Audit and Control of DevOps - ITG214


This course covers continuous development, testing, deployment, monitoring, feedback, vulnerability scanning and auditing of DevOps. This is a continuous process, so the focus is on where to find the risks in a dynamic environment.


Tuition cost


NASBA Certified CPE

24 Credits


Why you should attend

You should attend because software development cannot be business as usual as stakeholders demand faster product-to-market delivery and auditors must verify key risks are effectively controlled during this continuous process.

Who should attend

IT auditors, information security professionals, risk managers and those assigned to form or participate in a DevOps Governance Committee who wish to gain an understanding of how to govern, manage and assess a DevOps environment.

What You'll learn

You will learn about the DevOps lifecycle, the top myths about it, key problems and controls, how to assess interfaces, change management implications and how to prepare an effective audit program.


  • Auditing Business Application Systems (ITG103)
  • Intermediate IT Audit School (ITG241)
  • Auditing Agile and Scrum Development Projects (ITG213) or equivalent experience
  • Learn how DevOps evolved from Waterfall to Agile to Scrum to DevOps
  • Learn what DevOps is
  • Explore what works and does not work in DevOps
  • Determine how to do RISK-BASED Auditing of DevOps
  • Understand TRIGGER-based DevOps auditing, and what TRIGGERS point you toward the areas of greatest risk and concern
  • Getting proactively involved at just the right time
  • Furthering the benefits of Application Internal Controls
  • What to Audit BEFORE taking on DevOps
  • Auditing DevOps Project Management
  • Auditing DevOps Projects
  • Auditing DevOps Iterations
  • Automated Ways to Go
  • Metrics That Highlight Problems Quickly
  • Containers and Container Security
  • The NEW Tool of DevSecOps
  • Working DevOps During Covid-19
  • How to Communicate Concerns Immediately

Schedule your course

Use the table below to select the time and location that works best for you.

Timezone: America/Chicago

unknown date

No dates found


ACI Learning is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: