DevSecOps Essentials

DevSecOps Essentials introduces secure and collaborative software delivery. Participants learn how security fits into requirements, development, version control, build...

Enquire about this programme Back to catalogue

DevSecOps FundamentalsBy Enquiry

Programme overview

DevSecOps Essentials introduces secure and collaborative software delivery. Participants learn how security fits into requirements, development, version control, build pipelines, testing, infrastructure, containers, cloud deployment, monitoring, and continual improvement. Participants will apply DevSecOps practices across requirements, code, dependencies, pipelines, infrastructure, containers, cloud deployment, monitoring, and continual improvement.

Programmes can be delivered via

HRD Corp Claimable

Yayasan Peneraju aligned

EC-Council

At a glance

Course code: EC-025
Provider: EC-Council
Category: DevSecOps Fundamentals
Status: By Enquiry
Duration: Enquire us
Price: Contact us

What participants should gain

Explain DevSecOps principles, roles, and culture
Identify security activities across the delivery lifecycle
Recognise common code, dependency, pipeline, and configuration risks
Use automated security testing concepts in CI/CD
Support secure deployment, monitoring, feedback, and improvement

Participant readiness

Basic knowledge of software development or IT operations
No previous DevSecOps experience required
Awareness of source control and cloud concepts is helpful

Who this course is for

Developers, DevOps engineers, security engineers, testers, architects, and platform teams
Professionals securing software delivery pipelines and cloud-native environments
Teams adopting secure automation across development and operations

How the course is delivered

This programme will be conducted through interactive lectures, pipeline demonstrations, secure-development workshops, guided tool exercises, configuration reviews, group discussions, and a practical DevSecOps activity.

Course outline

Module and topic breakdown

Module 1: Introduction to DevSecOps

Purpose, terminology, components, and core principles of Introduction to DevSecOps

Module 2: Security in the Software Development Lifecycle

Planning, requirements, design, development, testing, release, operation, and retirement stages

Module 3: Threat Modeling and Security Requirements

Deriving security requirements from business, data, threat, regulatory, and architectural needs

Module 4: Secure Coding Fundamentals

Secure coding standards, defensive programming, input handling, output encoding, and safe APIs

Module 5: Source Control and Software Supply Chain Security

Repository structure, branching, merge controls, reviews, protected branches, and signed changes

Module 6: CI/CD Pipeline Security

Assets, threat scenarios, vulnerabilities, and attack surfaces addressed by CI/CD Pipeline Security

Module 7: SAST, DAST, and Dependency Analysis

Static application security testing and code-quality analysis within development pipelines

Module 8: Infrastructure as Code and Configuration Security

Declarative infrastructure, templates, modules, state, variables, providers, and reusable components

Module 9: Container and Cloud-Native Security

Container images, registries, runtimes, namespaces, capabilities, volumes, and network controls

Module 10: Monitoring, Incident Response, and Continual Improvement

Preparation, detection, analysis, containment, eradication, recovery, and lessons learned

Assessment and completion

Continuous knowledge checks and facilitator feedback throughout the programme
Completion of guided exercises, scenarios, labs, or case-study activities applicable to the course
Final review or practical activity to confirm understanding of the stated course objectives
Official EC-Council examination and certification requirements depend on the selected training package and current exam version

Availability

This programme currently requires an enquiry for pricing, scheduling, and delivery arrangements.

Programme enquiry

Discuss pricing, delivery, or corporate customisation

Use this form to confirm availability, request pricing clarification, or discuss a private cohort for your organisation.