{"title":"DevOps","description":"","products":[{"product_id":"secdevops-foundation-sdof-certification-training","title":"Secure DevOps: SecDevOps Foundation® (SDOF) Certification Training","description":"\u003cdiv\u003e\n\u003cp\u003e\u003cb\u003eSecure DevOps (SecDevOps) \u003c\/b\u003erepresents the evolution of DevOps toward a security-first software engineering approach\u003cb\u003e. \u003c\/b\u003eBuilding upon guidance from the U.S. Department of Homeland Security (DHS), the NIST Secure Software Development Framework (SSDF), and modern DevOps practices, SecDevOps integrates security throughout the entire software lifecycle—including today's AI-enabled applications.\u003c\/p\u003e\r\n\u003cp\u003e Consequently, SecDevOps has become the “go to” methodology for organizations writing high-assurance programs, especially for government agencies, defense contractors, financial institutions, healthcare organizations, critical infrastructure providers, and any organization developing security-sensitive software. It provides an excellent operational framework for implementing the guidance contained within the NIST Secure Software Development Framework (SSDF), for traditional software systems, AI-enabled applications, and software that incorporates generative AI components.\u003c\/p\u003e\r\n\u003cp\u003e Through realistic case studies and hands-on exercises, you will learn to evaluate existing software development practices, identify security gaps, improve DevOps pipelines, integrate NIST SSDF guidance, and apply Secure DevOps principles to both traditional software and AI-enabled systems.\u003c\/p\u003e\r\n\u003cp\u003e This certification training course will help you prepare for and successfully attain the highly respected \u003cb\u003eSecDevOps Foundation (SDOF)\u003c\/b\u003e certification. In this course, you will discover: \u003c\/p\u003e\r\n\u003cul type=\"disc\"\u003e\r\n\u003cli\u003eThe benefits, concepts, processes and vocabulary of SecDevOps to deliver secure software while maintaining Agile speed, flexibility, and quality.\u003c\/li\u003e\r\n\u003cli\u003eHow SecDevOps extends Agile and DevOps for CI\/CD\/CC - Continuous Integration, Continuous Delivery, Continuous Compliance.\u003c\/li\u003e\r\n\u003cli\u003eHow the guidance of the NIST Secure Software Development Framework integrates naturally to complement SecDevOps practices.\u003c\/li\u003e\r\n\u003cli\u003eWhich organizational culture and individual mindset changes are best to maximize success securing traditional and AI applications.\u003c\/li\u003e\r\n\u003cli\u003eHow to plan, design and use a pipeline to test and automate the testing, deployment, security validation, and monitoring of production environments.\u003c\/li\u003e\r\n\u003cli\u003eHow modern threat modeling, secure design, vulnerability management, and automated security testing work together throughout the software lifecycle.\u003c\/li\u003e\r\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eSecure DevOps: SecDevOps Foundation® (SDOF) Certification Training Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cb\u003eIn this course, you will learn how to:\u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for official SecDevOps Foundational certification (SDOF) from the \u003ca href=\"https:\/\/www.learningtree.com\/industry-certifications\/devops-institute\/\" target=\"_blank\" title=\"DevOps Institute\" rel=\"noopener\"\u003eDevOps Institute by PeopleCert.\u003c\/a\u003e\n\u003c\/li\u003e\n\u003cli\u003eThroughout the course, students complete numerous hands-on activities using modern DevOps tools, secure development pipelines, threat modeling techniques, vulnerability analysis, and collaborative team exercises\u003c\/li\u003e\n\u003cli\u003eLeverage the NIST Secure Software Development Framework to guide the security practices of SecDevOps for both traditional and AI applications.\u003c\/li\u003e\n\u003cli\u003eEstablish continuous improvement practices to face new or unanticipated challenges\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003ePrerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eNone.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertification Details\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe 60-minute certification exam is open-book and taken online after the course delivery has finished. An exam voucher is included in the course tuition.\u003c\/li\u003e\n\u003cli\u003eThe certification exam is administered through the DevOps Institute by PeopleCert.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eSecure DevOps: SecDevOps Foundation Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eLearning Objectives\u003c\/h4\u003e\n\u003cp\u003e\u003cb\u003eModule 1: SecDevOps Context\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eMegatrends and Context\u003c\/li\u003e\n\u003cli\u003eCALM Principles\u003c\/li\u003e\n\u003cli\u003eThe 3 Ways \u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 2: Foundations of Secure DevOps\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eIterative and incremental\u003c\/li\u003e\n\u003cli\u003eFrom Scrum to SecDevOps\u003c\/li\u003e\n\u003cli\u003eAutomated testing for TDD and ATDD\u003c\/li\u003e\n\u003cli\u003eActivity: Create secure password scenarios using BDD\u003c\/li\u003e\n\u003cli\u003eKey principles and security-first philosophy \u003c\/li\u003e\n\u003cli\u003eSecDevOps guidance from the NIST SSDF\u003c\/li\u003e\n\u003cli\u003eExercise: SecDevOps and NIST SSDF synergy\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 3: Secure DevOps Pipeline and Toolchain\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eContinuous Integration, Delivery, Deployment and Compliance\u003c\/li\u003e\n\u003cli\u003eSecDevOps lifecycle and the Pipeline\u003c\/li\u003e\n\u003cli\u003ePipeline for development\u003c\/li\u003e\n\u003cli\u003ePipeline for operations (Configuration as Code)\u003c\/li\u003e\n\u003cli\u003eActivity: Using a Vulnerability Scanner, Hands-On\u003c\/li\u003e\n\u003cli\u003eCloud, containers and security integration\u003c\/li\u003e\n\u003cli\u003ePipeline maturity and planning\u003c\/li\u003e\n\u003cli\u003ePipeline and other development tools\u003c\/li\u003e\n\u003cli\u003eActivity: Planning Pipeline Security Testing\u003c\/li\u003e\n\u003cli\u003eUsing Source Repositories Git, GitLab, GitHub\u003c\/li\u003e\n\u003cli\u003eBranching strategies, merge conflicts, and secure pull requests\u003c\/li\u003e\n\u003cli\u003eActivity: Running a Secure CI\/CD\/CC Pipeline, Hands-On\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 4: Risk, Vulnerabilities and Threats\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eRisk assessment – key goal\u003c\/li\u003e\n\u003cli\u003eCyber intelligence (know the enemy)\u003c\/li\u003e\n\u003cli\u003eThreat and Vulnerability Catalogs\u003c\/li\u003e\n\u003cli\u003eActivity: SQL Injection Example, Hands-On\u003c\/li\u003e\n\u003cli\u003eThreat modeling (STRIDE, OCTAVE and the PASTA process)\u003c\/li\u003e\n\u003cli\u003eActivity: Threat Modeling, Gamification\u003c\/li\u003e\n\u003cli\u003eGathering threat and vulnerability metrics\u003c\/li\u003e\n\u003cli\u003eActivity: Quantitative Scoring of Vulnerabilities (CVSS), Hands-On\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 5: Culture Change and Leadership Mindset\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eWhat is good culture?\u003c\/li\u003e\n\u003cli\u003eCulture assessment models – safe, trustworthy and empowering\u003c\/li\u003e\n\u003cli\u003eActivity: Identifying and improving your organization’s culture, video review\u003c\/li\u003e\n\u003cli\u003eLeadership Mindset – Fixed or Growth\u003c\/li\u003e\n\u003cli\u003eScaling Secure DevOps (SAFe, Platform Engineering, and SRE)\u003c\/li\u003e\n\u003cli\u003ePersonnel, stakeholders and the team\u003c\/li\u003e\n\u003cli\u003eHomework: Mindset self-evaluation spreadsheet (optional)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 6: Best Practices for SecDevOps\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003ePlanning with a vision – start from where you are\u003c\/li\u003e\n\u003cli\u003eMeasuring your organization’s SecDevOps maturity\u003c\/li\u003e\n\u003cli\u003eExercise: SecDevOps Implementation Stages, survey\u003c\/li\u003e\n\u003cli\u003eAI-assisted development and secure use of generative AI\u003c\/li\u003e\n\u003cli\u003eSecurity considerations for AI-generated software\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003col start=\"1\" type=\"1\"\u003e\n\u003cli\u003eEmbracing and enabling organization-level governance\u003c\/li\u003e\n\u003c\/ol\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eWhy care about GRC? \u003c\/li\u003e\n\u003cli\u003eRethinking policies - policy as code\u003c\/li\u003e\n\u003cli\u003eBuilding a responsive model\u003c\/li\u003e\n\u003cli\u003eDeploying immutable infrastructure\u003c\/li\u003e\n\u003cli\u003eOngoing monitoring and evaluation\u003c\/li\u003e\n\u003cli\u003eActivity: Intrusion Detection, hands-on\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 7: Continuous Learning\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eExperiential learning\u003c\/li\u003e\n\u003cli\u003eRetrospective learning\u003c\/li\u003e\n\u003cli\u003eContinual improvement\u003c\/li\u003e\n\u003cli\u003eLearning sources\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 8: Review and Summary\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eExam review\u003c\/li\u003e\n\u003cli\u003eKey course concepts\u003c\/li\u003e\n\u003cli\u003eNext steps\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003c\/p\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26CB46US \/ 2026-12-09T09:00:00 \/ New York","offer_id":47803707228327,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"273A38CN \/ 2027-03-10T09:00:00 \/ Ottawa","offer_id":48060034973863,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"274B60US \/ 2027-04-14T09:00:00 \/ Herndon","offer_id":48403767689383,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"276C99US \/ 2027-06-28T09:00:00 \/ Herndon","offer_id":51258025148583,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"278A68CN \/ 2027-08-18T09:00:00 \/ Ottawa","offer_id":51258025181351,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/sec_dev_ops.jpg?v=1630500394"},{"product_id":"secdevops-practitioner®-sdop-certification-training","title":"SecDevOps Practitioner® (SDOP) Certification Training","description":"\u003cdiv\u003e\u003cp\u003eThis \u003cstrong\u003eSecDevOps Practitioner®\u003c\/strong\u003e (SDOP) Certification Training follows the SecDevOps foundational practice in Course 3695, SecDevOps Foundation® (SDOF) Certification Training. While the foundation course provides a basic understanding and outlines the roadmap for implementation, this practitioner-level class adds a range of techniques for a more comprehensive understanding of SecDevOps. This includes achieving optimum outcomes by designing the right pipeline architecture, creating an effective team, and establishing best-practice processes.\u003c\/p\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eSecDevOps Practitioner® (SDOP) Certification Training Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eIn this SDOP Certification training, you will learn how to:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for the DevOps Institute SecDevOps Practitioner Certification (SDOP) with the world’s first accredited SecDevOps Practitioner course.\u003c\/li\u003e\n\u003cli\u003eEstablish SecDevOps maturity guidance for people processes and technology.\u003c\/li\u003e\n\u003cli\u003eImplement and optimize typical pipeline tools to improve CI\/CD\/CC results.\u003c\/li\u003e\n\u003cli\u003eGather effective metrics to streamline, verify, and tune pipeline operations.\u003c\/li\u003e\n\u003cli\u003eFollow architectural best practices, including immutable infrastructure and high observability.\u003c\/li\u003e\n\u003cli\u003eLeverage experimentation to achieve highly effective automated security protection.\u003c\/li\u003e\n\u003cli\u003eImprove team performance following the leadership-at-all-levels approach.\u003c\/li\u003e\n\u003cli\u003eCase studies, group collaborations, and practical hands-on exercises using specific pipeline tools are included.\u003c\/li\u003e\n\u003cli\u003eReceive official certification from the DevOps Institute (DOI).\u003c\/li\u003e\n\u003cli\u003eContinue learning and face new challenges with after-course one-on-one instructor coaching.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSDOP Certification Training Prerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eSecDevOps Foundational certification (SDOF) is expected, or DevOps Foundational certification or DevSecOps Foundational certification. Related courses include:\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eLearning Tree Course 3695, Secure DevOps: SecDevOps Foundation® (SDOF) Certification Training and\u003c\/li\u003e\n\u003cli\u003eLearning Tree Course 3685, {course:3685}\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eProspective attendees can confirm their prerequisite knowledge by taking the pre-course skills assessment (which takes approximately 15 minutes).\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eSDOP Certification Exam Information\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eFor certification, successfully pass (65%) the 90-minute examination, consisting of forty multiple-choice.\u003c\/li\u003e\n\u003cli\u003eThe certification and exam are governed and maintained by DevOps Institute.\u003c\/li\u003e\n\u003cli\u003eThe exam is conducted online and is open book.\u003c\/li\u003e\n\u003cli\u003eA sample exam is provided to attendees at the end of the class.\u003c\/li\u003e\n\u003cli\u003eA complimentary voucher to take the exam is provided by Learning Tree International.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eSecDevOps Practitioner Certification Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 1: Determining Organizational SecDevOps Maturity\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eKnow where you are so you can start from where you are \u003c\/li\u003e\n\u003cli\u003eWhat level are your people, processes, and pipelines \u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eCollaboration: Guidance metrics for people and process\u003c\/p\u003e\n\u003cp\u003eHands-On: Executing and debugging the case-study pipeline\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 2: Applying Automation Metrics\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eImprove feedback to understand what is most important\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eHands-On: Reviewing metrics from the case-study pipeline\u003c\/p\u003e\n\u003cp\u003eCollaboration: What 2nd metrics are missing?\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eMetric isolation and accuracy for incremental experimentation\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eCollaboration: Third-way considerations\u003c\/p\u003e\n\u003cp\u003eHands-On: Implementing a third-way spike\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 3: Designing, Architecting, and Planning for SecDevOps\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003ePlanning and architectural structure best practices\u003c\/li\u003e\n\u003cli\u003eWhat does security first actually mean?\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eCollaboration: What architecture do we have\/should we have?\u003c\/p\u003e\n\u003cp\u003eHands-On: Architecture and security improvements to case study pipeline\u003c\/p\u003e\n\u003cp\u003eCollaboration: Observing functional and security outcomes\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 4: Creating Practical SecDevOps Infrastructure\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eLessons from Site Reliability Engineering\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eCollaboration: Aiding resilience for SRE (Site Reliability Engineering)\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eExamining immutability for deployment\u003c\/li\u003e\n\u003cli\u003eHigh observability strategies for availability and security\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eHands-On: Immutable deployment and high observability\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 5: Other Security Considerations beyond the Pipeline\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eBefore and after development (acquisition and disposal)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eCollaboration: Is such-and-such a tool safe?\u003c\/p\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eModule 6: Next Steps\u003c\/h4\u003e\n\u003cul\u003e\n\u003cli\u003eOngoing best practices and analysis of outcomes\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eCollaboration: Personal Action Planning\u003c\/p\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26AB77US \/ 2026-10-19T09:00:00 \/ Online","offer_id":47803716108455,"sku":"US-3975-IL","price":1365.0,"currency_code":"USD","in_stock":true},{"title":"275C17US \/ 2027-05-05T09:00:00 \/ Herndon","offer_id":49350899957927,"sku":"US-3975-IL","price":1365.0,"currency_code":"USD","in_stock":true},{"title":"27AB88US \/ 2027-10-18T09:00:00 \/ Herndon","offer_id":51541937127591,"sku":"US-3975-IL","price":1365.0,"currency_code":"USD","in_stock":true}]}],"url":"https:\/\/dirinfosec.learningtree.com\/collections\/devops.oembed","provider":"Learning Tree International","version":"1.0","type":"link"}