{"product_id":"secdevops-foundation-sdof-certification-training","title":"Secure DevOps: SecDevOps Foundation® (SDOF) Certification Training","description":"\u003cdiv\u003e\n\u003cp\u003e\u003cb\u003eSecure DevOps (SecDevOps) \u003c\/b\u003erepresents the evolution of DevOps toward a security-first software engineering approach\u003cb\u003e. \u003c\/b\u003eBuilding upon guidance from the U.S. Department of Homeland Security (DHS), the NIST Secure Software Development Framework (SSDF), and modern DevOps practices, SecDevOps integrates security throughout the entire software lifecycle—including today's AI-enabled applications.\u003c\/p\u003e\r\n\u003cp\u003e Consequently, SecDevOps has become the “go to” methodology for organizations writing high-assurance programs, especially for government agencies, defense contractors, financial institutions, healthcare organizations, critical infrastructure providers, and any organization developing security-sensitive software. It provides an excellent operational framework for implementing the guidance contained within the NIST Secure Software Development Framework (SSDF), for traditional software systems, AI-enabled applications, and software that incorporates generative AI components.\u003c\/p\u003e\r\n\u003cp\u003e Through realistic case studies and hands-on exercises, you will learn to evaluate existing software development practices, identify security gaps, improve DevOps pipelines, integrate NIST SSDF guidance, and apply Secure DevOps principles to both traditional software and AI-enabled systems.\u003c\/p\u003e\r\n\u003cp\u003e This certification training course will help you prepare for and successfully attain the highly respected \u003cb\u003eSecDevOps Foundation (SDOF)\u003c\/b\u003e certification. In this course, you will discover: \u003c\/p\u003e\r\n\u003cul type=\"disc\"\u003e\r\n\u003cli\u003eThe benefits, concepts, processes and vocabulary of SecDevOps to deliver secure software while maintaining Agile speed, flexibility, and quality.\u003c\/li\u003e\r\n\u003cli\u003eHow SecDevOps extends Agile and DevOps for CI\/CD\/CC - Continuous Integration, Continuous Delivery, Continuous Compliance.\u003c\/li\u003e\r\n\u003cli\u003eHow the guidance of the NIST Secure Software Development Framework integrates naturally to complement SecDevOps practices.\u003c\/li\u003e\r\n\u003cli\u003eWhich organizational culture and individual mindset changes are best to maximize success securing traditional and AI applications.\u003c\/li\u003e\r\n\u003cli\u003eHow to plan, design and use a pipeline to test and automate the testing, deployment, security validation, and monitoring of production environments.\u003c\/li\u003e\r\n\u003cli\u003eHow modern threat modeling, secure design, vulnerability management, and automated security testing work together throughout the software lifecycle.\u003c\/li\u003e\r\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\n\u003ch3\u003eSecure DevOps: SecDevOps Foundation® (SDOF) Certification Training Benefits\u003c\/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cb\u003eIn this course, you will learn how to:\u003c\/b\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare for official SecDevOps Foundational certification (SDOF) from the \u003ca href=\"https:\/\/www.learningtree.com\/industry-certifications\/devops-institute\/\" target=\"_blank\" title=\"DevOps Institute\" rel=\"noopener\"\u003eDevOps Institute by PeopleCert.\u003c\/a\u003e\n\u003c\/li\u003e\n\u003cli\u003eThroughout the course, students complete numerous hands-on activities using modern DevOps tools, secure development pipelines, threat modeling techniques, vulnerability analysis, and collaborative team exercises\u003c\/li\u003e\n\u003cli\u003eLeverage the NIST Secure Software Development Framework to guide the security practices of SecDevOps for both traditional and AI applications.\u003c\/li\u003e\n\u003cli\u003eEstablish continuous improvement practices to face new or unanticipated challenges\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003ePrerequisites\u003c\/strong\u003e\u003c\/p\u003e\n\u003cp\u003eNone.\u003c\/p\u003e\n\u003c\/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003eCertification Details\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eThe 60-minute certification exam is open-book and taken online after the course delivery has finished. An exam voucher is included in the course tuition.\u003c\/li\u003e\n\u003cli\u003eThe certification exam is administered through the DevOps Institute by PeopleCert.\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003c\/div\u003e\u003cdiv\u003e\u003ch3\u003eSecure DevOps: SecDevOps Foundation Training Outline\u003c\/h3\u003e\u003c\/div\u003e\u003cdiv\u003e\n\u003ch4\u003eLearning Objectives\u003c\/h4\u003e\n\u003cp\u003e\u003cb\u003eModule 1: SecDevOps Context\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eMegatrends and Context\u003c\/li\u003e\n\u003cli\u003eCALM Principles\u003c\/li\u003e\n\u003cli\u003eThe 3 Ways \u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 2: Foundations of Secure DevOps\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eIterative and incremental\u003c\/li\u003e\n\u003cli\u003eFrom Scrum to SecDevOps\u003c\/li\u003e\n\u003cli\u003eAutomated testing for TDD and ATDD\u003c\/li\u003e\n\u003cli\u003eActivity: Create secure password scenarios using BDD\u003c\/li\u003e\n\u003cli\u003eKey principles and security-first philosophy \u003c\/li\u003e\n\u003cli\u003eSecDevOps guidance from the NIST SSDF\u003c\/li\u003e\n\u003cli\u003eExercise: SecDevOps and NIST SSDF synergy\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 3: Secure DevOps Pipeline and Toolchain\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eContinuous Integration, Delivery, Deployment and Compliance\u003c\/li\u003e\n\u003cli\u003eSecDevOps lifecycle and the Pipeline\u003c\/li\u003e\n\u003cli\u003ePipeline for development\u003c\/li\u003e\n\u003cli\u003ePipeline for operations (Configuration as Code)\u003c\/li\u003e\n\u003cli\u003eActivity: Using a Vulnerability Scanner, Hands-On\u003c\/li\u003e\n\u003cli\u003eCloud, containers and security integration\u003c\/li\u003e\n\u003cli\u003ePipeline maturity and planning\u003c\/li\u003e\n\u003cli\u003ePipeline and other development tools\u003c\/li\u003e\n\u003cli\u003eActivity: Planning Pipeline Security Testing\u003c\/li\u003e\n\u003cli\u003eUsing Source Repositories Git, GitLab, GitHub\u003c\/li\u003e\n\u003cli\u003eBranching strategies, merge conflicts, and secure pull requests\u003c\/li\u003e\n\u003cli\u003eActivity: Running a Secure CI\/CD\/CC Pipeline, Hands-On\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 4: Risk, Vulnerabilities and Threats\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eRisk assessment – key goal\u003c\/li\u003e\n\u003cli\u003eCyber intelligence (know the enemy)\u003c\/li\u003e\n\u003cli\u003eThreat and Vulnerability Catalogs\u003c\/li\u003e\n\u003cli\u003eActivity: SQL Injection Example, Hands-On\u003c\/li\u003e\n\u003cli\u003eThreat modeling (STRIDE, OCTAVE and the PASTA process)\u003c\/li\u003e\n\u003cli\u003eActivity: Threat Modeling, Gamification\u003c\/li\u003e\n\u003cli\u003eGathering threat and vulnerability metrics\u003c\/li\u003e\n\u003cli\u003eActivity: Quantitative Scoring of Vulnerabilities (CVSS), Hands-On\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 5: Culture Change and Leadership Mindset\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eWhat is good culture?\u003c\/li\u003e\n\u003cli\u003eCulture assessment models – safe, trustworthy and empowering\u003c\/li\u003e\n\u003cli\u003eActivity: Identifying and improving your organization’s culture, video review\u003c\/li\u003e\n\u003cli\u003eLeadership Mindset – Fixed or Growth\u003c\/li\u003e\n\u003cli\u003eScaling Secure DevOps (SAFe, Platform Engineering, and SRE)\u003c\/li\u003e\n\u003cli\u003ePersonnel, stakeholders and the team\u003c\/li\u003e\n\u003cli\u003eHomework: Mindset self-evaluation spreadsheet (optional)\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 6: Best Practices for SecDevOps\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003ePlanning with a vision – start from where you are\u003c\/li\u003e\n\u003cli\u003eMeasuring your organization’s SecDevOps maturity\u003c\/li\u003e\n\u003cli\u003eExercise: SecDevOps Implementation Stages, survey\u003c\/li\u003e\n\u003cli\u003eAI-assisted development and secure use of generative AI\u003c\/li\u003e\n\u003cli\u003eSecurity considerations for AI-generated software\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003col start=\"1\" type=\"1\"\u003e\n\u003cli\u003eEmbracing and enabling organization-level governance\u003c\/li\u003e\n\u003c\/ol\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eWhy care about GRC? \u003c\/li\u003e\n\u003cli\u003eRethinking policies - policy as code\u003c\/li\u003e\n\u003cli\u003eBuilding a responsive model\u003c\/li\u003e\n\u003cli\u003eDeploying immutable infrastructure\u003c\/li\u003e\n\u003cli\u003eOngoing monitoring and evaluation\u003c\/li\u003e\n\u003cli\u003eActivity: Intrusion Detection, hands-on\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 7: Continuous Learning\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eExperiential learning\u003c\/li\u003e\n\u003cli\u003eRetrospective learning\u003c\/li\u003e\n\u003cli\u003eContinual improvement\u003c\/li\u003e\n\u003cli\u003eLearning sources\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e\u003cb\u003eModule 8: Review and Summary\u003c\/b\u003e\u003c\/p\u003e\n\u003cul type=\"disc\"\u003e\n\u003cli\u003eExam review\u003c\/li\u003e\n\u003cli\u003eKey course concepts\u003c\/li\u003e\n\u003cli\u003eNext steps\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003e \u003c\/p\u003e\n\u003c\/div\u003e","brand":"Learning Tree","offers":[{"title":"26CB46US \/ 2026-12-09T09:00:00 \/ New York","offer_id":47803707228327,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"273A38CN \/ 2027-03-10T09:00:00 \/ Ottawa","offer_id":48060034973863,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"274B60US \/ 2027-04-14T09:00:00 \/ Herndon","offer_id":48403767689383,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"276C99US \/ 2027-06-28T09:00:00 \/ Herndon","offer_id":51258025148583,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true},{"title":"278A68CN \/ 2027-08-18T09:00:00 \/ Ottawa","offer_id":51258025181351,"sku":"US-3695-IL","price":1800.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0399\/2869\/2903\/products\/sec_dev_ops.jpg?v=1630500394","url":"https:\/\/dirinfosec.learningtree.com\/products\/secdevops-foundation-sdof-certification-training","provider":"Learning Tree International","version":"1.0","type":"link"}