~/talk

DSOMM Project

on YouTube 29m
Talkat OWASP 2022 Global AppSec Europe Virtual Event · 2022-11-04..11-07· [security]

speaker

name:Timo Pagel
linkedin:timo-pagel-80900b81

resources

video:https://youtu.be/QZ32CWtLsvw
slides:none on file

summary

DSOMM presents a usable DevSecOps maturity model with concrete activities, a web app backed on GitHub and exportable auditor reports, claiming you can fill levels 1–4 per subdimension and mark skipped areas; the prototype is PHP and is being ported to Angular via Google Summer of Code. Examples include defined build processes, SCA and static analysis (Find Security Bugs), patch automation with renovate/Dependabot, and an option to integrate a vulnerability management workflow; metric outputs map to SAM/ISO.

AI-written summary · about

chapters (5)

  1. 0:00Start
  2. 2:56Target of Maturity Models
  3. 6:37Maturity Levels
  4. 7:24White Spots
  5. 8:16Simplified View of Dependencies

related talks

~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.