Ep 111: How to use the Software Assurance Maturity Model (SAMM) to Build Highly Secure Applications
Description
The “buzz” in building more secure applications is “shift security left,” which means integrating security into and throughout the Software Development Lifecycle (SDLC).
The Software Assurance Maturity Model (SAMM) is an excellent tool from OWASP that provides a framework for assessing and improving your development processes, resulting in more secure applications. In this episode, your host, John Verry, CISO and Managing Partner at Pivot Point Security, sits down with Sebastien Deleersnyder, co-lead of the OWASP SAMM project, to discuss in depth how you can use SAMM to improve your application security program.
Join us as we discuss the following:
● The biggest challenge teams face in developing secure applications
● Using OWASP SAMM to assess your current security process
● Where most orgs really are today in terms of AppSec
● Identifying quick wins to improve web app security
● Leveraging SAMM alongside other security frameworks like NIST 800-218 and ISO 27001
To hear this episode and many more like it, we encourage you to subscribe to the Virtual CISO Podcast on our YouTube here.
To Stay up to date with the newest podcast releases, follow us on LinkedIn here.
Listening on a desktop & can’t see the links? Just search for The Virtual CISO Podcast in your favorite podcast player.
In this episode of The Virtual CISO Podcast, your host John Verry is joined by Mike Craig to break down the differences between FedRAMP, TxRAMP, AZRAMP, and StateRAMP.
Together, they discuss:How the Naoris Protocol establishes decentralized trust for compute endpoints.
Key distinctions between...
Published 10/17/24
In this episode of The Virtual CISO Podcast, your host, John Verry, sits down with David Carvalho, a cryptography and cybersecurity expert with over 25 years of experience, to explore the next frontier in cybersecurity: decentralized security models and post-quantum cryptography.
How the Naoris...
Published 09/23/24