21 docs tagged with "formação"

Training content to ensure the responsible and secure use of automated tools, code assistants and generative AI

Recommendations for organisations with greater maturity in continuous training, automation and behavioural security.

Binary, traceable verification checklist of the adoption of the practices of Chapter 13.

Concrete example of a training manual for developers on secure practices in PRs.

Practical integration of upskilling and onboarding practices into the development lifecycle

What SbD-ToE requires to exist on the HR / People Operations side

Strategies for linking continuous training to the other chapters of the SbD-ToE.

Technical and process indicators for the assessment of the effectiveness, coverage and impact of the security training and onboarding programme, with thresholds by risk level and mapping to the cross-cutting SbD-ToE governance dimensions.

Standardised procedure for the secure onboarding of third parties, with the minimum required training.

Setup and use of an isolated environment for the practical training of contractors before access to real systems

Technical guide to continuous training with a direct link to each chapter of the manual.

Structure and responsibilities of the Security Champions programme for strengthening the applied security culture.

Organisational policy that defines the requirements for the security training and upskilling programme, including mandatory onboarding, training tracks by profile and risk level, the Security Champions programme, practical exercises, content updates, effectiveness KPIs and integration with individual performance objectives, proportionate to the criticality level (L1, L2, L3).

Operational and institutional metrics that make it possible to assess the effectiveness of training and onboarding.

Strategies and practices to ensure that teams, profiles and stakeholders are prepared to apply Security by Design

List of minimum training content by technical profile for onboarding and continuous upskilling.

Practical upskilling for technical teams that develop, review or operate IaC projects securely

Technical plan of the minimum mandatory upskilling for suppliers, contractors and partners with technical access.

Set of effective pedagogical approaches for promoting retention, applicability and motivation.

Training path adapted to the risk level (L1–L3) and to the technical profile of each member of staff.

Minimum questionnaire to validate the knowledge of external staff with technical permissions