AppSec IL 2020

Overview:
In this hands-on workshop, you will try out OWASP SAMM 2 yourself to better understand how it can help you define the product security strategy for your organization. We will focus on understanding the model, carrying out an assessment and using the gathered data to define a security roadmap.


Agenda (3 hours):

1. Introduction
Motivation for a maturity model
Overview of SAMM
SAMM and other models

2. Performing an Assessment:
Supporting tools
Scope definition
Explanation of the business functions
Hands-on assessment

3. Creating a Roadmap
Economical considerations
Working with stakeholders
Measuring and reporting

4. Success Tips
Leveraging other SAMM resources and OWASP projects
SAMM Benchmarking
Interacting with the SAMM community

Prerequisites:
Internet browser
MS Excel if possible