<?xml version="1.0" encoding="utf-8" ?>
<!DOCTYPE FL_Course SYSTEM "https://www.flane.de/dtd/fl_course095.dtd"><?xml-stylesheet type="text/xsl" href="https://portal.flane.ch/css/xml-course.xsl"?><course productid="29992" language="en" source="https://portal.flane.ch/swisscom/en/xml-course/devops-dsof" lastchanged="2025-07-29T12:18:12+02:00" parent="https://portal.flane.ch/swisscom/en/xml-courses"><title>DevSecOps Foundation</title><productcode>DSOF</productcode><vendorcode>DI</vendorcode><vendorname>DevOps</vendorname><fullproductcode>DI-DSOF</fullproductcode><version>2.2</version><essentials>&lt;p&gt;Participants should have baseline knowledge and understanding of common DevOps definitions and principles.&lt;/p&gt;</essentials><audience>&lt;p&gt;The target audience for the DevSecOps Foundation course are professionals including:&lt;/p&gt;
&lt;ul&gt;
&lt;li&gt;Anyone involved or interested in learning about DevSecOps strategies and automation&lt;/li&gt;&lt;li&gt;Anyone involved in Continuous Delivery toolchain architectures&lt;/li&gt;&lt;li&gt;Compliance Team&lt;/li&gt;&lt;li&gt;Business managers&lt;/li&gt;&lt;li&gt;Delivery Staff&lt;/li&gt;&lt;li&gt;DevOps Engineers&lt;/li&gt;&lt;li&gt;IT Managers&lt;/li&gt;&lt;li&gt;IT Security Professionals, Practitioners, and Managers&lt;/li&gt;&lt;li&gt;Maintenance and support staff&lt;/li&gt;&lt;li&gt;Managed Service Providers&lt;/li&gt;&lt;li&gt;Project &amp;amp; Product Managers&lt;/li&gt;&lt;li&gt;Quality Assurance Teams&lt;/li&gt;&lt;li&gt;Release Managers&lt;/li&gt;&lt;li&gt;Scrum Masters&lt;/li&gt;&lt;li&gt;Site Reliability Engineers&lt;/li&gt;&lt;li&gt;Software Engineers&lt;/li&gt;&lt;li&gt;Testers&lt;/li&gt;&lt;/ul&gt;</audience><contents>&lt;h5&gt;Realizing DevSecOps Outcomes&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Origins of DevOps​&lt;/li&gt;&lt;li&gt;Evolution of DevSecOps​&lt;/li&gt;&lt;li&gt;CALMS​&lt;/li&gt;&lt;li&gt;The Three Ways&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Defining the Cyberthreat Landscape​&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;What is the Cyber Threat Landscape?​&lt;/li&gt;&lt;li&gt;What is the threat?​&lt;/li&gt;&lt;li&gt;What do we protect from?​&lt;/li&gt;&lt;li&gt;What do we protect, and why?​&lt;/li&gt;&lt;li&gt;How do I talk to security?​&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;​Building a Responsive DevSecOps Model&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Demonstrate Model&lt;/li&gt;&lt;li&gt;Technical, business and human outcomes​&lt;/li&gt;&lt;li&gt;What&amp;rsquo;s being measured? ​&lt;/li&gt;&lt;li&gt;Gating and thresholding​&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Integrating DevSecOps Stakeholders&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;The DevSecOps State of Mind​&lt;/li&gt;&lt;li&gt;The DevSecOps Stakeholders​&lt;/li&gt;&lt;li&gt;What&amp;rsquo;s at stake for who?​&lt;/li&gt;&lt;li&gt;Participating in the DevSecOps model​&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;​Establishing DevSecOps Best Practices&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Start where you are​&lt;/li&gt;&lt;li&gt;Integrating people, process and technology and governance​&lt;/li&gt;&lt;li&gt;DevSecOps operating model​&lt;/li&gt;&lt;li&gt;Communication practices and boundaries​&lt;/li&gt;&lt;li&gt;Focusing on outcomes&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Best Practices to get Started&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;The Three Ways​&lt;/li&gt;&lt;li&gt;Identifying target state​s&lt;/li&gt;&lt;li&gt;Value stream-centric thinking​
​&lt;/li&gt;&lt;li&gt;DevOps Pipelines and Continuous Compliance&lt;/li&gt;&lt;li&gt;The goal of a DevOps pipeline​&lt;/li&gt;&lt;li&gt;Why continuous compliance is important​&lt;/li&gt;&lt;li&gt;Archetypes and reference architectures​&lt;/li&gt;&lt;li&gt;Coordinating DevOps Pipeline construction​&lt;/li&gt;&lt;li&gt;DevSecOps tool categories, types and examples​&lt;/li&gt;&lt;/ul&gt;&lt;h5&gt;Learning Using Outcomes&lt;/h5&gt;&lt;ul&gt;
&lt;li&gt;Security Training Options​&lt;/li&gt;&lt;li&gt;Training as Policy​&lt;/li&gt;&lt;li&gt;Experiential Learning​&lt;/li&gt;&lt;li&gt;Cross-Skilling​&lt;/li&gt;&lt;li&gt;The DevSecOps Collective Body of Knowledge​&lt;/li&gt;&lt;li&gt;Preparing for the DevSecOps Foundation certification exam​&lt;/li&gt;&lt;/ul&gt;</contents><essentials_plain>Participants should have baseline knowledge and understanding of common DevOps definitions and principles.</essentials_plain><audience_plain>The target audience for the DevSecOps Foundation course are professionals including:


- Anyone involved or interested in learning about DevSecOps strategies and automation
- Anyone involved in Continuous Delivery toolchain architectures
- Compliance Team
- Business managers
- Delivery Staff
- DevOps Engineers
- IT Managers
- IT Security Professionals, Practitioners, and Managers
- Maintenance and support staff
- Managed Service Providers
- Project &amp; Product Managers
- Quality Assurance Teams
- Release Managers
- Scrum Masters
- Site Reliability Engineers
- Software Engineers
- Testers</audience_plain><contents_plain>Realizing DevSecOps Outcomes


- Origins of DevOps​
- Evolution of DevSecOps​
- CALMS​
- The Three Ways
Defining the Cyberthreat Landscape​


- What is the Cyber Threat Landscape?​
- What is the threat?​
- What do we protect from?​
- What do we protect, and why?​
- How do I talk to security?​
​Building a Responsive DevSecOps Model


- Demonstrate Model
- Technical, business and human outcomes​
- What’s being measured? ​
- Gating and thresholding​
Integrating DevSecOps Stakeholders


- The DevSecOps State of Mind​
- The DevSecOps Stakeholders​
- What’s at stake for who?​
- Participating in the DevSecOps model​
​Establishing DevSecOps Best Practices


- Start where you are​
- Integrating people, process and technology and governance​
- DevSecOps operating model​
- Communication practices and boundaries​
- Focusing on outcomes
Best Practices to get Started


- The Three Ways​
- Identifying target state​s
- Value stream-centric thinking​
​
- DevOps Pipelines and Continuous Compliance
- The goal of a DevOps pipeline​
- Why continuous compliance is important​
- Archetypes and reference architectures​
- Coordinating DevOps Pipeline construction​
- DevSecOps tool categories, types and examples​
Learning Using Outcomes


- Security Training Options​
- Training as Policy​
- Experiential Learning​
- Cross-Skilling​
- The DevSecOps Collective Body of Knowledge​
- Preparing for the DevSecOps Foundation certification exam​</contents_plain><duration unit="d" days="2">2 days</duration><pricelist><price country="CH" currency="CHF">1290.00</price><price country="DE" currency="EUR">1490.00</price><price country="AT" currency="EUR">1490.00</price><price country="GB" currency="GBP">1235.00</price><price country="NL" currency="EUR">1490.00</price><price country="FR" currency="EUR">1650.00</price><price country="IT" currency="EUR">1390.00</price></pricelist><miles/></course>