DevSecOps Foundation (DSOF)℠ eLearning - $609 (with exam)

Learning Objectives

This module presents the course structure and lesson plan. It also includes a DevOps refresher, which contains essential information covered in DevOps Foundation, putting students in an excellent frame of mind to start with DevSecOps Engineering.

This module also provides students with a toolkit:

Table of contents
DevOps Foundation reference sheet
DevSecOps reference sheet
Skills self-audit form
Glossary
Build your own glossary
Further resources
Diagram pack

Lastly, students will be given a complete exam information guide and a list of further literature that will be useful throughout the course.

Learning Objectives

Module 1 answers the question: What is DevSecOps?

It also compares DevSecOps and DevOps, looks at the definition of the security framework and explains the 'why' and 'how'.

By the end of the module, students will be acquainted with the DevSecOps security mindset, along with its principles and concepts.

We will also provide students with an introduction to business transformation and the importance of scaling through automation.

Learning Objectives

Module 2 describes the importance of appropriate management, mindset and cultural change for bringing about a successful DevSecOps implementation.

In this module, students will learn about organizational types and culture, get insight into the incentive model and the advice process and, finally, learn how to improve team performance through some simple techniques.

We will also discuss the importance of resilience and developing a generative culture within organizations that seek to utilize DevSecOps.

Learning Objectives

This module will introduce students to key concepts that require strategic thinking and planning.

During this module, we’ll pay special attention to threat modeling, attack path, metric, context and risk management process.

Learning Objectives

This module outlines the key security considerations that must be followed by any DevSecOps engineer, with a specific focus on basic security hygiene.

We will talk about key security concepts, such as the checkbox trap, basic security hygiene, architecture, federated identity and log management.

Students will learn what these terms mean and discover their relevance to the overall security system.

Learning Objectives

This module discusses technical details involved in security practices that should be incorporated into any DevSecOps program.

Students will learn the key concepts surrounding IAM, as well as the main considerations for effective resource management.

Learning Objectives

Module 6 covers measures used to improve the security of an application and what a developer can do to test the application to ensure there are no vulnerabilities.

We will talk about application security concepts, practices and tools for testing and techniques.

Then, we will discuss software composition analysis and threat modeling. Students will also learn how to integrate new findings into daily work and how to implement security tools to established pipeline development processes.

Learning Objectives

In this module, we will discuss some further practices used to increase security within the operations environment and how to scale DevSecOps practices across an enterprise.

We will talk about basic security hygiene, vulnerability and patch management, and the importance of pre-secured environments to the shift-left mindset.

We will also reinforce the necessity of cultural transformation, moving away from internal competition and siloed thinking in order to build cooperative teams.

Learning Objectives

This module explains the importance of governance, risk management and compliance, as well as their related security principles and concepts.

We’ll discuss what GRC means in a DevOps context and the reason why we should implement the shift left mindset to audit and compliance.

Students will also gain an insight into policy as a code, and together we’ll debunk some myths about separation of duties.

By the end of this module, students will be able to describe the key concepts that underline GRC and audit in DevSecOps and demonstrate an understanding of how to apply in practice the main GRC considerations.

Learning Objectives

Module 9 outlines processes and approaches to log management, incident response and threat intelligence.

We will explore the benefits of log management and possible approaches to incident response. We will also go through the concepts of threat intelligence integration and info sharing.

Learning Objectives

This module presents two practice exams. The first one was developed by the DevOps Institute, while the second has been tailored by our team of experts at Good e-Learning.

When you feel you are ready to sit the exam, simply contact Good e-Learning to request your FREE exam voucher.

DevSecOps is a relatively recent development in the world of DevOps. It adds security to DevOps' focus on development and operations by making sure security considerations are addressed (and, where possible, automated) throughout all key processes.

DevOps helps organizations to greatly streamline development and operations processes. However, traditional security measures struggle to keep up with this speed, which can leave DevOps users and their products vulnerable. DevSecOps solves this problem by speeding up security while also making it more of a priority.

DevSecOps works by integrating security processes with DevOps practices. It establishes ongoing 'security as code' cultures (meaning that security checks, tests, and gates are added to processes that involve code and infrastructure).

It also encourages collaboration, communication, and shared responsibility for security.

DevSecOps engineers are tasked with overseeing the implementation and management of DevSecOps. They choose appropriate tools and programs for security and automation while also making sure that all team members are up to date on how to optimize security

Applying traditional security measures to DevOps creates a bottleneck, greatly slowing down key processes and delaying release dates. DevSecOps removes the bottleneck by making security a priority throughout.

Not only does it leave DevOps products safer, but it also ensures this without causing major delays.

The DevSecOps Foundation (DSOF)℠ exam is an open-book examination consisting of 40 questions. The exam lasts 90 minutes (with 25 additional minutes for students who do not speak English as a native language). The pass mark for the exam is 65%.

DevSecOps does not have a strictly defined certification path. However, it is best to study the methodology with an accredited training provider.

According to Neuvoo, DevSecOps certified practitioners can earn between $70,000 and $205,000. According to TotalJobs, DevSecOps users in the UK can earn between £30,000 and over £150,000. Salaries also depend on each candidate's role, location, and experience.

DevSecOps can be used with a number of other frameworks, such as ITIL 4, PMP, and PRINCE2.