OWASP SAMM
OWASP SAMM maturité sécurité software 5 functions.
Définition
SAMM v2.1 structure : Governance (Strategy & Metrics, Policy & Compliance, Education & Guidance), Design (Threat Assessment, Security Requirements, Security Architecture), Implementation (Secure Build, Secure Deployment, Defect Management), Verification (Architecture Assessment, Requirements-driven Testing, Security Testing), Operations (Incident Management, Environment Management, Operational Management). Assessment tools disponibles.
Origine
OWASP Foundation, SAMM v1.0 2009 (Pravir Chandra), v1.5 2017, v2.0 2020, v2.1 mars 2023.
Usage
Adopté par grandes entreprises pour roadmap AppSec maturité multi-annuelle. Concurrent BSIMM (Synopsys / Black Duck).