Earn your DevSecOps Engineering Foundation certification with the award-winning online training team at Good e-Learning!
Security has become a fundamental aspect of value for organizations that regularly deploy new code. DevSecOps adds security to the DevOps approach, integrating security and compliance into every stage of a pipeline and upskilling all staff on best practices. The all-new DevSecOps V 2.0 syllabus offers tools, insight, and best practices on how to establish and improve DevSecOps cultures. Optimize your security by kickstarting your DevSecOps training today!
Module 0: Welcome to DevSecOps Foundation
Learning Objectives
Module zero introduces you to the DevSecOps online training course’s main features, learning plan, aims and objectives, and structure.
It also offers a syllabus, diagram pack, glossary, further reading and links document, and links to download essential copies of the framework’s publications. It also addresses some of the most frequently asked questions about the approach.
This module also provides students with a toolkit:
Table of contents
DevOps Foundation reference sheet
DevSecOps reference sheet
Skills self-audit form
Glossary
Build your own glossary
Further resources
Diagram pack
Lastly, students will be given a complete exam information guide and a list of further literature that will be useful throughout the course.
Module 1: Realizing DevSecOps outcomes
Learning Objectives
In module one, we take a look at the background and evolution of the approach. We also cover CALMS and the Three Ways.
We also dive into issues and constraints associated with security and explore what is meant by the term ‘safety culture’.
Module 2: Defining the cyber threat landscape
Learning Objectives
In module two, we move on to consider the concepts of threat modeling, supply chain hygiene, and continuous compliance.
We also look at common risks and vulnerabilities practitioners have to deal with.
Module 3: Integrating DevSecOps stakeholders
Learning Objectives
In this module, we explore what a ‘good’ culture looks like and how we can both understand cultural differences and close any cultural gaps within organizations.
We also examine the types of stakeholders involved in DevSecOps cultures, as well as the different metrics that are important to them, before concluding with a review of governance, flow, and control.
Module 4: Establishing DevSecOps practices
Learning Objectives
In this module, we explore how you can set up DevSecOps practices.
We also cover the topics of continuous security, onboarding and resistance, the CI/CD pipeline, and both Cloud and Container security.
Module 5: Memory game
Learning Objectives
This module includes a short memory game designed to test how many key terms and definitions you can recall from modules 1-4.
Module 6: Best practices to get started
Learning Objectives
In module six, we address the best practices for flow, feedback, and learning.
Module 7: DevOps pipelines and continuous compliance
Learning Objectives
Here, we dive into the DevOps pipeline, including the planning and construction activities associated with it.
We also explore the goals and the perils of the pipeline as well as continuous integration and delivery practices before considering how engineers can secure a pipeline.
Module 8: Building a responsive DevSecOps model
Learning Objectives
In module eight, we move on to explore what we mean by the term ‘responsive’ and why it is important when operating in cyber threat landscapes.
We also analyze KPIs, measuring, and reporting before addressing how to implement a secure pipeline.
Module 9: Learning using outcomes
Learning Objectives
Module 9 addresses the importance of continual learning and touches on principles like training as policy, learning communities, and the value of retrospective and innovative learning.
Module 10: Memory game
Learning Objectives
This module includes a short memory game designed to test how many key terms and their definitions you can recall from modules 6-9.
Module 11: Course wrap-up
Learning Objectives
This module concludes the course.
Module 12: Practice Exams
Learning Objectives
The course comes with two practice exams to help students prepare for the certification exam. The first one was developed by the DevOps Institute, while the second has been tailored by our team of experts at Good e-Learning.
Students are advised to become familiar with the testing environment before booking the official exam.
When you feel you are ready to sit the exam, simply contact Good e-Learning to request your FREE exam voucher.
This DevSecOps course is designed to fully prepare students to sit the official DevSecOps Foundation (DSOF) examination. Students will also learn that the benefits of the approach far outweigh anything DevSecOps costs to implement.
This DevSecOps e-learning course comes with mock exams to help students prepare for the real thing, as well as a FREE exam voucher.
Before booking your exam, it will be a good idea to make sure that your device meets the technical requirements. Please visit the DevOps Institute website for more information and guidance.
When you are ready to use your free exam voucher, simply contact [email protected]. Exam voucher requests are typically processed within 2 working days but please allow up to 5. Students must request their exam voucher within the course access period which starts from the date of purchase. For more information, please visit our Support & FAQs page.
DevSecOps Foundation (DSOF)℠ Certification exam:
- Online proctored exam
- 40 multiple-choice questions
- Open-book
- There is a time limit of 60 minutes to complete the exam
- The pass mark for the exam is 65%: you must answer at least 26 out of 40 questions correctly
What is DevSecOps?
DevSecOps is a relatively recent development in the world of DevOps. It adds security to DevOps’ focus on development and operations by making sure security considerations are addressed (and, where possible, automated) throughout all key processes.
DevSecOps v2.0 is the latest version from the DevOps Institute. Its insight and best practices have been updated, and it also has a greater emphasis on exploring and understanding the current ‘cyber threat landscape’.
Why is security important in DevOps?
DevOps helps organizations to greatly streamline development and operations processes. However, traditional security measures struggle to keep up with this speed, which can leave DevOps users and their products vulnerable. DevSecOps solves this problem by speeding up security while also making it more of a priority.
How does DevSecOps work?
DevSecOps works by integrating security processes with DevOps practices. It establishes ongoing ‘security as code’ cultures (meaning that security checks, tests, and gates are added to processes that involve code and infrastructure).
It also encourages collaboration, communication, and shared responsibility for security.
What is a DevSecOps engineer?
DevSecOps engineers are tasked with overseeing the implementation and management of DevSecOps. They choose appropriate tools and programs for security and automation while also making sure that all team members are up to date on how to optimize security
How can DevSecOps benefit businesses?
Applying traditional security measures to DevOps creates a bottleneck, greatly slowing down key processes and delaying release dates. DevSecOps removes the bottleneck by making security a priority throughout.
Not only does it leave DevOps products safer, but it also ensures this without causing major delays.
What do I need to know about the DevSecOps examination?
The DevSecOps Foundation (DSOF) exam is a closed book examination consisting of 40 multiple-choice questions. The exam lasts 60 minutes (with 25 additional minutes for students who do not speak English as a native language). The pass mark for the exam is 65%.
What does the DevSecOps certification path look like?
DevSecOps does not have a strictly defined certification path. However, it is best to study the methodology with an accredited training provider.
How valuable is DevSecOps training?
According to Neuvoo, DevSecOps certified practitioners can earn between $70,000 and $205,000. According to TotalJobs, DevSecOps users in the UK can earn between £30,000 and over £150,000. Salaries also depend on each candidate’s role, location, and experience.
What other frameworks can complement DevSecOps?
DevSecOps can be used with a number of other frameworks, such as ITIL 4, PMP, and PRINCE2.
