Course Objective
What this programme helps you achieve
A hands-on 1 day programme that builds practical, job-ready capability in this area. Delivered through guided walkthroughs, worked examples and reusable checklists you can apply immediately.
UnderstandBuild a clear, structured understanding of the core concepts, terminology and drivers behind this domain.
ApplyTranslate the framework into practical actions, controls and working methods you can use on real engagements.
AssessEvaluate current-state maturity, identify gaps and prioritise the improvements that reduce the most risk.
DeliverProduce the artefacts, evidence and reporting expected of a competent practitioner in this area.
Market Need
Why this matters now
Secrets Management, API Key Protection and Git Security addresses a capability that organisations increasingly need but often lack in a structured, defensible form. Teams frequently rely on ad-hoc knowledge, scattered documents or vendor claims instead of a repeatable method.
This programme closes that gap. It gives participants a shared vocabulary, a practical method and a set of reusable artefacts so the organisation can operate this domain consistently rather than reactively.
◆
Framework alignment: Aligned with OWASP secrets management and secure DevOps practices.
What makes this programme useful
01
Practical Focus
Every module is grounded in real scenarios, walkthroughs and reusable checklists rather than theory alone.
02
Career Relevant
Skills map directly to in-demand roles and to how organisations actually operate this domain.
03
Structured Path
A logical progression from fundamentals to applied practice, with a clear takeaway toolkit.
Key Learning Areas
What participants will learn
The risk of hard-coded secrets and leaked keys
Secrets management concepts and vault solutions
Protecting API keys, tokens and credentials
Detecting secrets in code and Git history
Preventing leaks with pre-commit and pipeline scanning
Rotating, revoking and least-privilege for secrets
Securing Git repositories and access
Incident response for exposed secrets
1 Day Agenda
Structured learning flow
09:00–10:15
Module 1 — The risk of hard-coded secrets and leaked keys
Concepts, guided walkthrough and discussion covering the risk of hard-coded secrets and leaked keys.
10:30–11:45
Module 2 — Secrets management concepts and vault solutions
Concepts, guided walkthrough and discussion covering secrets management concepts and vault solutions.
12:00–13:00
Module 3 — Protecting API keys, tokens and credentials
Concepts, guided walkthrough and discussion covering protecting API keys, tokens and credentials.
14:00–15:15
Module 4 — Detecting secrets in code and Git history
Concepts, guided walkthrough and discussion covering detecting secrets in code and Git history.
15:30–16:30
Module 5 — Preventing leaks with pre-commit and pipeline scanning
Concepts, guided walkthrough and discussion covering preventing leaks with pre-commit and pipeline scanning.
16:30–17:00
Module 6 — Rotating, revoking and least-privilege for secrets
Concepts, guided walkthrough and discussion covering rotating, revoking and least-privilege for secrets.
09:00–10:00
Module 7 — Securing Git repositories and access
Concepts, guided walkthrough and discussion covering securing Git repositories and access.
10:15–11:30
Module 8 — Incident response for exposed secrets
Concepts, guided walkthrough and discussion covering incident response for exposed secrets.
Audience & Entry Level
Who should attend?
This programme is designed for professionals who work with, or are moving into, this area of cybersecurity, governance or technology.
Cloud EngineerDevOps / DevSecOps EngineerApplication DeveloperSecurity ArchitectPlatform / SRE TeamAppSec EngineerIT Security TeamSolution Architect
Recommended prerequisite
A general awareness of information security or IT concepts is helpful. No specific certification is required to attend.
Learning Outcome
What participants should be able to do after the course
- Confidently work with the risk of hard-coded secrets and leaked keys.
- Confidently work with secrets management concepts and vault solutions.
- Confidently work with protecting api keys, tokens and credentials.
- Confidently work with detecting secrets in code and git history.
- Confidently work with preventing leaks with pre-commit and pipeline scanning.