Course Outline
Introduction
- Assessing how DevOps introduces heightened security risks for organizations
- The trade-offs of agility, rapid deployment, and decentralized control
Limitations of Traditional Security Instruments
- Static security policies
- Conventional firewall rules
- Absence of APIs for seamless integration
- Limited availability of visualization tools
Establishing a DevOps-Ready Security Program
Aligning Security Objectives with Business Goals
Eliminating Security as a Process Bottleneck
Implementing Detailed Visibility Controls
Standardizing Security Configurations
Integrating Sensors into the Application
- Interactive Application Security Testing
- Runtime Application Self-Protection
Delivering Security Data to DevOps Tools via RESTful APIs
On-Demand Scaling and Micro-Perimeterization of Security Controls
Defining Per-Resource Granular Security Policies
Automating Attacks on Pre-Production Code
Continuous Testing of the Production Environment
Protecting Web Applications from an Agile/DevOps Perspective
Securing Containers and Cloud Environments
Adopting Next-Generation Automated Security Tools
The Future of DevOps and Its Strategic Role in Security
Summary and Conclusion
Requirements
- Practical experience with DevOps practices.
- Fundamental understanding or a strong interest in information security.
Target Audience
- DevOps engineers
- Security engineers
Testimonials (3)
Craig was extremely involved in the training, always making sure we are paying attention, adapted the examples to our day-to-day activities and always provided an answer when asked, even if the information was not added in the presentation.
Ecaterina Ioana Nicoale - BOOKING HOLDINGS ROMANIA SRL
Course - DevOps Foundation®
High level of commitment and knowledge of the trainer
Jacek - Softsystem
Course - DevOps Engineering Foundation (DOEF)®
real life examples
