~/talk

SAMM Project

on YouTube 01h 00m
Talkat OWASP 2022 Global AppSec Europe Virtual Event · 2022-11-04..11-07· [security]

speakers

name:John DiLeo
links:none on file
name:Seba Deleersnyder
links:none on file
name:Bart De Win
links:none on file

resources

video:https://youtu.be/UYPQdmns3XA
slides:none on file

summary

SAMM claims a runnable, risk based way to measure and improve software security posture with concrete outputs not platitudes It defines five business functions and 15 security practices each split into two streams with explicit objectives and quality criteria It uses four maturity levels (including 0) and a phased roadmap model so teams set realistic targets The project ships an Excel toolbox and a local JSON saving single page app Samwise with visualizations a PDF export and plans for Benchmarking translations and CI CD integration

AI-written summary · about

chapters (9)

  1. 0:00Welcome to SAMM
  2. 1:27OWASP SAMM overview
  3. 10:10SAMM history
  4. 21:32Conducting SAMM assessment
  5. 33:30SAMM tools and resources
  6. 36:23SAMM toolbox demo
  7. 40:19SAMMwise introduction
  8. 47:28Live SAMMwise demo
  9. 50:19Question and answer session

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.