SecDevOps Training: SDOF Certification

In this module, you will learn how to:

• Key terms and concepts 
• Why SecDevOps is important 
• 3 Ways to think about DevOps + Security 
• Key principles of SecDevOps 
• SecDevOps security-first philosophy 
• SecDevOps evolution from DevSecOps 

In this module, you will learn how to:

• Key terms and concepts 
• How much security is enough? 
• Threat modeling 
• Context is everything 
• High-velocity risk management 
• Team security profiling 

In this module, you will learn how to:

• Avoiding the checkbox trap 
• Basic security hygiene 
• Architectural considerations 
• Federated identity 
• Log management 

In this module, you will learn how to:

• Configuration management 
• Centralised workflow 
• Workflow branch classifications 
• Pre- and post-commit 
• Deployment and release orchestration 

In this module, you will learn how:

• Needs Phase requirements vs. security 
• Acquisition Review Board (ARB) 
• Analyse/Select Phase measurement metrics 
• Obtain phase life cycle 
• Planning and scheduling 
• Dispose phase concerns 

In this module, you will learn how to:

• Key terms and concepts
• IAM basic concepts
• Why IAM is important
• Implementation guidance
• Automation opportunities
• How to hurt yourself with IAM

In this module, you will learn how to:

• Application Security Testing (AST)
• Testing Techniques
• Prioritising Testing Techniques
• Issue Management Integration
• Threat Monitoring
• Leveraging Automation
• Secure Coding and OWASP compliance

In this module, you will learn how to:

• Key Terms and Concepts
• Basic Security Hygiene Practices
• Role of Operations Management
• The Ops Environment
• Embracing Fail-Early, Fail-First
• Security infrastructure as code

In this module, you will learn how to:

• Key Terms and Concepts
• Establishing Trust
• Promoting Shared Responsibility
• Team Verification Techniques
• Embedded Point-of-Contact
• Security, Development and Operations Sprints

In this module, you will learn how to:

• SecDevOps Coach
• Product Owner Expanded Responsibilities
• Programme and Project Manager
• Information System Security Officer (ISSO)
• SecDevOps Engineer
• Site Reliability Engineer

In this module, you will learn how to:

• Key Terms and Concepts
• What is GRC?
• Why Care About GRC?
• Rethinking Policies
• Policy as Code
• Shifting Audit Left
• 3 Myths of Segregation of Duties vs. DevOps

In this module, you will learn how to:

• Key Terms and Concepts
• Setting Up Log Management
• Incident Response and Forensics
• Threat Intelligence and Information Sharing

In this module, you will learn how to:

• Retrospectives
• Continuous Learning
• Open Collaboration (including security)
• Shared intelligence

In this module, you will learn how to:

• Exam Review
• Key course concepts
• Next steps