## SONATYPE EDUCATION

# Nexus Lifecycle Policy Workshop

The Nexus Lifecycle Policy Workshop, formerly Component Lifecycle Management (CLM) Policy Workshop, introduces the core concepts around Nexus Lifecycle policies that drive guidance and enforcement throughout the software lifecycle. This one-day workshop focuses on defining and configuring the rules for component use and learning best practices for continuous component governance.

## Key Accomplishments:

- Understand key policy creation and management concepts
- Test the policy to ensure actionable findings
- Develop strategies to refine policies over time
- Learn about approaches to ongoing enforcement

## Recommended for:

Ideal for any new user that is involved in policy creation and management including open source review board members, application security staff, architects, and the legal/compliance team.

## Related Product:

nexus lifecycle

(formerly Component Lifecycle Management—CLM)

## Cost:

Multiple options are available and prices may vary. Please contact us at success@sonatype.com.

---

# Nexus Lifecycle Policy Workshop Outline

## MODULE I

**Introduction to**  
**Nexus Lifecycle**

- Understanding the risk and magnitude of OSS consumption
- Finding your place in the Nexus Lifecycle deployment model
- Building a good component practice
- The role of Nexus Lifecycle policy

## MODULE II

## IDE Installation & Configuration

- Configuring Nexus Lifecycle to represent your organizational structure
- Learning about policy inheritance
- Best practices for setting up organizations and applications

## MODULE III

## Anatomy of a Policy

- Deep dive into features/functions of policy elements
- Using labels, license threat groups, and security
- Categorizing and constructing policy
- Enforcing component consumption

## MODULE IV

## Using Sonatype Default Policies

- Using Nexus Lifecycle policies to communicate open source risk tolerance
- Overview of Security, License, Architecture, and Component policies
- Managing policies

## MODULE V

**Policy Verification**

- Verifying the accuracy of policy elements
- Validating policy based on organizational risk tolerance

## MODULE VI

## Policy Triage

- Ensuring issues are actionable
- Learning policy-specific, triage workflows
- Evaluating policy exceptions

## MODULE VII

## Reporting

- Discussing various types of reports, such as trending reports

## MODULE VIII

**Socializing Expectations**

- Bridging the developer gap
- Discussing scanning philosophies for component selection and governance
- Describing developer communication processes

## About

## Sonatype Services

If you’re looking for that edge to get your team excited and committed to the change you desire, Sonatype Services are the essential piece you’ve been looking for. With Sonatype Services, you will:

- Start your users off with a solid foundation of skills
- Make each department and team a success with expert training  
- Increase your knowledge with thoughtfully designed training curricula  
- Get in-depth exposure to topics ranging from Maven and Nexus basics to advanced Nexus Lifecycle

Whether you are looking to train in a public classroom, at your site or online, we’ll help you to achieve and exceed your goals. In fact, we can even create a custom training course that’s designed around your specific needs. So, contact us today and let us help.