Course Outline
Introduction
- Understanding how DevOps practices introduce heightened security risks for organizations
- The trade-offs associated with agility, speed, and decentralized control
Limitations of Traditional Security Tools
- Static security policies
- Rigid firewall rules
- Insufficient API integration capabilities
- Limited visualization tools
Establishing a DevOps-Centric Security Program
Aligning Security Initiatives with Business Objectives
Eliminating Security Bottlenecks
Implementing Comprehensive Visibility
Standardizing Security Configurations
Embedding Sensors Within Applications
- Interactive Application Security Testing
- Runtime Application Self-Protection
Integrating Security Data with DevOps Tools via RESTful APIs
On-Demand Scaling and Micro-Perimeterization of Security Controls
Implementing Granular, Resource-Specific Security Policies
Automating Attack Simulations Against Pre-Production Code
Continuous Testing of Production Environments
Web Application Security from an Agile/DevOps Standpoint
Hardening Containers and Cloud Environments
Adopting Next-Generation Automated Security Solutions
The Strategic Role of DevOps in the Future of Security
Summary and Conclusion
Requirements
- Practical experience with DevOps workflows.
- Fundamental knowledge of or a strong interest in cybersecurity.
Target Audience
- DevOps Engineers
- Security Engineers
Testimonials (2)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer