DevSecOps Training in Hong Kong

  • Learn via: Classroom
  • Duration: 2 Days
  • Level: Fundamentals
  • Price: From €1,989+VAT
We can host this training at your preferred location. Contact us!

Hands-on training to automate security into a fast-paced DevOps environment using various open-source tools and scripts.

Modern enterprises are implementing the technical and cultural changes required to embrace DevOps methodology by introducing practices such Continuous Integration (CI), Continuous Delivery (CD), Continuous Monitoring (CM) and Infrastructure as Code (IaC). DevSecOps extends DevOps by introducing security in each of these practices giving a certain level of security assurance in the final product. In this training, we will demonstrate using our state-of-the-art DevSecOps Lab as to how to inject security in CI, CD, CM and IaC.

This is a complete hands-on training with attendees requiring only a browser to complete the entire training. Attendees will receive the DevSecOps Lab built using Vagrant and Ansible comprising of various open-source tools and scripts to help the DevOps engineers in automating security within their CI/CD pipeline.

The attendees will receive a DevSecOps-Lab VM (designed by the NotSoSecure team) containing all the code, scripts and tools that are used for building the entire DevSecOps pipeline.

Anybody with a background in IT or related to software development whether a developer or a manager can attend this course to get an insight about DevOps and DevSecOps.

Shift your organisation’s security left, make it a less attractive target to attackers, and help it resist attacks by building a team that can develop resilient applications and systems using secure processes.

Trained delegates can:

  • Implement security tools and build and automate secure processes within their DevOps pipelines
  • Secure any DevOps environment, from development and staging to production
  • Securely deploy all the latest DevSecOps technologies which are covered in the course
  • Understand the business impact of DevSecOps principles and articulate this to key stakeholders
  • Solve business and development problems with a security mindset
  • Take on greater responsibility in the team and become an advocate of security in the wider business

Day 1

Lab Setup

  • Online Lab Setup
  • Offline Lab Instructions

Introduction to DevOps

  • What is DevOps?
  • Lab : DevOps Pipeline

Introduction to DevSecOps

  • Challenges for Security in DevOps
  • DevOps Threat Model
  • DevSecOps – Why, What and How?
  • Vulnerability Management

Continuous Integration

Pre-Commit Hooks

  • Introduction to Talisman
    • Lab : Running Talisman
    • Lab : Create your own regexes for Talisman

Secrets Management

  • Introduction to HashiCorp Vault
  • Demo : Vault Commands

Continuous Delivery

  • Software Composition Analysis (SCA)
    • Introduction to Dependency-Check
    • Lab : Run Dependency-Check pipeline
    • Lab : Fix issues reported by Dependency-Check
  • Static Analysis Security Testing (SAST)
    • Introduction to Semgrep
    • Lab : Run Semgrep pipeline
    • Lab : Create your own Semgrep Rules
    • Lab : Fix Issues reported by Semgrep
  • Dynamic Analysis Security Testing (DAST)
    • Introduction to OWASP ZAP
    • Demo : Creating ZAP Context File
    • Lab : Run ZAP in pipeline

Day 2

Infrastructure As Code

  • Vulnerability Assessment (VA)
    • Introduction to OpenVAS
    • Lab : Run OpenVAS pipeline
  • Container Security (CS)
    • Introduction to Trivy
    • Lab : Run Trivy in Pipeline
    • Lab : Improvise Docker base image
  • Compliance as Code (CaC)
    • Introduction to Inspec
    • Lab : Run Inspec in Pipeline
    • Lab : Improvise Docker compliancy controls

Continuous Monitoring

  • Logging
    • Introduction to the ELK Stack
    • Lab : View Logs in Kibana
  • Alerting
    • Introduction to ElastAlert and ModSecurity
    • Lab : View Alerts in Kibana
  • Monitoring
    • Lab : Create Attack Dashboards in Kibana

DevSecOps in AWS

  • DevOps on Cloud Native AWS
  • AWS Threat Landscape
  • DevSecOps in Cloud Native AWS

DevSecOps Challenges and Enablers

  • Challenges with DevSecOps
  • Building DevSecOps Culture
  • Security Champions
  • Case Studies
  • Where do we Begin?
  • DevSecOps Maturity Model



Contact us for more detail about our trainings and for all other enquiries!

Upcoming Trainings

Join our public courses in our Hong Kong facilities. Private class trainings will be organized at the location of your preference, according to your schedule.

12 January 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
22 January 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
12 January 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
09 February 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
22 January 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
09 February 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
04 March 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom
09 March 2025 (2 Days)
Hong Kong, Kowloon, Tsuen Wan
Classroom / Virtual Classroom

Related Trainings

DevSecOps Training Course in Hong Kong

Hong Kong is officially known as the Hong Kong Special Administrative Region of the People's Republic of China (HKSAR) and is a city and special administrative region of China on the eastern Pearl River Delta in South China. Hong Kong is one of the most densely populated places in the world, with over 7.5 million population. The official languages of the HKSAR are Chinese and English. Hong Kong is a highly developed territory and ranks fourth on the United Nations Human Development Index and the residents of Hong Kong have the highest life expectancies in the world.

The best time to visit Hong Kong is from September to December, since the temperatures, averaging between 19 to 28 degree Celsius. During this outdoor activities-friendly travelling season, you can take a walk along Victoria Harbour, visit the islands of Lantau, Lamma and Cheung Chau and participate in the Mid-Autumn Festival. Top choices of the tourists to visit in Hong Kong are Big Buddha statue, Wong Tai Sin Temple, Repulse Bay and the Beaches and Hong Kong Disneyland.

Explore our diverse range of IT courses, encompassing programming, software development, cyber security, data science, business skills, and Agile/Scrum. Wherever you are in Hong Kong, our seasoned instructors will bring practical training and expert knowledge to your preferred training venue.
By using this website you agree to let us use cookies. For further information about our use of cookies, check out our Cookie Policy.