This module explores secure software development practices, focusing on integrating security into DevOps and DevSecOps workflows, understanding the software testing lifecycle, and applying threat modeling techniques. Learners will gain insights into best practices for security testing and how to maintain security throughout the software development lifecycle.

This module explores the core principles of identity and access management, including the AAA framework, key IAM concepts, and best practices for multi-factor and biometric authentication. Learners will gain a deep understanding of how to implement secure identity verification and access control mechanisms. The module also covers real-world applications and threat mitigation strategies.

This module introduces the fundamental concepts of cryptography, including symmetric and asymmetric encryption, digital signatures, and public key infrastructure. It explores how these cryptographic tools are used to secure information and digital communications. Learners will gain practical knowledge of key management and real-world applications of cryptographic systems.

This module covers the key aspects of cloud security, including cloud computing fundamentals, deployment and service models, shared responsibility frameworks, and the importance of contractual agreements and SLAs. Learners will gain a deep understanding of how to assess and manage security risks in cloud environments.

This module covers key aspects of third-party risk management, including SSAE, SOC audits, outsourcing best practices, supply chain security, and physical and environmental controls for IT environments. Learners will gain an understanding of how to assess and mitigate risks associated with external vendors and infrastructure security.

This module covers essential topics in program documentation, security metrics, and effective record-keeping practices. Learners will gain insights into data security, performance monitoring, and compliance strategies. It also provides a structured approach to documenting and maintaining information security programs.