topic Re: DevSecOps certification in Tech Talk

DevSecOps certification

iluom — Mon, 23 Sep 2019 11:46:28 GMT

Hi all,

Can anyone suggest well recognized certification body for DevSecOps?

Thanks

Re: DevSecOps certification

Cyberconstlearn — Sun, 01 Dec 2019 19:38:08 GMT

I would also like to know this...

Re: DevSecOps certification

CraginS — Mon, 02 Dec 2019 00:53:49 GMT

@iluom wrote:
Can anyone suggest well recognized certification body for DevSecOps?

Mouli,

I like that you regularly seek advice from this community on new questions. Keep it up.

To help you get improved results, consider the following guidelines.

Show you have at least conducted the initial research when you ask for advice here.

Free Research 101:

https://tinyurl.com/cert4dso

You have specified two core criteria for your target certification:

DevSecOps,
Well-recognized.

Note that the web search results in fulfilling #1, and you must perform a manual review of the results to apply your own interpretation of #2.

Based on my general knowledge of our field, I see several entries that have potential, but the only one I would consider "well recognized" is SANS.

For this specific case, maybe identify two or three other certification sources beyond SANS in the results and ask if anyone here can discuss experience with those organizations.

YMMV.

Good luck.

Craig

Re: DevSecOps certification

Starkgene — Fri, 24 Jul 2020 10:50:03 GMT

Greetings from Intelligene team,

Has anyone checked the upcoming Cybrary, PracticalDevSecOps or DevOps Institute dates for DevSecOps certification? I'm looking for the best alternative for my employees (we haven't obliged anyone though within my organization to take any paid courses).

Jeff

Jeff Stark (Intelligene) research papers written by thetermpapers

Re: DevSecOps certification

Caute_cautim — Sat, 25 Jul 2020 07:06:39 GMT

@iluom

You can also check out: https://www.ibm.com/cloud/architecture/architectures/securityArchitecture/implement-secure-devops/

Regards

Caute_cautim

Re: DevSecOps certification

IanP — Sun, 12 Jun 2022 09:00:16 GMT

Devops Institute offer 4 certifications Foundation and Practitioner in Devops and Devsecops. A number of providers offer on-line instructor lead training for these certifications (2 days each).

The ISC2 short courses Intergrating Security into Devops, and Securing Containers at the Speed of DevOps are good too.

Re: DevSecOps certification

gidyn — Tue, 21 Jun 2022 08:20:03 GMT

Re: DevSecOps certification

landrac — Thu, 15 Sep 2022 12:48:55 GMT

CCNA DEVNET ASSOCIATE

https://www.cisco.com/c/en/us/training-events/training-certifications/certifications/devnet/cisco-certified-devnet-associate.html

I have found, building a concept of understanding DEVNET and then run it against the knowledge gained from CISSP and other Security Certifications would be most effective.

Re: DevSecOps certification

josekj1988 — Sat, 24 Sep 2022 03:15:58 GMT

Was not aware about a certification in SecOps till last week. But there is; CDP (Certified Devsecops Professional).

https://www.practical-devsecops.com/certified-devsecops-professional/

ISC2 also provides a certification on "DevSecOps: Integrating Security into DevOps".

https://www.isc2.org/Development/Immersive-Courses/DevSecOps#

If you are already a member, ISC2 course on SecOps is free and you get 5 CPEs if you pass the exam (Required Score to pass: 70%).

CDP is more of hands-on while ISC2 certification is more of building the strategy for SecOps..

Thanks,

Joseph James

Re: DevSecOps certification

gaius — Sun, 09 Oct 2022 09:51:00 GMT

The value of any cert is in 2 dimensions, what you actually learn in the run up to the exam, and how likely it is the person you are talking to has heard of it, and the reputation of it and the certifying body if they have. As such it is IMHO only worth pursuing certs that tick both boxes. The Cisco DevNet one above is probably the best from that perspective.

Re: DevSecOps certification

gaius — Sun, 09 Oct 2022 11:15:27 GMT

Also consider https://www.giac.org/certifications/cloud-security-automation-gcsa/, it should be well-recognised and have a good amount of learning behind it from GIAC/SANS reputation.

Re: DevSecOps certification

King69 — Thu, 22 Dec 2022 09:50:00 GMT

Earn the Certified DevSecOps Professional certification by passing a 12-hour practical exam. Prove to employers and peers, the practical understanding of the DevSecOps and Secure SDLC. Course participants should have basic understanding of application Security practices like OWASP Top 10.

My HT Space

Re: DevSecOps certification

Beads — Fri, 20 Oct 2023 16:29:56 GMT

Problem with DevOps or DevSecOps is that I haven't designed two the same way. I will say I now remove security from DevOps due to the headwinds I get from Developer types.

As for a certification for even vanilla DevOps I know of vendor specific certs from AWS and Azure but nothing vendor neutral.

https://learn.microsoft.com/en-us/credentials/certifications/devops-engineer/

https://aws.amazon.com/certification/certified-devops-engineer-professional/

If past experience is any measure either exam should be fairly easy when you have a year or two of real world practice.

- B/Eads

Re: DevSecOps certification

marcoperson250 — Fri, 29 Dec 2023 05:15:46 GMT

The International Association of Privacy Professionals (IAPP) offers credible DevSecOps certificates, such as CIPT. The CCSP is focused on cloud security.

Re: DevSecOps certification

Dan1010 — Mon, 22 Jan 2024 17:11:29 GMT

Sorry to be that guy. Honestly. Experience and Github or SourceForge. This isn't a certification recommendation, but what exactly does a certification intend to achieve. Do, show that you did, and people will be interested in what you can do for them. This also helps to overcome typical shenanigans of resumes. Less talk, let people see what you can do. I am dev. This might be a very dev way to look at things. (If Github or SourceForge arent exactly the places, there must be some popular project-hosting sites that can asssit to show off your work.)

I've done DevSecOps on and off based on what companies need. The need of every company is very, very different. Someone mentioned no two builds are the same. BINGO. And the amount of available solutions and innovation these days; a certification just wouldn't tell me much about the strength of someone. And it tells me nothing about the personality / mindset, which I think are more critical than the knowledge. We can create engineers; we cannot fix a difficult person, haha.

This book is amazing. It says everything I wish I could in a precise and accurate manner. https://www.amazon.com/gp/product/0134049845/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1

Beyond what is perceived as DevSecOps, how do we truly make change and influence those around us to work together to do something great? Automation, ci/cd pipelines, quality gates, process control, etc. All good, but it starts at people. The most success I have had in making positive changes that had great results affecting DevSecOps criteria were through my own actions in how I interact with people.

https://www.amazon.com/gp/product/0671027034/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1

https://www.amazon.com/gp/product/0761513698/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&psc=1

Very difficult content to embody, but it certainly pays off. Watching a lot of the ISC2 Think Tanks, I suspect many still struggle with this and perhaps aren't aware of it.

Cool discussion! I could be 100% wrong. Let us know what has worked for you!

Re: DevSecOps certification

ober72 — Sat, 17 Feb 2024 21:34:26 GMT

Hi Everyone,

If you want Kubernetes security then the CKS and the beginner KCSA are available over at the Linux Foundation https://www.cncf.io/training/certification/

Re: DevSecOps certification

alfiedane47 — Tue, 26 Mar 2024 14:56:30 GMT

I recently passed CISSP provisionally. The exam was tough. My confidence in the answers went up and down throughout the exam because a couple of in several questions could have been the right one and I had to spend more time on several questions than I had planned. My exam lasted for around 2.5 hours. I flagged less than 15 questions for a second review and changed my answer on just 3 questions. Here is resource: ExamforSure.

Re: DevSecOps certification

Caute_cautim — Tue, 26 Mar 2024 19:03:57 GMT

Hi @alfiedane47 Is this in the correct conversation and channel?

Regards

Caute_Cautim

Re: DevSecOps certification

waliji — Sat, 25 May 2024 17:08:30 GMT

An authentic and acceptable DevSecOps certification is need of the job market

Re: DevSecOps certification

liam788fh — Tue, 04 Jun 2024 17:08:48 GMT

This certification emphasizes the importance of collaboration between development, security, and operations teams to ensure that security is an inherent part of the development process rather than an afterthought. It covers key principles such as continuous integration and continuous delivery (CI/CD), automated security testing ICC Men, threat modeling, and compliance.