Agilizing Online Academy

1.1 Origins of DevOps

1.2 Evolution of DevSecOps

Discussion - Does security slow us down?

1.3 Other Frameworks

Case Story - Aetna

1.4 CALMS

1.5 The Three Ways

Exercise - Understanding and influencing an organization

Module Quiz

2.1 Storytime and Outcomes

Discussion - What does Secure mean?

2.2 What is the Cyber Threat Landscape?

2.3 What is the threat?

Exercise - EoP Card Game

2.4 What do we protect from?

2.5 What do we protect, and why?

Case Story - Maersk

2.6 How do I talk to security?

Module Quiz

3.1 Model with components

Discussion - What do you want from security?

3.2 Technical, business and human toll outcomes

Case Story - NCR

3.3 What’s being measured? Integration, current state and delta

3.4 Gating and thresholding

3.5 Incremental improvements

Exercise - Validate a responsive DevSecOps model

Module Quiz

4.1 The DevSecOps State of Mind

4.2 What “good” culture looks like

4.3 The DevSecOps Stakeholders

4.4 What’s at stake for who?

Case Story - US Department of Defense

4.5 People, process, technology and governance

Discussion - How can you influence your organization?

Exercise - Modeling stakeholder conversations - 'difficult questions'

Module Quiz

5.1 Start where you are

5.2 Integrating people, process, technology and governance

5.3 Continuous Security for DevSecOps

5.4 Onboarding process for stakeholders

Exercise - Wicked Questions

5.5 Practices and outcomes

5.6 Data driven decision making and response

Case Story - Comcast

Discussion - What are your worst practices?

Module Quiz