Skip to main content

Description

In today's digital age, companies are creating software faster and more frequently than ever before, resulting in increased security vulnerabilities. To counter this, integrating DevSecOps practices into DevOps projects adds both business and security value, becoming an essential strategic element. Ensuring development, security and operations at business pace is crucial for any modern organization.
Our DevSecOps Foundation course introduces you to how DevSecOps security principles differ from other approaches, and provides you with the knowledge you need to implement this strategy within your organization. You'll explore the objectives, benefits, fundamental principles, specific vocabulary and associated automation tools. You'll also learn how DevSecOps missions fit in with the DevOps culture and organization.
At the end of this course, you'll have all the technical skills you need to understand and apply the Development | Security | Operations approach. What's more, on the last half-day you'll have the opportunity to take the DevOps Institute DSOF exam.

Day 1: Introduction to DevSecOps and Cyberthreats

  • DevSecOps value chain: Explore the emergence of DevOps, the steps towards DevSecOps, the application of the CALMS model and the importance of continuous improvement.
  • Cyberthreat landscape: Analyze the world of cyberthreats, the various types of IT threats, what needs to be protected and why, and the importance of communication with security teams.

Day 2: Operational model and DevSecOps culture

  • DevSecOps operational model: Understand the three pillars of the DevSecOps model, the technical, business and human impacts, as well as how security thresholds are triggered and threshold values established.
  • DevSecOps culture: Discuss the mindset required for DevSecOps, identify the stakeholders within the company, assess the impact on the players involved and their participation in the operational model.

Day 3: Best Practices and Exam Preparation

  • DevSecOps best practices: addressing personal growth, integrating digital players and tools
  • governance, and results-oriented communication methods.
  • DevOps pipeline and compliance: Examine the purpose of a DevOps pipeline, ongoing compliance, reference architectures and associated automation tools.
  • Exam preparation: Discuss exam prerequisites, question weighting and passing the official DevSecOps Foundation (DSOF) exam.
  • This structure provides a progressive understanding of key DevSecOps concepts.

This course is aimed at the following audiences:

  • anyone interested in learning more about DevOps strategies and automation;
  • anyone interested in continuous delivery and DevOps collaboration tools;
  • anyone interested in learning more about security in a DevOps project.

Taking the DevSecOps Foundation (DSOF) training course requires the following prerequisites:

  • understand English to read the documentation provided and to take the DSOF v.2.0 exam;
  • knowledge of DevOps, Lean IT or business agility principles is highly recommended.

On completion of the DevSecOps Foundation course, you will be able to validate the following learning objectives:

  • Assimilate the objectives, benefits, fundamental principles and technical vocabulary associated with DevSecOps.
  • Understand how DevOps security procedures differ from traditional methods.
  • Explore various IT security strategies and identify the best practices to adopt within an organization.
  • Know and apply the principles of data science to ensure the protection of information.
  • Involve all company stakeholders in DevSecOps initiatives.
  • Establish effective communication between development, security and operational teams.
  • Recognize how DevSecOps activities fit seamlessly into a DevOps culture and structure.
  • Pass the DSOF (V2.0) exam and receive your DevSecOps Foundation certification from the DevOps Institute®.

We design, build and support digital products for clients who want to make a positive impact in their industry. Creative with technology, we develop great solutions to help our clients grow and especially by strengthening our relationships based on continuous improvement, maintenance, support and hosting services.

Follow us