Any recommendations for secure software development training courses? What worked best for your team?

Engineering Security & GRC

2.9k views3 Comments

Sort by:

Senior Information Security Manager in Software2 years ago

SANS course SEC522 is a good place to start.

https://www.sans.org/cyber-security-courses/application-security-securing-web-apps-api-microservices/

CISO in Software2 years ago

I like Secure Code Warrior quite a bit for training developers of security development skills, awareness and especially for refreshers annually

Head of Corporate Development in Government2 years ago

DAU AGILE SOFTWARE AND DEVSECOPS TRAINING - https://www.dau.edu/blogs/dau-agile-software-and-devsecops-training

Content you might like

Which pitfalls—model bias, false positives/negatives, data quality, regulatory constraints—often impede AI-based security tools, and how can they be mitigated in a financial-services context?

Read More Comments

What's your experience with SAP ERP on Prem security testing? What kind of engagement did you choose for your SAP landscape—was it a deep-dive technical System Audit, a full-scope Red Team scenario, or something in between? What was the 'why' behind your decision, and what were your key takeaways?

Read More Comments

What do you use for client/endpoint security protection?

Antivirus22%

Antivirus with EDR66%

No AV8%

No AV, but other solutions3%

View Results

How many users in your organization have access privileges beyond what they require?

All users11%

Some users48%

A few users33%

No users4%

Unsure1%

View Results

What are some unique benefits that new grads bring to the software team? When should an organization consider adding more entry-level staff instead of mid or senior level?