DEVSECOPS FOUNDATION (DEVSECOPSF)

– Origins of DevOps
– Evolution of DevSecOps
– CALM
– The Three Ways

– What is the cyber threat landscape?
– What is the threat?
– What are we protecting against?
– What are we protecting against and why?
– How do I talk to security?

– Proving the Model
– Technical, Business, and Human Results
– What is Measured?
– Gating and Threshold

– The DevSecOps State of Mind
– DevSecOps Stakeholders
– What’s at Stake for Whom?
– Engaging in the DevSecOps Model

– Starting Where You Are
– Integrating People, Processes, and Technology and Governance
– DevSecOps Operating Model
– Communication Practices and Boundaries
– Focusing on Outcomes

– The Three Ways
– Identifying Target States
– Value Stream Thinking

– The Goal of a DevOps Pipeline
– Why Continuous Compliance Matters
– Archetypes and Reference Architectures
– Coordinating DevOps Pipeline Construction
– Categories, Types, and Examples of DevSecOps Tools

– Security Training Options
– Training as Policy
– Experiential Learning
– Cross-Skills
– The Collective Body of DevSecOps Knowledge
– Preparing for the DevSecOps Foundation Certification Exam