Skip to content

Commit

Permalink
docs: update with activity system (#170)
Browse files Browse the repository at this point in the history
  • Loading branch information
evtil authored Nov 20, 2024
1 parent 69114c1 commit c7d5e8f
Show file tree
Hide file tree
Showing 5 changed files with 72 additions and 32 deletions.
35 changes: 4 additions & 31 deletions docs/security-champion/4-learning-platform.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# Secure Code Learning platform

We are testing out a secure coding learning platform. You as a champion are a perfect match, and that is why you get special merch by learning!
We have a secure coding learning platform. You as a champion are a perfect match, and that is why you get special merch by learning!

## What can you expect?

Expand All @@ -21,6 +21,7 @@ There is a wide arrangement of subjects, and you can do them all if you wish! So
- Azure
- Docker security
- DevSecOps
- AI/LLM
- Data Scientist
- OWASP Mobile top 10 (ios/android)
- OWASP API top 10
Expand All @@ -30,34 +31,6 @@ There is a wide arrangement of subjects, and you can do them all if you wish! So

Use [this form](https://forms.microsoft.com/e/7BTkd7gGJT) to sign up for it! Happy learning!

## Belt system
## Belts

We are launching a new belt system with this learning platform. There are 5 belts you can achieve, where ```White```, ```Yellow```, and ```Green``` belt are achievable from only learning through the platform. More on the merch you can get from the different belts [here](./5-merch.md#merch-for-belts). The ```brown``` and ```black``` belts are something special. They require you to complete activities that give back to the Security Champion network.

!!! Danger " "
The ```brown``` and ```black``` belts are special and require you to complete activities normally in the Security Champion network.

- In order to start earning the brown belt, you need to have completed the three belts from the learning platform (```white```, ```yellow```, and ```green```).
- In order to gain the ```brown``` belt, you need to complete 3 activities from the list below. To achieve the ```black``` belt, you need to complete 6 new activities, for a total of 9.

You report this by using the "Champion passport", add your activity, select ```1``` in hour slot, and comment on what you did, and when you did it. We will then go through and double-check the activity, and if everything is A-OK, you get the activity successfully registered!

## Activities

Please help contribute with useful activities that make sense in Equinor context for Equinor Security Champions. The list below might change based on your feedback.

- Talk briefly about your project/challenges in regards to security in the coffee or go through a Security Journey task
- Facilitate a Threat Modeling session for your team/project
- Share a write-up of a security activity you/your team did on Slack
- Speak at a seminar/meetup
- Set up Secret scanning for your project [using our guidelines](https://appsec.equinor.com/guidelines/secret-scanning/)
- Have a Security Champion from another team join/review your threat model
- Join/review another team's threat model
- Attend a Security Journey tournament
- Gain three ```white``` belts
- Gain two ```yellow``` belts
- Gain two ```green``` belts
- Create a story about something your team did. Check out [stories](./stories/index.md) for template

!!! note
The list of activities might change based on your feedback.
To read more on how we do belts and activities, check out the [belt and activity section](./5-belts-and-activities.md).
67 changes: 67 additions & 0 deletions docs/security-champion/5-belts-and-activities.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,67 @@
# Belts and Activity system

We are launching a new activity system, previously only available to the [learning platform](./4-learning-platform.md) users, now for **the whole Security Champions Network**!

## This is how it works

### Secure Code learning platform

!!! Info "If you are using the Secure Code learning platform"
Nothing changes except where you register activities! It pays to learn, and you get to upskill your knowledge as well, Win Win!

There are 5 belts you can achieve.```White```, ```Yellow```, and ```Green``` belt are achievable from only learning through the platform. More on the merch you can get from the different belts [here](./6-merch.md#merch-for-belts). The ```brown``` and ```black``` belts are something special. They require you to complete activities that give back to the Security Champion network.

!!! Danger " "
The ```brown``` and ```black``` belts are special and require you to complete activities normally in the Security Champion network. Check them out below!

- To start earning the ```brown``` belt: Complete the three belts from the learning platform (```white```, ```yellow```, and ```green```)
- To gain the ```brown``` belt: Complete ```3``` activities from the list [below](./5-belts-and-activities.md#activities)
- To gain the ```black``` belt: Complete ```6``` new activities, for a total of ```9```

### Others

If you are not taking a part of the Secure Code learning platform, you need to do activities all the way. We want to promote the [learning platform](./4-learning-platform.md), so you should really test out the hands-on lessons!
Each belt requires X amount of approved activities.

#### Activities per belt

|White|Yellow|Green|Brown|Black|**Total**|
|:---:|:---:|:---:|:---:|:---:|:---:|
|1|2|3|4|5|**15**|

Ex: Yellow is ```3``` completed activities, ```1``` for ```white```, ```2``` for ```yellow```

### Registration

The process for registration has been simplified! All you have to do is:

- [Use this form](https://forms.microsoft.com/e/qvikj7B3s7)
- List your activity and short about details so we know what we are approving (no sensitive information please)
- We will double-check, and if everything is A-OK, you get an e-mail!

!!! info
One activity is one submission.

## Activities

Please help contribute with useful activities that make sense in Equinor context for our Security Champions.

- Talk briefly about your project/challenges in regards to security in the Morning Coffee
- Facilitate a ```Threat Modeling``` session for your team/project
- Share a write-up of a ```security activity``` you/your team did on the AppSec Slack
- Speak at a seminar/meetup
- Have a Security Champion from another team join/review your ```threat model```
- Join/review another team's ```threat model```
- Create an [AppSec story](./stories/index.md) about something your team did
- Attend a meetup
- Hold a security moment at a seminar/meetup
- Set up ```Snyk``` scanning for your repository
- Set up ```Secret scanning``` for your project [using our guidelines](https://appsec.equinor.com/guidelines/secret-scanning/)
- Attend a Security Journey tournament ```(learning platform)```
- Gain three ```white``` belts ```(learning platform)```
- Gain two ```yellow``` belts ```(learning platform)```
- Gain two ```green``` belts ```(learning platform)```
- Go through a Security Journey task in the Morning Coffee ```(learning platform)```

!!! note
The list of activities will change based on your feedback.
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,7 @@ As SCN age, we will have different merch come and go. Below we have a record of

## Merch for belts

Since we are launching a new belt system connected to the secure coding platform, we need fresh merch! Below is a list of what you can get at the different belt systems. The items will be shipped via mail unless you can pick it up in the building (Forus Øst).
Since we are launching a new belt system connected to the secure coding platform, we need fresh merch! Below is a list of what you can get at the different belt systems. The items will be shipped via mail unless you can pick it up in the building (Stavanger Forus Øst).

- ```White``` belt:
- Your very own white lanyard decorated with placeholders for those hard-earned pins.
Expand Down
File renamed without changes.
File renamed without changes.

0 comments on commit c7d5e8f

Please sign in to comment.