Automate Security with DevSecOps

© 1998-2020 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266||
Prevent Unauthorized
Access to Your Systems
& Applications with
Security Automation
Ryan Dymek
NetCom Learning

AGENDA
Security Automation Overview
DevSecOps vs DevOps
Infrastructure as Code (IaC)
Security Policies
Testing, Scanning, and Compliance

SECURITY AUTOMATION OVERVIEW
• DevSecOps vs DevOps
• Infrastructure as Code (IaC)
• Configuration as Code
• Security Policies
• CI/CD Pipelines
• Testing, Scanning, and Compliance

DEVSECOPS VS DEVOPS
• DevOps Philosophies
• People over Process over Tools (PPT)
• “Common Sense” is not so common
• Controversial, but scientifically proven principles
• Microservices & Serverless
• DevSecOps
• Automated pre-commit scans for secrets and other “obvious” security flaws
• Automated test of new code deployment
• Security *of* the pipeline – Protect build servers, scanning not only code going in,
but products of post-build artifacts

INFRASTRUCTURE AS CODE (IAC)
• Templatize your environment
• Terraform
• GCP Deployment Manager
• AWS CloudFormation
• Azure Resource Manager (ARM)
• Testing on Demand
• Disaster Recovery

CONFIGURATION AS CODE
• Configuration Management Solutions
• Chef, Puppet, Ansible, Saltstack
• Other cloud native services
• “Pull” Configurations vs “Push” (Deploy Configurations)
• Create and rebuild automatically
• Testing and Auditing

SECURITY POLICIES
• Creation
• Auditing
• Deployment
• Version Controlled

CI/CD PIPELINES
• Continuous Integration
• Continuous Delivery (Manual Gatekeeper)
• Continuous Deployment
Are manual approvals healthy?
Do they work?
The science says no.

TESTING, SCANNING, AND COMPLIANCE
• Automated Testing
• Automated Scanning
• Automated Build Checks
• Automated Compliance Checks (within and beyond CI / CD)

RECORDED WEBINAR VIDEO
To watch the recorded webinar video for live demos, please access the link:
http://tiny.cc/8ezkrz
| |

ABOUT NETCOM LEARNING
NetCom Learningis an award-winning
global leader in managedlearning
services, training and talentdevelopment.
Founded : 1998
Headquarters : NewYorkCity
Delivery Capability : Worldwide
CEO : RussellSarder
100K+
Professionals
trained
| |© 1998-2019 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266
12K+
Corporate
clients
3500
IT,Business&
Soft Skillscourses
96%
Of customers
recommend usto others
8.6/9
Instructor
evaluations
20+
Leadingvendors
recognitions
Microsoft’s
Worldwidetraining
partner of the year
80%
Trainedofthe
Fortune100
Top20
ITTraining
Company

RECOMMENDED COURSES AND MARKETING ASSETS
NetCom Learning offers a comprehensive portfolio for Security Courses
» DEVOPS ENGINEERING ON AWS – Class scheduled onJuly 20
» AWS SECURITY ESSENTIALS –Class scheduled onAug 05
»SYSTEMS OPERATIONS ON AWS –Class scheduled onAug 24
» SECURITY OPERATIONS ON AWS
» DEVSECOPSENGINEERING(DSOE)
You can also access the below Marketing Assets
» Free Virtual Event - AWS DISCOVERY DAY
» Free 1hr Training- How to Create a Cyber Risk-Aware Organization
» Blog - AWS DevOps Certification: Become an AWS-certified DevOps in Just 24 hours!
» Blog - Why Organizations Need Experts in Cybersecurity

UPCOMING WEBINARS
▪ Building the Next-level Hybrid Cloud for The Next Generation of IT - Advance your app development
strategy
▪ Mastering Agile Adoption - The way forward
▪ Master Business Analysis in 30 Minutes
▪ Develop your Autodesk Designing Skills with Conceptual Design Collaboration
▪ Citrix: How to Develop a Smart Workspace that's Flexible, Personalized, Intelligent, and Intuitive
▪ Introduction to AWS Technical Essentials for Developers
▪ Analyzing Data with Power BI Desktop
▪ Be Cloud Ready with Azure and AWS - The Ultimate Cloud Solutions!
▪ How to Manage Projects with Microsoft Teams
& More
| |© 1998-2019 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266© 1998-2020 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266||

PROMOTIONS
Buy More to Save More!
Now fulfill all your training needs without disturbing your business funds. Choose from the bundle of our Learning
Saving Pass (LSP) pre-pay plans and get up to 100% value back on your investment. Unlock Now

PROMOTIONS
Worry-Free Training with Price Match Guarantee
Our Price Match Guarantee ensures that we'll match the offers of any other authorized training provider if you
succeed at finding anyone offering the same publicly scheduled class within 30 days of our schedule at a lower
regular price. Learn More

FOLLOWUS ON
LinkedIn Twitter YouTube
Instagram

BUILDING AN INNOVATIVE LEARNING ORG.
A BOOK FROM RUSSELL SARDER,
CEO AT NETCOM LEARNING
A framework to build a smarter
workforce, adapt to change and
drive growth.
DOWNLOADe-book

Thankyou
© 1998-2019 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266||| |© 1998-2020 NetCom Learning www.netcomlearning.com info@netcomlearning.com 1-888-563-8266||

Automate Security with DevSecOps

Recommended

Recommended

More Related Content

What's hot

What's hot (9)

Similar to Automate Security with DevSecOps

Similar to Automate Security with DevSecOps (20)

More from Tuan Yang

More from Tuan Yang (14)

Recently uploaded

Recently uploaded (20)

Automate Security with DevSecOps