OWASP SAMM 2 Your Dynamic Software Security Journey
summary
An overview of SAMM 2.0 that gives concrete claims and tools: SAMM 2.0 ships January 2020 with five functions and three maturity levels plus zero, mapping three security practices per function; the assessment toolkit is 90 questions and an Excel workbook with automatic maturity calculations and a roadmap view; there are ready web tools (Concord calculator for benchmarking, a self‑hosted SAMM 2.0 dashboard that exports PDF/Excel), Google Sheets/Forms + Data Studio prototypes, and emphasis on integration, automation and repeatable scoring.
AI-written summary · about
chapters (18)
- 0:00Intro
- 0:25John Ellingsworth
- 1:09What is SAMM?
- 4:20SAMM principles
- 5:25Project history
- 6:37Adaptable Approach
- 7:46SAMM versions 1.5 and 2.0
- 12:45Maturity levels and scoring
- 14:56SAMM v2 assessment toolbox
- 17:17Critical success factors
- 21:00Tools of the Trade
- 22:46OWASP SAMM Toolkit - MS Excel
- 26:57SAMM 2.0 Calculator: ConcordUSA
- 28:44SAMM 2.0 Dashboard: Sathish Ashwin
- 29:41OWASP Maturity Models
- 30:14Google Sheets
- 31:21Google Forms & Data Studio
- 33:05Assessment Toolbox Roadmap
related talks
46mOWASP SAMM2: Your Dynamic Software Security Journey
33mIntroduction to OWASP SAMM for Software Developers: Building Secure Software
26mOWASP Software Assurance Maturity Model (SAMM)
01h 00mSAMM Project
28mFlagship Projects: Software Assurance Maturity Model (SAMM)
55mInc. Your sw Assurance /w OWASP SAMM V2.1
32mSAMM: Interactive Introduction And Update
44mMaturing SDLC At A Fortune 500 Company Based On OWASP SAMM: Successes And Pitfalls