Course overview

Cyber threats are increasing at a rapid pace, and businesses that don’t build in security from the start risk becoming the next target. A single vulnerability in your code can cost millions in lost data, damaged brand and lost trust. When application layer vulnerabilities are the main target of attacks, it is critical to integrate security into the very foundation of the development process.

This course provides a thorough and comprehensive understanding of secure application development, combining theory with practical applications to equip developers, testers and IT leaders with the right tools. Designed to harmonize with modern development practices such as CI/CD, DevOps and DevSecOps, the course ensures that security becomes a natural part of the development flow – not an afterthought.

A packed day with briefings, exercises and group discussions. During the day, the course leader shows various practical examples of how you can best define your security requirements, continuously work with secure application development, automate as much as possible, build your own secure development process and above all, how to effectively test and verify security.

This course is organized in cooperation with one of our partners and is therefore not covered by the start guarantee.

Course Objective

After the course, you will have good insight and ability in how to effectively integrate security into development work. You will have gained an increased knowledge of the threats that today’s IT systems are exposed to and how to best, from requirements to testing, work to mitigate these threats.

Target Group

This course is aimed at professionals in software development, QA, testing, and project management who are looking to strengthen their knowledge in secure development. The course is also valuable for roles such as architects, test managers, product owners, and leaders in agile methodologies, all of whom can benefit from in-depth knowledge of secure development practices.

Prerequisites

To get the most out of the course, participants should have a basic understanding of threats to IT systems and experience in IT system development.

Certification

This course does not have any associated certification. Each participant who completes the course receives a course certificate.

Trainer

Informator has several trainers for this course.

More about the course

Course content:

Clean Code and Secure Coding: Principles of how to write code with security as a priority.
Threat modeling with STRIDE: Identify and analyze potential security threats.
Reducing the attack surface: Strategies to limit potential vulnerabilities.
Security Analysis Tool: Includes both Static (SAST) and Dynamic (DAST) Application Security Analysis.
Standards for Safety Verification: Application of ASVS 4.03 to ensure highest safety standards.
Managing Third Party Dependencies: Methods to secure external libraries and tools.
FuzzTesting and OWASP Top10: Tools and methods to identify and fix common security issues.
Secure Development Lifecycle (SDL) and DevSecOps: Integrate security thinking into all stages of the development process.

Course overview

1 day

Basic

Can’t find a (suitable) date, but are interested in the course? Send in an expression of interest and we will do what we can to get an opportunity that suits.

För samtliga utbildningar gäller våra
Allmänna Villkor.

Company-adapted course

The course can be adapted from several perspectives:

Content and focus area
Scope of application
Structure

In collaboration with the course leader, we make sure that the course meets your wishes