Introduction to DevSecOps Training

Introduction

DevSecOps represents the evolution of the software development lifecycle, where development, security, and operations seamlessly intersect. It automates the integration of security at each phase of the IT lifecycle, and promotes a shared responsibility between teams. This two-day course covers the foundational concepts of DevSecOps, and why security has become critical to each phase of the software development lifecycle. 

Objectives

Upon completion of the class, participants will have the foundation to understand DevSecOps and be able to implement a process where products and services have a compliant source to Production pipeline.

Topics

• Introduction to DevSecOps
• A CI/CD Journey – Process, People, and Tools
• Adding Security to the Ci/CD
• Software Component Analysis
• Static Analysis in CI/CD
• Dynamic Analysis
• Infrastructure Security with Infrastructure as Code
• Compliance with Code

Audience

Developers, Delivery team, and Compliance Team (members), IT Managers and Security Professionals, Project and Product Managers, Testing and Quality Assurance Teams, Site Reliability Engineers, along with Maintenance and support staff who are interested in learning about and architecting DevSecOps strategies and automation.

Prerequisites

It is assumed that the participant has attended and completed DevOps Foundation training, or has been part of an organization that has implemented (at least) basic DevOps principles.  

Students must meet the following:

• Basic Operations skills like file editing, file manipulation, process management, and other command line skills (for Linux primarily)
• Basic Networking including ip addresses, firewall basics, and remote socket/port access.
• Basic application deployment either manually or automated
• Git repo management including merges and feature branch management
• CI/CD familiarity plus experience with a build server like Jenkins, Bamboo, etc.
• Experience with an “Infrastructure as Code” tool such as Terraform, Cloud formation, Trophosphere, etc.

Duration

Two Days