DOI DevSecOps Foundation

Realizing DevSecOps Outcomes

• Origins of DevOps

• Evolution of DevSecOps

• CALMS

• The Three Ways

Defining the Cyberthreat Landscape

• What is the Cyber Threat Landscape?

• What is the threat?

• What do we protect from?

• What do we protect, and why?

• How do I talk to security?

Building a Responsive DevSecOps Model

• Demonstrate Model

• Technical, business and human outcomes

• What’s being measured?

• Gating and thresholding

Integrating DevSecOps Stakeholders

• The DevSecOps State of Mind

• The DevSecOps Stakeholders

• What’s at stake for who?

• Participating in the DevSecOps model

Establishing DevSecOps Best Practices

• Start where you are

• Integrating people, process and technology and governance

• DevSecOps operating model

• Communication practices and boundaries

• Focusing on outcomes

Best Practices to get started

• The Three Ways

• Identifying target states

• Value stream-centric thinking

DevOps Pipelines and Continuous Compliance

• The goal of a DevOps pipeline

• Why continuous compliance is important

• Archetypes and reference architectures

• Coordinating DevOps Pipeline construction

• DevSecOps tool categories, types and examples

Learning Using Outcomes

• Security Training Options

• Training as Policy

• Experiential Learning

• Cross-Skilling​

• The DevSecOps Collective Body of Knowledge

• Preparing for the DevSecOps Foundation certification exam

Durante il corso, i partecipanti verranno preparati per l’esame: verranno esplicitati i requisiti, evidenziati gli argomenti più importanti e fornito il glossario.

Inoltre, è prevista la revisione di un’esercitazione d’esame.