Module 1: Understanding DevSecOps
- DevSecOps principles and practices
- Importance of integrating security into DevOps
- Key differences between DevOps and DevSecOps
- Case studies of successful DevSecOps implementations
Module 2: Cyber Threat Landscape (CTL)
- Overview of current cyber threats and vulnerabilities
- Tactics, techniques and procedures (TTPs) used by cybercriminals
- OWASP top 10 vulnerabilities
- Strategies for mitigating and responding to cyber threats
Module 3: Secure Software Supply Chain
- Understanding software supply chain security
- Tools for Software Composition Analysis (SCA)
- Implementing SCA in the DevOps pipeline
- CNCF best practices for securing the software supply chain
Module 4: Static Application Security Testing (SAST)
- Introduction to SAST
- Tools and techniques for SAST
- Integrating SAST into CI/CD pipelines
- Interactive discussion on implementing SAST in a CI/CD pipeline