DevSecOps Training and Certification (16th and 17th Nov 2019)

Day 1

Why DevSecOps is important

3 Ways to Think About DevOps+Security

Key Principles of DevSecOps

Culture and Management

• Incentive Model
• Generativity
• Erickson, Westrum, and LaLoux
• Strategic Considerations

Identity & Access Management

• Why IAM is important
• Implementation Guidance

Automation Opportunities

Day 2

Application Security Testing

• Testing Techniques
• Prioritizing Testing Techniques
• Issue Management Integration
• Threat Modeling
• Leveraging Automation

Operational Security

• Security Hygiene Practices
• Role of Operations Management

Governance, Risk, Compliance (GRC) and Audit

• Rethinking Policies
• Policy as Code
• Shifting Audit Left

Logging, Monitoring, and Response