Courses modules are made up of learning resources and language-specific coding challenges that allow you to build secure coding awareness and competency right into your overall cybersecurity program. 

Each Course can be created to address your organization's specific training or vulnerability requirements, allowing you to build repeatable learning pathways for development teams.

The video and article below describe the steps a Company Administrator or Team Manager can take to create and publish a course.

Step 1

Open Courses from the top menu and select Course Management

Step 2

Select Add Course to start the course creation wizard

Step 3

The Course creation wizard will guide you through configuration, starting with selecting the focus of the course, depending upon your requirements.

You have the ability to build your Course using an existing template, or you can start from scratch. 

1) Build your course using one of the existing templates

1. Introduction to OWASP Top 10 Awareness (with latest updates from the Web top 10 2021) - This short course is pre-populated with challenges based on the OWASP Top 10 for web languages (2021), OWASP Top 10 for mobile languages (2016) and the OWASP Top 10 for API languages (2019)
   
   
2. In-depth OWASP Top 10 Awareness (with latest updates from the Web top 10 2021) - This course is pre-populated with challenges based on the OWASP Top 10 for web languages (2021), OWASP Top 10 for mobile languages (2016), and the OWASP Top 10 for API languages (2019).
   
   
3. PCI DSS Recommendations - This course is prefilled with challenges based on the PCI DSS requirements (6.5 controls for software development, 4.3 & 4.7 controls for mobile).
   
   
4. Secure Code Warrior Recommendations - Build a course with challenges based on our own recommendations. It takes into account OWASP and PCI-DSS standards but completes the list with more recently emerging vulnerabilities and also takes into account the prevalence of the vulnerability in a specific language or framework.
   
   
5. Security Measures for "EO-Critical Software" Use Under Executive Order (EO) 14028 - This course is based on the National Institute of Standards and Technology (NIST) guidance on security measures for EO-critical software use as directed by the Executive Order (EO) 14028 on Improving the Nation’s Cybersecurity, May 12, 2021.
   
6. Security Awareness  101  - This course is pre-filled with videos and starter-level challenges that introduce the user to software security and the most prevalent vulnerabilities.
   
   
7. Certification Program level 1 - OWASP 1-5 - Certification Program level 1 covers vulnerabilities from OWASP category 1 to 5 - beginner level
   
   
8. Certification Program level 2 - OWASP 6-10 - Certification Program level 2 with a recap for OWASP category 1 to 5 AND covering vulnerabilities from OWASP category 6 to 10 - beginner level
   
   
9. Certification Program level 3 - OWASP & SCW recommendations - Certification Program level 3 with a recap for OWASP category 1 to 10 AND additional SCW recommended categories - intermediate level
   
   
10. Certification Program level 4 - Missions & hard challenges - Certification Program level 4 with a recap for hard challenges OWASP categories 1 to 10 AND additional missions - hard level
    
    
11. Certification Program level 5 - Missions & hard challenges for OWASP 6-10 - Certification Program level 5 with missions and hard challenges for OWASP categories 6 to 10 - hard level
    
    
12. OWASP Top 10 2017 Awareness - This course is pre-populated with challenges based on the OWASP Top 10 for web languages (2017), OWASP Top 10 for mobile languages (2016), and the OWASP Top 10 for API languages (2019)

2) Build your Course from scratch 

1. Target Specific Vulnerabilities - This allows the creation of a course that addresses specific vulnerabilities. If you choose this option, the platform will set up predefined modules for listed vulnerabilities
   
   
2. Custom - Build a course from scratch with full control over videos, challenges, difficulty, and hints available on the platform for the selected programming language:framework. Learn more about creating your own course modules
   

Step 4

Add a single welcome or course introduction message that will be displayed for all the languages covered in the course.

 

Step 5

Once you move to the Course Content section, you can view the course at a high level or expand activities for a closer look at them. 

Additionally, you can:

• Select multiple languages and modules for bulk-actions
• Manage the columns in the table and the order of the columns
• Search, sort, and filter the content in the course 

To learn more about bulk actions, please refer to this article

Select the desired language from the list on the left. To remove any language:frameworks that aren't required for your course, click on Bulk actions and select the remove languages option.

Step 6

Now you can review pre-configured course modules in the content table. At this stage, you can also add additional modules if required. 

Courses content curation flow is streamlined to let administrators add content to the selected language(s) by:

1) Copying existing modules 

Select copy existing modules option 

Select the language and the module you would like to copy then click the Add content button 



2) Adding new modules:

• Add new modules from a template 
• Add new vulnerability modules
• Add a new custom modules 

See How to create your own course module for more details on creating and editing a new custom course module.

Step 7 

Now it's time to add the end-of-course activity. 

Global end-of-course message 

This allows you to share a congratulatory message with the developers once they complete the course

End-of-course Assessment 

This allows you to share a message and lead them to complete an assessment for that course. You can choose between two options:

1. Single end-of-course assessment 
   
   
   
   
2. Maintain individual end-of-course assessments for each language all on one screen
   
   

Step 8

Click the Other Settings tab.

At this point, you should have provided a name and description for the course. Choose naming conventions that will give participants (and yourself) a quick idea of what the course will cover.

You can now select the end date, badge, and email notifications 

Alternatively, If you aren't ready to publish the course, you can always save your progress by clicking 'Save as Draft’ and get back to it at a later date. 

Step  9

Now the Course is ready to be published. Click Publish course button to publish the course or Save as preview to trial the course 

Next Steps

• How to Assign Participants to a Published Course
• How to Add Badges to a Course
• Best Practice Guide to Setting Up the Structure for Your Course.
• Editing a Course