With a CI/CD pipeline
Generate an SBOM from the delivered artefact, retain its provenance and publish it to the correct project and version. Verify that processing has completed and connect results to action tracking.
Loading page…
Learn to decide which alerts to address, organise fixes and plan for end of support. Through a practical case, build a process you can adapt to your organisation.
Opening soonFree PDF syllabus · No obligation · Opening date confirmed before enrolment
Identify the affected component, check applicability, plan a fix and verify the result. Build this workflow from start to finish through one practical case study.
A version or configuration is missing: what should you investigate?
Sources report different scores: what should you retain and how do you decide?
A finding disappears after reimport: has remediation actually been proved?
Software is approaching end of support: who decides the next steps, and when?
Prerequisites: Basic systems and networking knowledge, spreadsheet skills, reading simple JSON and running the supplied commands. All participants complete the practical exercises.
The eleven modules include 4 h 50 min of video, 7 h 40 min of guided practice et 1 h 30 min of assessment. This average study time, excluding breaks, is spread across the 30-day access period.
Allocate responsibilities and define the checks required at each stage.
Build an inventory that supports applicability checks and action assignment.
Receive relevant publications and trace revisions through to the local decision.
Produce reliable reports and tell the difference between a detection, evidence and a conclusion.
Produce reliable SBOMs and get them to the right place, with or without a pipeline.
Assess the case study on your own and justify your choices.
Justify priorities beyond the raw score.
Track a portfolio of versions in Dependency-Track and see where DefectDojo fits.
Write verifiable actions and manage deferral without hiding risk.
Verify coverage and trigger a migration plan before support ends.
Present clear decisions to system owners and demonstrate the course skills.
The PDF syllabus sets out each module’s activities, duration and required output.
Generate an SBOM from the delivered artefact, retain its provenance and publish it to the correct project and version. Verify that processing has completed and connect results to action tracking.
Centralise SBOMs from teams and suppliers, link them to deployed versions and organise reassessment and updates. Older versions still in use remain monitored.
You work on the fictional Atelier Nova case in a dedicated lab. No access to your employer’s or clients’ systems is required.
You have 30 days to complete the course, with a recommended two-week schedule. Demonstrations, submitted exercises and answer keys guide you at each stage.
Support is provided in writing: replies within seven calendar days and individual feedback on the final case file within seven days of submission. Targeted resubmission may be offered. Technical blockers are taken into account when setting submission deadlines.
You need a computer, internet connection, spreadsheet software, a terminal and access to the training lab. A technical check precedes access activation. Installation and download time is additional to the 14-hour course.
CyberLifeCycle training connects monitoring, vulnerability assessment, fixes and support deadlines in one practical case. Exercises help you build a tracking case file, priorities and an action plan.
Explore our approach€990 excluding VAT
per participant
14-hour course, 30-day access, videos, exercises and templates, dedicated training lab, assessments, written support and feedback on the final case file.
Request an individual quote€3,990 excluding VAT
for 5 named accounts, equivalent to €798 excluding VAT per participant
The same self-paced course, access period and individual support arrangements. Team access is activated for the period agreed in the quote.
Request a team quoteVAT treatment is specified in the quote. Opening date and enrolment terms are confirmed in writing. Work specific to your systems and private sessions require a separate quote. Contact us for other team sizes.
Yes. The methods apply to in-house teams and to providers managing a client’s software.
No. You do need to read simple JSON and run the supplied commands. Basic systems and networking knowledge remains necessary.
No. This is a supported, self-paced course in two seven-hour units, completed during the thirty-day access period.
Yes. You work with Trivy, Syft and Dependency-Track in a dedicated lab, with and without a pipeline. DefectDojo is covered in a guided demonstration. Access is checked before the course opens.
A completion statement may be issued with assessment results. The course does not award a professional certification.
Enrolment is not yet open. You can view the syllabus, request a quote or ask for an opening notification.
Access is individual. The team offer includes five named accounts.