Course Outline
Introduction
- Understanding how DevOps amplifies organizational security risks
- Trade-offs involving agility, speed, and decentralized control
Limitations of Conventional Security Tooling
- Static security policies
- Traditional firewall configurations
- Insufficient API integration capabilities
- Deficiencies in visualization and monitoring tools
Establishing a Security Program Aligned with DevOps
Aligning Security Objectives with Business Goals
Eliminating Security as a Development Bottleneck
Implementing Granular System Visibility
Standardizing Security Configurations
Integrating Security Sensors into Applications
- Interactive Application Security Testing (IAST)
- Runtime Application Self-Protection (RASP)
Exposing Security Data to DevOps Tools via RESTful APIs
Enabling On-Demand Scaling and Micro-Perimeterization of Security Controls
Developing Resource-Specific Granular Security Policies
Automating Attack Simulations Against Pre-Production Code
Continuous Testing Within the Production Environment
Securing Web Applications from an Agile and DevOps Standpoint
Protecting Containers and Cloud Environments
Adopting Next-Generation Automated Security Solutions
The Strategic Role of DevOps in the Future of Security
Summary and Key Takeaways
Requirements
- Practical experience with DevOps practices.
- Fundamental understanding or a strong interest in security concepts.
Target Audience
- DevOps Engineers
- Security Engineers
Testimonials (3)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
Jacek - Softsystem
Course - DevOps Engineering Foundation (DOEF)®
real life examples
