Home » Shop » DevOps » DevSecOps Foundation (DSOF)™
Course ID: #DSOE

DevSecOps Foundation (DSOF)™

Duration: 2 days Dates: 14 December 2026 15 March 2027 28 June 2027 13 September 2027

In this course you will learn how security and compliance are integrated into DevOps organisations and continuous delivery workflows, rather than being checked only at the end. You will learn the purpose, benefits, concepts and terminology of DevSecOps, understand «Security as Code» and how DevSecOps roles fit into a DevOps culture. The course follows the structure of the DevSecOps Foundation (DSOF) certification from DevOps Institute (PeopleCert Group) and prepares you for the exam.

Why DevSecOps?

  • Key terms and concepts
  • Why DevSecOps matters and the business value it brings
  • Three ways of thinking about DevOps and security
  • Core principles of DevSecOps

Culture and Management

  • Incentive models and resilience
  • Organisational culture and generativeness, models by Erickson, Westrum and Laloux
  • Exercise: Influencing culture

Strategic Considerations

  • How much security is enough?
  • Threat modelling and the importance of context
  • Risk management at high delivery speed
  • Exercise: Measuring success

General Security Considerations

  • Avoiding the checkbox trap
  • Basic security hygiene
  • Architecture considerations and federated identity
  • Log management

IAM: Identity and Access Management

  • Basic concepts and importance of IAM
  • Implementation guidance and automation opportunities
  • Avoiding common IAM mistakes
  • Exercise: Overcoming IAM challenges

Application Security

  • Application Security Testing (AST) and test methods
  • Prioritising test methods and integrating them into issue management
  • Using threat modelling and automation

Operational Security

  • Basic security hygiene practices in operations
  • The role of operations management and the operating environment
  • Exercise: Integrating security into the CI/CD pipeline

Governance, Risk, Compliance (GRC) and Audit

  • What GRC is and why it matters
  • Rethinking policy: Policy as Code
  • Involving audit early (shift left)
  • Three myths about separation of duties and DevOps
  • Exercise: Designing policy, audit and compliance

Logging, Monitoring and Response

  • Setting up log management
  • Incident response and forensics
  • Threat intelligence and information sharing

Exam Preparation

  • Exam requirements and exam process
  • Review of a sample exam
Learning Solution

Blended Learning, Firmenseminar, Individualcoaching, Klassenraumtraining, Online Live Webinar
Language

Deutsch, Englisch, Französisch, Italienisch
Dates

2026/12/14, 2027/03/15, 2027/06/28, 2027/09/13, flexibel, auf Anfrage
Location

Brüttisellen, Lausanne, flexibel, auf Anfrage

Professionals who integrate security into DevOps and continuous delivery workflows: DevOps and software engineers, IT security professionals, site reliability engineers, testers and quality assurance, release managers, Scrum Masters, project and product owners, IT leaders, compliance teams and managed service providers.

Basic knowledge of common DevOps terms and principles is required, for example from the DevOps Foundation course.

After the course you will be able to:

  • explain the purpose, benefits, concepts and terminology of DevSecOps
  • describe how DevOps security practices differ from other security approaches
  • apply business-oriented security strategies and best practices
  • involve stakeholders across the organisation in DevSecOps practices and improve communication between Dev, Sec and Ops
  • position DevSecOps roles within a DevOps culture and organisation

Exam: DevSecOps Foundation (DSOF) from DevOps Institute (PeopleCert Group)

Duration: 60 minutes

Format: 40 multiple-choice questions, open book, pass mark 65% correct answers

The exam fee is not included in the course price.

Related products

  • Course ID: #CCSP

    Certified Cloud Security Professional (CCSP)

    The aim of the course is to prepare professionals for the demanding CCSP exam. To this end, it covers the exam objectives based on the six domains as defined in the CCSP Common Body of Knowledge by (ISC)2.

    Duration: 5 days
    Price:
    Price range: CHF5'910 through CHF15'500 excl. VAT
    Certified Cloud Security Professional (CCSP)
  • Course ID: #

    Certified Application Security Engineer (CASE).NET

    The Certified Application Security Engineer (CASE) certification was developed together with renowned application and software development professionals from around the world. The CASE certification tests the critical security skills and knowledge required throughout a typical software development lifecycle (SDLC) and emphasises the importance of secure methods and practices in today's insecure operating environment. The certified CASE training programme was developed in parallel to equip software professionals with the skills that employers and universities worldwide expect. It is designed as a hands-on, comprehensive application security course that helps software professionals build secure applications. The training programme covers security activities in every phase of the software development lifecycle (SDLC): planning, creation, testing and deployment of an application. Unlike other application security training, CASE goes beyond pure secure coding guidelines and also covers secure requirements gathering, robust application design, and handling security issues in the post-development phases. This makes CASE one of the most comprehensive certifications available on the market today. It is in demand among software developers, analysts and testers worldwide and recognised by hiring managers.

    Duration: 3 days
    Price:
    CHF2'730 excl. VAT
    Certified Application Security Engineer (CASE).NET
  • Course ID: #

    Certified Information Systems Auditor (CISA)

    CISA is ISACA's certification for professionals who audit, control and monitor information systems. The course follows the exam outline with five domains that has been in effect since 1 August 2024 and covers governance, systems development, IT operations, business resilience and the protection of information assets in addition to the audit process. The course prepares you for the CISA exam (the "Certified Information Systems Auditor" certification).

    Duration: 5 days
    Price:
    CHF4'230 excl. VAT
    Certified Information Systems Auditor (CISA)
  • Course ID: #

    CyberSec First Responder – Threat Detection and Response (Exam CFR-310)

    This course covers the tasks of people responsible for monitoring and detecting security incidents in information systems and networks, and for responding appropriately to such incidents. Depending on the size of the organisation, this person works alone or is a member of a Cybersecurity Incident Response Team (CSIRT). The course introduces tools and tactics for managing cybersecurity risks, recognising various common types of threats, assessing the organisation's security, gathering and analysing cybersecurity information, and handling incidents as they occur. Ultimately, the course provides a comprehensive security approach for everyone on the front line of defence. This course helps participants prepare for the CyberSec First Responder™ certification exam (Exam CFR-310). What you learn and practise in this course can form a substantial part of your preparation.

    Duration: 5 days
    Price:
    CHF3'250 excl. VAT
    CyberSec First Responder – Threat Detection and Response (Exam CFR-310)

Price range: CHF1'990 through CHF6'400 excl. VAT

Clear

SIGN UP

Newsletter

Receive news about new courses, offers and promotions by email.

← Back

Thank you for your response. ✨

Email Subscription
Microsoft Office
Show all
Microsoft Tech
Show all
Business & Soft Skills
Process and Quality Management
Project Management
Adobe
CompTIA
Security
Linux
Oracle
Amazon
Google
Leadership and Professional Development
E-Learning and LMS
Languages
Show all
Artificial Intelligence
Show all
Cisco
Show all
VMware and Virtualisation
Show all
Data and Programming
Show all
Online Collaboration
Show all