Skip to content
Ameen Abozaid
Planned lessonSTF-008-L06

A joint roadmap with security

  • Lesson 6 of 8
  • Staff
On This Lesson 4 topics

This lesson is planned. The outline below lists the topics it will cover. The full lesson has not been published yet.

In this lesson

agree a multi-year plan with the security team.

Planned topics

  • Split roles: security owns policy, monitoring, and response; platform owns defaults and enforcement.
  • Sequence by risk reduction and platform readiness.
  • Share metrics: recurring findings, time to patch, coverage of defaults.
  • Meet regularly; a joint roadmap fails if it is a one-time document.
Draft outline details

Demonstration

a three-year roadmap table: year, goal, owner, measure.

Check your understanding

Who owns default enforcement in the platform?

Show answer

The platform team, in partnership with security.

Practice

Apply this lesson with the module's lab, exercises and quiz.

Lab and exercises Quiz

Marking a lesson complete is optional and you can undo it any time. Your progress stays in this browser.

Continue to next lesson

Type to search levels, phases, modules and lessons.