category

SKYLINE ADVANCED TECHNOLOGY SERVICES
2021-10-25
Virtual
GLOBAL KNOWLEDGE
2021-12-16
Virtual
TRIVERA TECHNOLOGIES LLC
2021-12-08
Virtual