In today's Business Era, bad news or breach news spreads in seconds and can have immense impact on the customer and company's Reputation.
For any organization involved in application development and delivery, Giving security a same importance with development and operations is a must. Every developer and network administrator considers security while creating and deploying applications when DevSecOps and DevOps are merged.
Security is a major concern in the DevOps world. There is a constant push for companies to move more quickly, and security teams struggle to keep up with testing. This has led to the rise of a new field: DevSecOps.
DevSecOps refers to the seamless integration of security testing, review throughout the software development and deployment lifecycle.
Now this course introduces the concept of DevSecOps and explains how an organization can build a DevSecOps program. It will helps teams integrate security into their application development pipeline. You will learn about the role of DevOps Basics, DevSecOps Foundation, and security controls in various stages of CI/CD.
DevOps Basics - In this section you will learn about following topics
Traditional Development & Security Working
What is DevOps
How to Fit in Security in DevOps World
Learn DevSecOps Foundation - In this section you will learn about following topics
Introduction to DevSecOps
Benefits of DevSecOps
Challenges of DevSecOps
Why is DevSecOps Important
Begin your DevSecOps Journey - In this section you will learn about following topics
Understanding Shift Left Security Approach
What is Common in DevOps and Cloud
What is SAST and common tools
What is DAST and common tools
Tips for Choosing Right tools
DevSecOps controls - In this section you will learn about following topics
DevSecOps Security Controls
Security in Plan and Develop Phase
Security in Code commit
Security in Build and Test Phase
Security in Production and Operate phase
Reference materials about DevSecOps- In this section you will learn about following topics
OWASP - Secure Coding Practices
Guidance on DevOps pipeline security by OWASP
