OWASP Top 10 Maturity Categories for Security Champions
summary
Claims a concrete tracking system: an Excel now and a web maturity categories app soon that scores ten contribution types with 1–3 points, shows belt colors and leaderboards, and connects to vulnerability management to flag team training gaps. Backed by numbers: BSIMM shows 122 firms and 468,000 developers and that 42.6% have champion programs while only 2.5% reward progression; an org example runs ~200 security champions and resets belts biannually.
AI-written summary · about
chapters (18)
- 0:00Introduction
- 0:47About Sage
- 1:40Raising the Bar
- 3:27Becoming a Security Champion
- 4:12What do Security Champions do
- 6:47Maturity Models
- 7:21Why have Security Champions
- 8:16Statistics
- 9:25Security Maturity Model
- 10:20Recognition and Reward
- 11:54Project Introduction
- 13:43Project Name
- 15:00Categories
- 21:42The App
- 25:19Maturity Categories
- 26:39Excel
- 27:55Why we are doing this
- 32:11Outro
related talks
36mChampioning Security: Scaling Security at Every Level
32mSecurity Champions? Introduce them in your Organisation
28mData-Driven AppSec Champions Programs – Benchmarking Your Program with Numbers
26mTopics of Interest: These are the Vulns You are Looking For: AppSec Champions & Jedi...
27mSecurity Champions LeaderBoard - Building and Gamifying the Security Culture at Your...
48mGrowing A Security Champion Program Into A Security Powerhouse
41mSecurity Champion Worst Practices
27mSecurity Champions: The What, Why, and How