SecDevOps Foundation® (SDOF) Certification Training

Duration: 3 days
Exam Voucher: Yes
Language: English
Level: Intermediate

SecDevOps is the latest evolution in secure software development. Since its introduction in the guidebook by the U.S. Department of Homeland Security (DHS), it has become the go to methodology for writing highly secure computer programs, especially for government, commercial financial institutions and any other organizations which require the highest levels of cyber protection.

This certification training course will help you prepare for and successfully attain the highly respected SecDevOps Foundation (SDOF) certification. In this course, you will learn:

Benefits, concepts, processes and vocabulary of SecDevOps to produce secure software and maintain high-quality agile delivery at speed and scale.
Why SecDevOps evolved as an agile methodology and went past the original DevSecOps practice of Continuous Integration and Continuous Delivery to include security/regulator Continuous Compliance (CI/CD/CC).
Which organizational culture changes and individual mindset perspectives are necessary to foster ongoing SecDevOps success and improvement.
How to plan, design and use a pipeline to test and operationally deploy and monitor production infrastructure.
Which techniques are best to find vulnerabilities and perform threat modeling to achieve a security-first perspective in the software development lifecycle.

SecDevOps Training Delivery Methods

In-Person
Online
Upskill your whole team by bringing Private Team Training to your facility.

SecDevOps Foundation Training Information

In this SecDevOps Foundation Course, you will:

Prepare for official SecDevOps Foundational certification (SDOF) from the DevOps Institute by PeopleCert.
Accelerate understanding and learning enjoyment through hands-on exercises and meaningful, problem-solving small group discussions.
Establish continuous learning practices to face new challenges including leveraging after-course one-on-one instructor coaching included in the course tuition.

Prerequisites

None.

SecDevOps Foundation Certification Details

The 60-minute certification exam is open-book and taken online after the course delivery has finished. An exam voucher is included in the course tuition.
The certification exam is administered through the DevOps Institute by PeopleCert.

SecDevOps Foundation Training Outline

Learning Objectives

Module 1: SecDevOps Context

Megatrends and Context
CALM Principles
The 3 Ways

Module 2: Background and Overview

Iterative and incremental
From Scrum to SecDevOps
Automated testing
Key principles and security-first philosophy
Exercise: Security Policy Test Planning

Module 3: Tools, Technology and the Pipeline

Continuous Integration, Delivery, Deployment and Compliance
SecDevOps lifecycle and the Pipeline
Pipeline for development
Pipeline for operations (Configuration as Code)
Exercise: Using a Vulnerability Scanner, Hands-On
Cloud, containers and security integration
Pipeline maturity and planning
Pipeline and other development tools
Exercise: Planning a Pipeline

Module 4: Risk, Vulnerabilities and Threats

Risk assessment – key goal
Cyber intelligence (know the enemy)
Threat and Vulnerability Catalogs
Exercise: SQL Injection Example, Hands-On
Threat modeling (STRIDE, OCTAVE and the PASTA process)
Exercise: Threat Modeling, Gamification
Gathering threat and vulnerability metrics
Exercise: Quantitative Scoring of Vulnerabilities (CVSS), Hands-On

Module 5: Culture Change and Leadership Mindset

What is good culture?
Culture assessment models – safe, trustworthy and empowering
Exercise: Identifying and improving your organization’s culture, video review
Leadership Mindset – Fixed or Growth
Agile at the organizational level (SAFe and SRE)
Personnel, stakeholders and the team
Homework Exercise: Mindset self-evaluation spreadsheet (optional)

Module 6: Best Practices for SecDevOps

Planning with a vision – start from where you are
Measuring your organization’s SecDevOps maturity
Exercise: SecDevOps Implementation Stages, survey
Embracing and enabling organization-level governance
Why care about GRC?
Rethinking policies - policy as code
Building a responsive model
Deploying immutable infrastructure
Ongoing monitoring and evaluation
Exercise: Intrusion Detection, hands-on

Module 7: Continuous Learning

Experiential learning
Retrospective learning
Continual improvement
Learning sources

Module 8: Review and Summary

Exam review
Key course concepts
Next steps

Commercial Pricing

20 930 kr

3-day instructor-led training course
After-course instructor coaching available
DevOps Institute certification exam included

Would you like to take this course as a team?

Include dates with afternoon start times

mar 25 - 27 9:00 - 16:30 CET

Stockholm or Virtual
mar 25 - 27 10:00 - 17:30 CET

London or Virtual
mar 25 - 27 15:00 - 22:30 CET

Austin or Virtual
maj 13 - 15 15:00 - 22:30 CEST

Ottawa or Virtual
jun 16 - 18 15:00 - 22:30 CEST

Herndon, VA or Virtual
jun 24 - 26 9:00 - 16:30 CEST

Stockholm or Virtual
jun 24 - 26 10:00 - 17:30 CEST

London or Virtual
jul 15 - 17 15:00 - 22:30 CEST

New York or Virtual
aug 5 - 7 15:00 - 22:30 CEST

Toronto or Virtual
aug 19 - 21 16:00 - 23:30 CEST

Austin or Virtual
sep 23 - 25 9:00 - 16:30 CEST

Stockholm or Virtual
sep 23 - 25 10:00 - 17:30 CEST

London or Virtual
sep 23 - 25 15:00 - 22:30 CEST

Ottawa or Virtual
nov 4 - 6 15:00 - 22:30 CET

Herndon, VA or Virtual
dec 9 - 11 15:00 - 22:30 CET

New York or Virtual
dec 16 - 18 9:00 - 16:30 CET

Stockholm or Virtual
dec 16 - 18 10:00 - 17:30 CET

London or Virtual
jan 6 - 8 15:00 - 22:30 CET

Toronto or Virtual
jan 13 - 15 16:00 - 23:30 CET

Austin or Virtual

Scroll to view additional course dates

Speak with a Learning Consultant

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Speak with a Learning Consultant

Fill out the form below

Inquiring For

Myself

Team/Group

First Name*

Last Name*

Email*

Phone Number*

Company*

Job Title

I'm interested In

* Required Fields

Need Help Finding The Right Training Solution?

Our training advisors are here for you.

SecDevOps Foundation Training FAQs

SecDevOps is a powerful modern approach for creating software that integrates security into the development life cycle. The U.S (United States). Department of Homeland Security (DHS) initiative effectiveness has been empirically proven to improve cyber protection significantly.

As a result, it is invaluable for reaching current CMMC (Cybersecurity Maturity Model Certification) requirements for vendors and government agencies.

DevSecOps and SecDevOps are remarkably similar frameworks. SecDevOps is formally proffered by DHS and has a distinctly “security first” philosophy. Over time, SecDevOps is evolving new insights and practices that go beyond the original scope of DevSecOps (such as planning, acquisition, and disposal of assets).

This course is intended for security experts, software developers, and operations specialists who must work in collaborative teams and understand SecDevOps basics. Accordingly, the material proceeds quickly into applicable practices for achieving highly robust CI/CD/CC results. The goal is to know where you are now, where you want to be in the future, and how best to get there.

PeopleCert CPDs are the continuing education credits that help you maintain PeopleCert certifications in PRINCE2, ITIL and DevOps Institute.

Maintaining PeopleCert Certifications
All PeopleCert Business and IT certifications (including PRINCE2, ITIL and DOI) must be renewed within three years of their original certification date. There are two ways to keep certifications current:

Join PeopleCert Plus (a paid membership) to earn 20 CPDs per year for 3 years and renew certifications that way.
Earn another certification from the same Product Suite (for example, to renew all ITIL certifications you can earn a new ITIL certification)

Eligible Learning Tree Training
Learning Tree training is not eligible for the PeopleCert Plus CPD program. Attendees can renew their PeopleCert certifications with Learning Tree by enrolling in another certification from the product suite they're trying to renew. Examples:

If you hold an ITIL 4 Foundation certification, and you acquire an ITIL 4 Practitioner or ITIL 4 Specialist certification, all your certification(s) belonging to the ITIL 4 Product Suite will be renewed.
Similarly, if you hold a PRINCE2 Practitioner certification and you acquire an MSP Foundation, all your certification(s) belonging to the PRINCE2 Project, Programme & Portfolio Management Suite will be renewed.

Learn more about eligibility and CPDs on the PeopleCert website: Keep your certifications current| (peoplecert.org)

Attendee Process for Renewing PeopleCert Certifications with Learning Tree
Once an attendee successfully earns a PeopleCert certification from the same product suite they're trying to renew, their other certifications in that product suite will automatically renew.

Approval Policies
N/A

SecDevOps Foundation® (SDOF) Certification Training

SecDevOps Training Delivery Methods

SecDevOps Foundation Training Information

SecDevOps Foundation Training Outline

Learning Objectives

Live Instructor 20 930 kr

SecDevOps Foundation Training FAQs

What is SecDevOps?

What is the difference between DevSecOps and SecDevOps?

Who should attend this course?

How do I maintain my DevOps Institute certification?

Related Courses