Inc. Your sw Assurance /w OWASP SAMM V2.1
summary
Describes concrete outcomes: release of stream guidance and a practitioner list, tooling pointers like Samwise and the Sami tool, and a formal mapping to NIST SSDF now published. Reports survey numbers — 157 respondents and an overall average maturity of 1.2 — and explains how assessments map to repeatable activities and quality criteria. Presents a benchmarking system under development, instructions for contributing guidance or mappings, and practical next steps for adopting OWASP SAMM in organizations.
AI-written summary · about
chapters (29)
- 0:00Start
- 4:13What is SAMM?
- 6:08SAMM project history
- 8:40SAMM v2 Model structure
- 9:46Business Functions and Practices
- 10:48SAMM v2 Model overview
- 11:39Security practice structure
- 13:30Example activity
- 13:45Example question
- 15:18Assessment tools
- 16:10SAMM PDF
- 16:51Methodology - steps
- 23:03Questionnaire summary
- 25:38Suggested improvements
- 27:00Primary role
- 27:30Unique SAMM assessments
- 28:17Industry verticals
- 29:15Organization size
- 29:37SAMM impact
- 35:40SAMM Practitioners
- 38:19Threat Assessment
- 38:32Threat Modeling Connect
- 38:51Security Requirements
- 39:12Secure Build
- 41:15NIST SSDF Mapping
- 47:02SAMM Benchmarking
- 48:05Benchmarking Initiative
- 49:05Community involvement
- 50:14What's next?
related talks
26mOWASP Software Assurance Maturity Model (SAMM)
46mOWASP SAMM2: Your Dynamic Software Security Journey
36mOWASP SAMM 2 Your Dynamic Software Security Journey
33mIntroduction to OWASP SAMM for Software Developers: Building Secure Software
32mSAMM: Interactive Introduction And Update
28mFlagship Projects: Software Assurance Maturity Model (SAMM)
44mMaturing SDLC At A Fortune 500 Company Based On OWASP SAMM: Successes And Pitfalls
01h 00mSAMM Project