Our Training Approach


We believe that training works best when people have a chance to develop specific technical skills, to apply them, and to reflect on how they and others have applied them. We focus our training on specific learning goals, including skills (technical and soft), values (the importance of security) and understanding (shifting left reduces rework).

All of our courses are aligned with the Four Question Framework:

By skills, we mean both specific technical skills such as 'draw a Data Flow Diagram,' and the ability to discuss skills or tasks, such as 'compare between DFDs and swim lanes for this project.'

By analogy, people practice how to hold a knife, then using it to chop vegetables. Then they develop precision in chopping, repeatability in chopping, dicing and mincing. With those skills, they can decide when each is appropriate. When they use different knives on different ingredients, and cook them, they can start to discuss the tradeoffs between knives, or between cuts, or the importance of precision. Over time, and with practice, they can advise others on developing the appropriate skills. Our 100 level courses are very much skill focused: we teach people to chop vegetables, and the courses are all under an hour. At the 200 level, we go into much mroe depth in answering the Four Questions, and we start to consider additional ways to answer each. Additional skills, reflectivity and comparisons become increasingly important in the higher-level (300/400 level) classes. At the 200 level and above, our training engages participants through discussion, hands-on exercises, group work, and often, instructor led coaching.

In 2020, we made the shift from in-room to virtual trainings. We invested heavily in instructional design and production, and our customers tell us they're very happy with the learning experience. In fact, there are real learning and logistical advantages and we expect to continue to offer distributed courses after the pandemic. Those advantages include better integration into a workday, travel-free participation for distributed teams, and each participant's ability to take their time with exercises.

Our course catalog has been designed to enable both instructor-led and self-paced ("on demand") options to enable you to deliver the training you need when you need it.