SecDevOps Foundation Training (SDOF)

Level: Intermediate

SecDevOps, is similar to DevSecOps. SecDevOps is an initiative to put cybersecurity first, along with extensions that aim to ensure optimum security throughout all phases of the software life cycle, within the cybersecurity, development, and operations teams.

A SecDevOps Engineer is an IT Security professional who is skilled at security-as-code, with the intent of making security and compliance consumable as a service. A SecDevOps Engineer uses data and security science as the primary means of protecting organizations and customers.

This training addresses the purpose, benefits, concepts, and vocabulary of SecDevOps and DevSecOps, and how they evolved from Agile/DevOps software development practices. This course highlights differences between DevOps security practices and other types of security approaches. An overview of security strategies is provided including business driven security evaluation and scoring.

Page Sections

You Will Learn How To

Training Solutions

Details & Schedule

FAQs

Related Training

Get Started

Key Features of this SecDevOps Foundation Training:

After-course instructor coaching benefit
Certification from Dev Ops Institute

You Will Learn How To:

Explain the purpose, benefits, concepts and vocabulary of SecDevOps.
Differentiate DevOps security practices from other security approaches.
Trace the history and evolution of SecDevOps.
Focus on Business-driven security strategies.
Apply data and security science techniques.
Benefit from Security Testing with Red and Blue Teams.
Integrate security into Continuous Integration and Delivery workflows.
Integrate SecDevOps roles with a DevOps culture and organization.

Choose the Training Solution That Best Fits Your Individual Needs or Organizational Goals

LIVE, INSTRUCTOR-LED

In Class & Live, Online Training

3-day instructor-led training course
After-course instructor coaching benefit
Learning Tree end-of-course exam included

View Course Details & Schedule

Standard $2650 USD

Government $2355 USD

RESERVE SEAT

PRODUCT #3695

TRAINING AT YOUR SITE

Team Training

Bring this or any training to your organization
Full - scale program development
Delivered when, where, and how you want it
Blended learning models
Tailored content
Expert team coaching

Customize Your Team Training Experience

Save More On Training with FlexVouchers – A Unique Training Savings Account

Our FlexVouchers help you lock in your training budgets without having to commit to a traditional 1 voucher = 1 course classroom-only attendance. FlexVouchers expand your purchasing power to modern blended solutions and services that are completely customizable. For details, please call 888-843-8733 or chat live.

In Class & Live, Online Training

Timezone

Location

Date

Time Zone Legend:

Eastern Time Zone Central Time Zone

Mountain Time Zone Pacific Time Zone

Note: This course runs for 3 Days

May 19 - 21 9:00 AM - 4:30 PM EDT Online (AnyWare) Reserve Your Seat
Jun 16 - 18 9:00 AM - 4:30 PM EDT Online (AnyWare) Reserve Your Seat
Jul 14 - 16 9:00 AM - 4:30 PM EDT Ottawa / Online (AnyWare) Reserve Your Seat
Aug 18 - 20 9:00 AM - 4:30 PM EDT Herndon, VA / Online (AnyWare) Reserve Your Seat
Sep 15 - 17 9:00 AM - 4:30 PM EDT New York / Online (AnyWare) Reserve Your Seat
Oct 13 - 15 9:00 AM - 4:30 PM EDT Ottawa / Online (AnyWare) Reserve Your Seat
Nov 17 - 19 9:00 AM - 4:30 PM EST Herndon, VA / Online (AnyWare) Reserve Your Seat
Dec 15 - 17 9:00 AM - 4:30 PM EST New York / Online (AnyWare) Reserve Your Seat
Jan 12 - 14 9:00 AM - 4:30 PM EST Ottawa / Online (AnyWare) Reserve Your Seat
Feb 16 - 18 9:00 AM - 4:30 PM EST Herndon, VA / Online (AnyWare) Reserve Your Seat
Mar 16 - 18 9:00 AM - 4:30 PM EDT New York / Online (AnyWare) Reserve Your Seat

Guaranteed to Run

When you see the "Guaranteed to Run" icon next to a course event, you can rest assured that your course event — date, time — will run. Guaranteed.

important SecDevOps Foundation Training Information

Who Should Attend this Course

Software Developers/Tester, Release Manager, Automation Architects, XA Professional, Security Engineer, System Administrators.
Certification Information
- The exam is taken in-class and is included in the course tuition.
- The exam is open book and is 60 minutes in duration.
- To maintain the value and integrity of the certification, all candidates are required to attend approved DOI classes through one of the DOI REPs (Registered Education Providers) to be eligible to sit the exam.
- DOI exams are administered by Kryterion Global Testing Solutions.
- Exam administered through DOI leading to Certification.

SecDevOps Foundation Training Outline

Agile/DevOps Foundation Review
- What is Agile/DevOps?
- DevOps Goals
- DevOps Values
- DevOps Stakeholders
Why SecDevOps?
- Key Terms and Concepts.
- Why SecDevOps is important.
- 3 Ways to Think About DevOps + Security.
- Key Principles of SecDevOps
- SecDevOps security-first philosophy.
- SecDevOps evolution from DevSecOps.
Culture and Management
- Key Terms and Concepts
- Incentive Model
- Resilience
- Organizational Culture
- Generativity
- Erickson, Westrum, and LaLoux
Strategic Considerations
- Key Terms and Concepts.
- How Much Security is Enough?
- Threat Modeling.
- Context is Everything.
- Risk Management in a High-velocity World.
- Team Security Profiling
General Security Considerations
- Avoiding the Checkbox Trap
- Basic Security Hygiene
- Architectural Considerations
- Federated Identity
- Log Management
Feature and Security Workflow
- Configuration Management
- Centralized Workflow
- Workflow Branch Classifications
- Pre and post commit
- Deployment and Release Orchestration
Acquisition Lifecycle Security
- Needs Phase requirements vs. security.
- Acquisition Review Board (ARB)
- Analyze/Select Phase measurement metrics.
- Obtain Phase Life Cycle
- Planning and Scheduling
- Dispose Phase Concerns
Identity and Access Management (IAM)
- Key Terms and Concepts
- IAM Basic Concepts
- Why IAM is Important
- Implementation Guidance
- Automation Opportunities
- How to Hurt Yourself with IAM
Application Security
- Application Security Testing (AST)
- Testing Techniques
- Prioritizing Testing Techniques
- Issue Management Integration
- Threat Monitoring
- Leveraging Automation
- Secure Coding and OWASP compliance
Operational Security
- Key Terms and Concepts
- Basic Security Hygiene Practices
- Role of Operations Management
- The Ops Environment
- Embracing Fail-Early, Fail-First
- Security infrastructure as code
Cross-Team Security
- Key Terms and Concepts
- Establishing Trust
- Promoting Shared Responsibility
- Team Verification Techniques
- Embedded Point-of-Contact
- Security, Development and Operations Sprints
Roles and Responsibilities
- SecDevOps Coach
- Product Owner Expanded Responsibilities
- Program and Project Manager
- Information System Security Officer (ISSO)
- SecDevOps Engineer
- Site Reliability Engineer
Governance, Risk, Compliance (GRC) Audit
- Key Terms and Concepts
- What is GRC?
- Why Care About GRC?
- Rethinking Policies
- Policy as Code
- Shifting Audit Left
- 3 Myths of Segregation of Duties vs. DevOps
Logging, Monitoring and Response
- Key Terms and Concepts
- Setting Up Log Management
- Incident Response and Forensics
- Threat Intelligence and Information Sharing
Continual Improvement
- Retrospectives
- Continuous Learning
- Open Collaboration (including security)
- Shared intelligence
Review and Summary
- Exam Review
- Key course concepts
- Next steps

Team Training

SecDevOps Foundation Training FAQs

How is this course different from DevSecOps?

SecDevOps is an initiative to put cybersecurity first, along with extensions that aim to ensure optimum security throughout all phases of the software life cycle, within the cybersecurity, development, and operations teams.

Preferred method of contact:

Phone Email

Chat Now

SecDevOps Foundation Training (SDOF)

Level: Intermediate

You Will Learn How To

Training Solutions

Details & Schedule

FAQs

Related Training

Get Started

Key Features of this SecDevOps Foundation Training:

You Will Learn How To:

Choose the Training Solution That Best Fits Your Individual Needs or Organizational Goals

In Class & Live, Online Training

Team Training

Save More On Training with FlexVouchers – A Unique Training Savings Account

In Class & Live, Online Training

Time Zone Legend:

Note: This course runs for 3 Days

important SecDevOps Foundation Training Information

Who Should Attend this Course

Certification Information

SecDevOps Foundation Training Outline

Agile/DevOps Foundation Review

Why SecDevOps?

Culture and Management

Strategic Considerations

General Security Considerations

Feature and Security Workflow

Acquisition Lifecycle Security

Identity and Access Management (IAM)

Application Security

Operational Security

Cross-Team Security

Roles and Responsibilities

Governance, Risk, Compliance (GRC) Audit

Logging, Monitoring and Response

Continual Improvement

Review and Summary

Team Training

SecDevOps Foundation Training FAQs

How is this course different from DevSecOps?

Related Training

Why do we require your location?

Contact us

Training & Transformation Solutions

Company

Stay Connected

Please Choose a Language

Canada - English

Canada - Français