Upcoming Dates & Locations
Audit and Control of DevOps - ITG214
This course covers continuous development, testing, deployment, monitoring, feedback, vulnerability scanning and auditing of DevOps. This is a continuous process, so the focus is on where to find the risks in a dynamic environment.
Who Should Attend
IT auditors, information security professionals, risk managers and those assigned to form or participate in a DevOps Governance Committee who wish to gain an understanding of how to govern, manage and assess a DevOps environment.
- Auditing Business Application Systems (ITG103)
- Intermediate IT Audit School (ITG241)
- Auditing Agile and Scrum Development Projects (ITG213) or equivalent experience
What You’ll Learn
You will learn about the DevOps lifecycle, the top myths about it, key problems and controls, how to assess interfaces, change management implications and how to prepare an effective audit program.
- Learn how DevOps evolved from Waterfall to Agile to Scrum to DevOps
- Learn what DevOps is
- Explore what works and does not work in DevOps
- Determine how to do RISK-BASED Auditing of DevOps
- Understand TRIGGER-based DevOps auditing, and what TRIGGERS point you toward the areas of greatest risk and concern
- Getting proactively involved at just the right time
- Furthering the benefits of Application Internal Controls
- What to Audit BEFORE taking on DevOps
- Auditing DevOps Project Management
- Auditing DevOps Projects
- Auditing DevOps Iterations
- Automated Ways to Go
- Metrics That Highlight Problems Quickly
- Containers and Container Security
- The NEW Tool of DevSecOps
- Working DevOps During Covid-19
- How to Communicate Concerns Immediately
Why You Should Attend
You should attend because software development cannot be business as usual as stakeholders demand faster product-to-market delivery and auditors must verify key risks are effectively controlled during this continuous process.
ACI Learning is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.nasbaregistry.org.