Home > Trainings > Certified Security Champion
Certified Security Champion
The Certified Security Champion course provides engineers with practical hands-on knowledge to help them in building more secure web applications. Students will learn to develop trustworthy web applications while avoiding common security pitfalls, using best practices and industry frameworks.
Training Schedule
Features
Self-paced Learning Mode
Browser-based Lab Access
24/7 Instructor Support via Mattermost
Course Objective
- Building solid foundations that are required to understand the application security landscape
- Building foundational knowledge required to work with infrastructure security
- Understanding the wide range of skills and abilities that are required to be a security champion
- Embedding security while creating, running, and maintaining modern applications
- Gaining abilities to apply practical application security skills in a real-world environment
- Gaining skills and knowledge to liaise with security and other departments to make everyone responsible for the security
- Gaining analytical abilities to observe and advise various security controls, and solutions to secure DevOps
- Understanding the fundamentals of assessing and managing risks
Course Agenda
Module 1: AppSec Basics
- Introduction to Application Security
- HTTP Security Basics
- Introduction to Burp Suite
- OWASP Top 10 Basics
Module 2: Secure Code Review
- What is Secure Code Review?
- How to approach Secure code review
- Tools of the trade
- Reviewing the code from a security perspective
Module 3: Primer on Risk Management
- Introduction to Risk management
- Risk Assessment
- Risk Calculation
- Risk Treatment
- Plan, design, and implement a risk-management process
- Understand the current threat landscape
- Continuously improve security systems to reduce risk exposure
- Ensure business continuity while reducing the risks to the organization
Module 4: Threat Modeling
- What is Threat Modelling?
- Risk Management vs. Threat modelling
- STRIDE vs. DREAD approaches
- Threat Modeling Process and its challenges
- Classical Threat modeling tools and how they fit in CI/CD pipeline
Module 5: DevSecOps Basics
- DevOps Building Blocks – People, Process, and Technology
- DevOps Principles – Culture, Automation, Measurement and Sharing (CAMS)
- Benefits of DevOps – Speed, Reliability, Availability, Scalability, Automation, Cost, and Visibility
- Overview of the DevSecOps critical toolchain
- Common Challenges faced when using the DevOps principles
- Secure SDLC
Module 6: Infrastructure as Code and Its Security
- Infrastructure as Code and its benefits
- Platform + Infrastructure Definition + Configuration Management
- Introduction to Ansible
- Benefits of Ansible
- Push and Pull based configuration management systems
- Modules, tasks, roles, and Playbooks
- Tools and Services that help to achieve IaC
Module 7: Agile Communications, Collaboration, and Soft Skills
- The need for Agile communication and collaboration
- How to handle conflicting priorities among teams
- How to work security teams to find common ground
- Holding people accountable for security
- Staying empathetic and assertive
- Plan, design, and implement processes to resolve any issues among the teams
Exam & Certification
- After completing the course, you can schedule the CSC exam on your preferred date.
- Process of achieving Practical DevSecOps CSC Certification can be found here.
FAQs
Are there any pre-requisites for this course?
- Foundational knowledge of software development life cycle
- Understanding of developing or testing web applications
How do I need to take the exam?
TaUB Solutions will request the examinations together with your registration. The exam should be taken at the end of the course. Results are available within 5 working days.
