Security and Operations Foundations

Lessons in This Module

1. Lesson 1

   Authentication and Authorisation

   Authentication proves an identity; authorisation evaluates whether that identity may access a particular action or resource. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

2. Lesson 2

   Roles, Permissions, and Least Privilege

   Least privilege gives each person or system only the permissions needed for its present responsibility and duration. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

3. Lesson 3

   Secrets and Environment Variables

   Secrets are credentials or cryptographic values requiring controlled storage, while environment variables are one mechanism for supplying runtime configuration. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

4. Lesson 4

   Company Ownership of Technical Accounts

   Company ownership means critical vendor accounts are registered, recoverable, billed, and administered under organisational control. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

5. Lesson 5

   Repository and Deployment Access

   Repository access controls the product's source history, while deployment access controls the systems that release and run it. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

6. Lesson 6

   Data Privacy and Retention

   Data privacy governs appropriate collection and use of personal information; retention defines how long each category remains and why. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

7. Lesson 7

   Backups and Recovery

   Backups preserve recoverable copies; recovery combines people, access, procedures, and tested restoration into resumed service. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

8. Lesson 8

   Dependency and Supply-Chain Risk

   Supply-chain risk arises when libraries, build tools, services, updates, or maintainers can affect the security and availability of the product. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

9. Lesson 9

   Open-Source Licences

   An open-source licence grants permissions under conditions that may govern attribution, distribution, modification, or disclosure. Learn the founder decision, practical evidence, and warning signs that matter.

   Open Lesson

10. Lesson 10

    Incident Response

    Incident response is the prepared process for detecting, containing, investigating, communicating, recovering from, and learning after a harmful event. Learn the founder decision, practical evidence, and warning signs that matter.

    Open Lesson

11. Lesson 11

    Technical Handover

    Technical handover transfers the knowledge, accounts, source, configuration, operational procedures, and decision history needed to continue the product. Learn the founder decision, practical evidence, and warning signs that matter.

    Open Lesson

12. Lesson 12

    Maintenance and Support

    Maintenance keeps the product secure and compatible; support responds to user and operational problems under agreed responsibilities and service expectations. Learn the founder decision, practical evidence, and warning signs that matter.

    Open Lesson

13. Lesson 13

    Deciding Whether a Product Is Production-Ready

    Production readiness is evidence that a product can serve real users with proportionate security, reliability, recovery, ownership, and support. Learn the founder decision, practical evidence, and warning signs that matter.

    Open Lesson