DASA Intelligent Continuous Security™ (ICS) – Including Exam (DASADEV-ICS)

Module 1: Foundations of SecOps, DevSecOps, and Intelligent Continuous Security

• • Explain the current security threat landscape, the foundational concepts of SecOps and DevSecOps frameworks, and how gaps in these frameworks have led to the development of Intelligent Continuous Security.
• • Classify modern cybersecurity threats, including ransomware, supply chain risks, and phishing.
• • Compare SecOps and DevSecOps limitations in addressing advanced cybersecurity threats.
• • Summarize how ICS enhances security by bridging SecOps and DevSecOps gaps.

Module 2: Fundamentals of Intelligent Continuous Security

• • Summarize the Intelligent Continuous Security framework, focusing on its unified approach and highlighting how it builds on the principles and practices of SecOps and DevSecOps security frameworks.
• • Define the ICS framework, its principles, and core security practices.
• • Compare ICS to DevSecOps and SecOps, highlighting key differences and benefits.
• • Explain how ICS integrates security into workflows while ensuring agility.

Module 3: Intelligent Continuous Security Technologies and Integrations

• • Apply technologies to implement Intelligent Continuous Security and how they are integrated into an inter-working system to orchestrate and automate security practices end-to-end across the software lifecycle.
• • Apply security tools to CI/CD pipelines for continuous security coverage.
• • Explain AI’s role in automating security testing and analyzing results.
• • Demonstrate security tool integration within an ICS security pipeline.

Module 4: Intelligent Continuous Security Measures of Progress and Success

• • Apply Intelligent Continuous Security capability maturity models, measures of progress and success, and governance strategies to assess, direct, and evolve Intelligent Continuous Security implementation.
• • Identify ICS maturity levels to assess capabilities and guide implementation evolution.
• • Measure effectiveness of vulnerability detection, exploit response, and mitigation strategies.
• • Discuss ICS ROI measurement and governance policy monitoring for security success.

Module 5: Transforming to Intelligent Continuous Security

• • Analyze typical challenges in Intelligent Continuous Security transformations and develop strategies to overcome them while designing effective roles, skills, and team topologies to ensure successful implementation.
• • Identify objectives of each step in the Seven-Step ICS Transformation Framework.
• • Analyze the framework’s application to SolarWinds to address transformation challenges.
• • Design an ICS transformation strategy tailored to specific organizational needs.

Module 6: Sustaining and Evolving Intelligent Continuous Security

• • Evaluate long-term strategies to sustain and evolve ICS practices in response to changing technological and organizational landscapes.
• • Identify challenges in sustaining ICS and their impact on long-term effectiveness.
• • Develop strategies for continuous improvement and scaling ICS over time.
• • Evaluate emerging trends like AIOps and AI in ICS sustainability.