
- Why DevSecOps?
- Culture and Management
- Strategic Considerations
- General Security Considerations
- IAM: Identity and Access Management
- Application Security
- Operational Security
- Governance, Risk, Compliance (GRC) and Audit
- Logging, Monitoring, and Response
- Developing software that is secure by design
- Improved assurance of meeting security, compliance, legal and regulatory requirements
- Frictionless relationship between security professionals and developers
- Better formed, scalable, and speed-aware security practices
- Understanding the contribution of DevSecOps to GRC and delivering business value
- Understanding that security and speed in software development are not inversely-related objectives
- Internalizing the contribution of tools and automation in DevSecOps
- Understanding the role of culture in shifting security left
Delivery | Web proctored |
Type | 40 Multiple Choice Questions |
Duration | One Hour |
Pass Mark | 65% (26 marks out of 40) |
Open Book | No materials are allowed in the examination room |
Distinction | N/A |
Certification validity | 3 Years |


Ducis Management Consulting Private Limited is an organization dedicated to providing solutions aimed at enhancing performance and skill development in organizations. Our senior consultants have extensive experience in the area of IT Service Management, GRC and Project Management. Ducis is an accredited training organization accredited to deliver these courses