DevSecOps Foundation (DSOF)® Training Course

OVERVIEW

As agencies deploy code faster and more frequently, new vulnerabilities are also increasing at a rapid pace. When leaders emphasize the need to “do more with less,” DevOps practices add significant value for government by integrating business and security as essential strategic components. Delivering development, security, and operations at the speed required for modern public sector operations should be an integral part of any agency’s strategy.

This course covers how DevSecOps provides value to government agencies, enhances operational opportunities, and improves organizational performance. The core DevSecOps principles taught can support a transformation within the organization, increase productivity, reduce risk, and optimize resource utilization.

The curriculum explains how DevOps security practices differ from other approaches and delivers the knowledge needed to implement changes within your agency. Participants will learn the purpose, benefits, concepts, vocabulary, and applications of DevSecOps. Most importantly, students will understand how DevSecOps roles fit with a DevOps culture and organizational structure. By the end of the course, participants will grasp the concept of “security as code” to make security and compliance more accessible as a service.

The practical application is a crucial component of this course, which teaches the steps to integrate security programs from developers and operators through the business C-suite. Every stakeholder plays a critical role, and the learning materials highlight how professionals can use these tools to protect their agency and customers. Real-life scenarios, case studies, video presentations, discussion options, and exercise material are used to maximize learning value, providing tangible takeaways that participants can apply upon returning to their offices.

This course prepares learners to pass the DevSecOps Foundation exam for government.

COURSE OBJECTIVES

The learning objectives include a practical understanding of:

• The purpose, benefits, concepts, and vocabulary of DevSecOps
• How DevOps security practices differ from other security approaches
• Business-driven security strategies and best practices for government
• Understanding and applying data and security sciences in a public sector context
• Integrating corporate stakeholders into DevSecOps practices within government agencies
• Enhancing communication between development, security, and operations teams in the public sector
• How DevSecOps roles fit with a DevOps culture and organizational structure for government

LEARNER MATERIALS

• Digital Learner Manual (an excellent post-class reference)
• Participation in exercises designed to apply concepts within a government context
• Sample documents, templates, tools, and techniques tailored for public sector use
• Access to additional sources of information and communities relevant to government operations

CERTIFICATION EXAM

Successfully passing (65%) the 60-minute examination, consisting of 40 multiple-choice questions, leads to the candidate’s designation as DevSecOps Foundation (DSOF) certified. The certification is governed and maintained by the DevOps Institute.