DSPM: Data Security Posture Management

IntermediateFree8 modules · 19 lessons

About this course

Learn how Safeguard extends supply-chain security into data-at-rest: classifying PII/PHI/PCI and secrets across S3 and RDS, the redaction mandate that keeps raw sensitive values out of the findings store, and how DSPM findings map onto GDPR, HIPAA, PCI DSS, and CCPA obligations.

What you'll learn

Why Data Posture Is a Supply-Chain Problem

From Code Risk to Data Risk

The Redaction Mandate and Classification Model

The Redaction Mandate: Raw Values Never Stored

Connectors and Regulatory Mapping

Connectors Today: S3 and RDS First

Data Classification in Practice

How a Data Classifier Actually Decides
PII, PHI, PCI, and Secrets: What Each Category Covers
False Positives, Test Data, and Tuning
Scoping a Scan Against Production Data

Running DSPM Against Amazon S3

Preparing the S3 Connector
Reading S3 Findings: Posture and Content
From Finding to Fix: The S3 Remediation Path

Running DSPM Against Amazon RDS

Connecting a Relational Store Safely
Column Level Classification and the Schema View
Encryption, Access, and Retention Findings

From Findings to Compliance Evidence

Mapping DSPM Findings to GDPR, HIPAA, PCI DSS, and CCPA
Evidence, Controls, and the GRC Module
Subject Rights, Retention, and Minimisation

Operating a Data Posture Programme

Policies and Gates for Data Risk
Ownership, Routing, and Remediation Workflow
Programme Maturity and Honest Scoping

01Why Data Posture Is a Supply-Chain Problem1 lessons

From Code Risk to Data Risk

02The Redaction Mandate and Classification Model1 lessons

The Redaction Mandate: Raw Values Never Stored

03Connectors and Regulatory Mapping1 lessons

Connectors Today: S3 and RDS First

04Data Classification in Practice4 lessons

How a Data Classifier Actually Decides
PII, PHI, PCI, and Secrets: What Each Category Covers
False Positives, Test Data, and Tuning
Scoping a Scan Against Production Data

05Running DSPM Against Amazon S33 lessons

Preparing the S3 Connector
Reading S3 Findings: Posture and Content
From Finding to Fix: The S3 Remediation Path

06Running DSPM Against Amazon RDS3 lessons

Connecting a Relational Store Safely
Column Level Classification and the Schema View
Encryption, Access, and Retention Findings

07From Findings to Compliance Evidence3 lessons

Mapping DSPM Findings to GDPR, HIPAA, PCI DSS, and CCPA
Evidence, Controls, and the GRC Module
Subject Rights, Retention, and Minimisation

08Operating a Data Posture Programme3 lessons

Policies and Gates for Data Risk
Ownership, Routing, and Remediation Workflow
Programme Maturity and Honest Scoping

Common questions

How much does Safeguard Academy cost?

Nothing. Every course, exam, and certificate on the catalog is free — including retakes. All you need is a free Safeguard account.

What are the prerequisites?

None. The flagship course, Safeguard Certified Practitioner, is a beginner-level course — basic familiarity with how software is built helps, but every exam question is answerable from the lessons themselves.

What happens if I fail the exam?

You can retake it after a 24-hour cooldown, as many times as you need. Retakes are free, and each attempt draws a fresh random set of questions.

How long is a certificate valid?

The Safeguard Certified Practitioner credential is valid for 24 months from issue. The expiry date is printed on the certificate and shown live on its public verification page. Renewing means passing the current exam again.

Read the full FAQ