Official websites use .gov
A .gov website belongs to an official government organization in the United States.
Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.
DevSecOps Security
This course provides an overview of DevSecOps from a security perspective. It presents what DevSecOps is about, the benefits it can bring, as well as challenges that an organization might face while implementing such a program. It covers the roles and responsibilities in a DevSecOps team, focusing on the concept of security champions. It also covers issues related to changes in processes that are required, explaining how threat modeling can be applied in DevSecOps. Subsequently, it goes deeper into analyzing the categories of security testing tools that can be used during the development lifecycle, when they can be used, and what you can achieve with each one. It focuses on analyzing the results that all these tools produce and orchestrating remediation of security issues. Finally, it discusses the importance of metrics and KPIs for measuring the effectiveness of DevSecOps and provides some recommendations for security monitoring and patch management.
Provider Information
SecureCodeWarrior
265 Franklin Street Suite 1702
Boston, MA 02110
Course Overview
none
Learning Objectives
By the end of this content, learners will be able to:
- Understand the core elements that are required for building a DevSecOps program.
- Describe roles and responsibilities in a DevSecOps team.
- Understand the role of security champions.
- Create a security testing pipeline to perform security tests throughout the development lifecycle.
- Understand what different application security testing tools do and when they should be used in a CI/CD pipeline.
- Manage the results from security testing and orchestrate patching.
- Develop KPIs and monitor the performance of a DevSecOps program.
- Monitor the security of an application in a production environment.
- Automate the patch management process.
Framework Connections
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
Competency Areas
Feedback
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.