Module Title: dgt_devops06 – DevSecOps Introduction
Description:
In the rapidly evolving landscape of digital technology, integrating security into every phase of development and deployment is no longer optional—its essential. The module “dgt_devops06 – DevSecOps Introduction” offers a comprehensive introduction to DevSecOps, focusing on embedding security practices within the software build and release processes.
module Objectives:
-
Understand DevSecOps Principles: Gain insights into the philosophy of DevSecOps and its importance in modern digital infrastructure.
-
Security in Software Build and Release: Learn strategies for integrating security measures during the build and deployment phases to identify vulnerabilities early and mitigate risks effectively.
-
Preventive Measures: Explore techniques and tools that help prevent critical issues from arising during the operational phase of digital platforms, ensuring robustness and reliability.
-
Collaborative Culture: Foster a culture of collaboration between development, operations, and security teams to streamline workflows and enhance overall software quality.
Key Topics:
-
DevSecOps Fundamentals: An overview of DevSecOps principles, including the integration of security into CI/CD pipelines.
-
Security Considerations During Build and Release: Delve into best practices for incorporating security checks in build processes, automated testing, and secure coding standards.
-
Tools and Technologies: Introduction to tools that aid in automating security assessments, such as static code analysis, dynamic application security testing DAST, and infrastructure-as-code security scanning.
-
Risk Management and Compliance: Address regulatory requirements and frameworks for maintaining compliance while implementing DevSecOps practices.
-
Case Studies and Real-world Scenarios: Analyze case studies that highlight the impact of DevSecOps on preventing severe issues in production environments.
-
Continuous Improvement: Learn about monitoring, feedback loops, and continuous improvement processes to maintain security posture throughout the software lifecycle.
Target Audience:
This module is designed for developers, IT operations professionals, security practitioners, project managers, and anyone involved in software development and deployment who seeks to enhance their understanding of DevSecOps practices. Whether you are new to the field or looking to update your skills with the latest approaches, this module will equip you with the knowledge needed to implement effective security measures from build to release.
Outcome:
By the end of this module, participants will have a solid foundation in DevSecOps and be prepared to integrate security into their development processes proactively. Youll leave with actionable insights on creating more secure, efficient, and resilient digital platforms, ready to tackle challenges that arise during software operation phases.
Join us in embracing the future of secure development and deployment practices by enrolling in “dgt_devops06 – DevSecOps Introduction.”
The students can push their exercises to the Academy DevOps & SRE GIT project. For this module, create a folder with your username as its name in the following subfolder: https://github.com/Garanti-Del-Talento/gdt_academy