Skip to content
Cobalt Rentals

GitHub Advanced Security - Security Advisory Services

GitHub's Security Advisory Services pairs you with an expert from GitHub's team to identify your organization's top priorities for improving your Secure Software Development Lifecycle (SSDLC) with GitHub Advanced Security.

How it works

Your advisor will work with you to:

  • Describe your current state of SSDLC and AppSec practices, and your developer workflow
  • Define short-, mid-, and long-term goals for your organization
  • Create a blueprint or update your existing SSDLC implementation to incorporate GitHub Advanced Security
  • Build a detailed implementation and adoption plan with a service delivery roadmap
  • Check in weekly to track progress and maintain asynchronous communication channels
  • Deliver a final report on all activities and outcomes

Offering levels

Services are available at three levels:

  • Fundamentals [100]
  • Intermediate [200]
  • Advanced [300]

Scoping and consultancy are provided by a Services Delivery Engineer.

Who should attend

  • Product/Application Security team
  • Security architecture team
  • Development/Engineering/QA testing team
  • SecDevOps sponsor
  • CTO or designated representative
  • CISO or designated representative

Key features and benefits

Assessment and planning

  • Assess your current state and identify improvement targets and next steps in your SSDLC journey - Create a blueprint for GitHub Advanced Security-supported SSDLC, or adapt your current SSDLC and AppSec program - Create and execute an implementation and rollout plan

Way of working

  • Work with a named resource focused on your top priorities - Establish a working model that fits your organization - Define goals, metrics, and success criteria - Iterate with short delivery cycles that produce frequent, tangible outcomes - Use asynchronous communication via Slack and a shared GitHub repository for collaboration

Expert guidance

  • Receive consulting and advising from a GitHub Advanced Security Expert on paths to success

Engagement schedule

This offering is scoped by an expert from the GitHub Advanced Security team. A schedule will be crafted according to your individual needs.

Syllabus

  • Preparation: - Context - Stakeholders - Aspirations and success criteria - Way of working
  • Assessment: - Gather and review documentation - Conduct interviews - Evaluate current state and practices - Define current maturity model
  • Goal setting: - Identify goals and gaps - Create blueprint, roadmap, and program
  • Present and plan: - Present and review blueprint and roadmap - Prepare implementation and delivery plan
  • Execute: - Execute plan and deliver required services - Update, reflect, and adjust as needed
  • Close out: - Final report presentation - Lessons learned - Next steps

Learning outcomes

After completing this engagement, participants will have:

  • A maturity assessment, gap analysis, and improvement steps
  • A blueprint or updated SSDLC and AppSec program
  • An actionable plan to accomplish your organization's top SSDLC priorities
  • A smooth delivery and deployment of GitHub Advanced Security
  • A report on success

Prerequisites

GHAS licenses must be purchased for the relevant scope of work.