A tailored course, built for your situation
Influence in SLSA Framework Decisions Across Engineering Teams
Establish authority in software supply chain governance through structured SLSA implementation
$199 one-time
24-hour access provisioning
30-day money-back guarantee
Hand-built implementation playbook
12 modules. 12 chapters per module. 144 chapters total.
12 modules, each with 12 chapters (144 chapters total), text-based, plus downloadable templates and a hand-built implementation playbook delivered alongside course access.
Who this is for
Senior IC in engineering or platform governance at a tech-first organisation, involved in secure software delivery and cross-team alignment on standards.
Who this is not for
This course is not for entry-level engineers, auditors focused solely on checkbox compliance, or managers seeking high-level overviews without technical depth.
What you walk away with
- Lead internal SLSA adoption with documented implementation playbooks
- Shape vendor selection criteria based on SLSA tier alignment
- Earn peer recognition as the go-to practitioner in supply chain integrity
- Drive consensus on SLSA tier assignments across engineering pods
- Navigate trade-offs between delivery speed and compliance rigor with framework-backed reasoning
The 12 modules (with all 144 chapters)
Module 1. SLSA Foundations in Modern Software Delivery
Understand the evolution of software supply chain security and how SLSA addresses specific gaps in provenance and integrity verification.
12 chapters in this module
- Origins of SLSA
- Key stakeholders in adoption
- From CI/CD logs to attestations
- Core principles of tiered security
- Provenance definition and scope
- Build vs buy considerations
- Mapping SLSA to internal workflows
- Tier 0 realities in practice
- Common misinterpretations
- Vendor claims vs framework truth
- Audit readiness signals
- First artefact to validate
Module 2. Tier 1 Implementation Pathways
Deploy verifiable builds with basic integrity guarantees, focusing on toolchain integration and minimal process lift.
12 chapters in this module
- Defining a repeatable build
- Source repository tagging
- Build platform requirements
- Logging and retention
- Attestation format basics
- Signing key management
- Verification pipeline setup
- Common toolchain conflicts
- Team onboarding strategy
- Measuring Tier 1 completion
- Handling exceptions
- Documentation standards
Module 3. Achieving Tier 2 with Isolated Builds
Implement isolated, reproducible builds that resist tampering and support cross-team verification.
12 chapters in this module
- Build isolation requirements
- Container security basics
- Reproducibility thresholds
- Time window constraints
- Worker node hardening
- Network controls
- Artifact signing automation
- Verification at scale
- Cloud provider considerations
- Cost vs security balance
- Rollback safety
- Peer review checklist
Module 4. Tier 3 High Integrity Builds
Secure build processes against insider threats and ensure long-term verifiability across organisational changes.
12 chapters in this module
- Long-term key rotation
- Multi-party approval workflows
- Build entry point protection
- Threat model assumptions
- Immutable logs integration
- Timestamp authority use
- Build reproducibility audits
- Access control depth
- Monitoring for drift
- Vendor input validation
- Incident response linkage
- Cross-team escalation paths
Module 5. Tier 4 Fully Reproducible Builds
Achieve the highest level of assurance through deterministic builds and distributed verification.
12 chapters in this module
- Deterministic build design
- Source code normalisation
- Toolchain version pinning
- Environment standardisation
- Distributed rebuild networks
- Verification threshold settings
- Dispute resolution process
- Long-term preservation
- Legal evidentiary weight
- Public verification options
- Organisational readiness
- Roadmap to Tier 4
Module 6. SLSA in Vendor Evaluation
Use SLSA tiers as a lens to assess third-party software and managed service providers.
12 chapters in this module
- Vendor attestation requirements
- Tier alignment assessment
- Gap identification methodology
- Negotiation leverage points
- Minimum viable attestation
- Third-party audit rights
- Contractual integration
- Risk rating integration
- Shadow IT detection
- Procurement workflow hooks
- Compliance cost allocation
- Exit strategy considerations
Module 7. Cross-Functional Alignment
Secure buy-in from engineering, security, and product teams on SLSA implementation priorities.
12 chapters in this module
- Stakeholder mapping
- Language translation between roles
- Timeline negotiation
- Risk communication framework
- Incentive alignment
- Pilot team selection
- Feedback loop design
- Escalation protocols
- Metrics that matter
- Progress reporting rhythm
- Conflict resolution templates
- Celebrating milestones
Module 8. Policy Mapping to SLSA Controls
Align internal security policies and compliance requirements with SLSA framework objectives.
12 chapters in this module
- SOC 2 control mapping
- ISO 27001 alignment
- NIST CSF intersections
- Internal audit integration
- Policy exception handling
- Evidence collection automation
- Control ownership assignment
- Review cycle synchronisation
- Regulatory correspondence
- Gap remediation tracking
- Framework substitution logic
- Executive summary templates
Module 9. Automation and Tooling Integration
Embed SLSA verification into CI/CD pipelines and monitoring systems.
12 chapters in this module
- CI/CD gate design
- Attestation generation tools
- Signing infrastructure
- Verification as a service
- Pipeline break conditions
- Error handling patterns
- Toolchain compatibility
- Open source vs commercial
- Integration testing
- Performance impact
- Alerting on non-compliance
- Version upgrade planning
Module 10. Incident Response and SLSA
Leverage attestation data during security incidents to accelerate root cause analysis.
12 chapters in this module
- Attestation in forensic analysis
- Build integrity checks
- Time window verification
- Reproducibility for validation
- Threat actor detection
- Compromise assessment
- Recovery playbook integration
- Legal chain of custody
- Third-party review access
- Disclosure coordination
- Lessons learned update
- Framework adaptation
Module 11. SLSA and Regulatory Expectations
Anticipate how regulators may use SLSA as a benchmark for software integrity in future audits.
12 chapters in this module
- DORA implications
- NIS2 alignment
- GDPR software provenance
- CCPA data handling
- Financial services mandates
- Healthcare software rules
- Government procurement
- Regulator familiarity trends
- Voluntary disclosure value
- Public trust signals
- Future-proofing strategy
- Industry benchmarking
Module 12. Leading SLSA Maturity in Your Organisation
Drive long-term adoption and cultural ownership of supply chain security practices.
12 chapters in this module
- Maturity assessment model
- Internal champion network
- Training program design
- Success story collection
- Executive communication
- Budget justification
- Tooling investment cases
- External recognition
- Conference participation
- Open source contribution
- Roadmap ownership
- Legacy system transition
How this maps to your situation
- When defining internal SLSA adoption roadmap
- During vendor security assessments
- Prior to compliance audit cycles
- After incident requiring build verification
Before vs. after
Before
SLSA is discussed in abstract terms, with unclear ownership and inconsistent implementation across teams.
After
You lead structured adoption with peer-recognised expertise, shaping decisions on tooling, vendor selection, and compliance alignment.
What's included with your purchase
- 12 modules with 12 chapters each (144 chapters)
- Downloadable templates and worked examples for every module
- Hand-built implementation playbook delivered alongside course access
- 30-day money-back guarantee
Delivery and format
- Course and learning environment access provisioned within 24 hours of purchase
- Hand-built implementation playbook delivered alongside course access
Format: Text-based modules and chapters in the Art of Service learning environment, plus downloadable templates and worked examples for every chapter, plus the hand-built implementation playbook delivered alongside course access.
Time investment: Approximately 45, 60 minutes per module, designed for just-in-time learning during active projects.
If nothing changes
Without structured grounding in SLSA, influence in software supply chain decisions defaults to those with loudest voices, not deepest understanding.
How this compares to the alternatives
Unlike generic security courses, this program focuses specifically on SLSA implementation in real engineering environments, with templates and playbooks you can apply immediately.
Frequently asked
Who is this course for?
Senior engineers, platform leads, and security practitioners involved in software supply chain governance and cross-team standards adoption.
How is the course structured?
12 modules, each containing 12 chapters (144 chapters total).
Does the course cover SBOM and NIST SSDF?
While focused on SLSA, the course shows how it integrates with SBOM practices and aligns with NIST SSDF objectives.
$199 one-time. Approximately 45, 60 minutes per module, designed for just-in-time learning during active projects..
Within 24 hours your account in the learning environment is provisioned and the tailored implementation playbook is delivered alongside it.
30-day money-back guarantee·
144 chapters·
Hand-built playbook included·
Account access within 24 hours