After three years of preparation, our #OWASP SAMM team has delivered version 2 of SAMM! More details here: owaspsamm.org/blog/2020/01/3… A big thanks to our community, your feedback, corrections, questions, input, and encouragement. SAMM version 2 is for you!

As a reminder - today we have our monthly community call, where you can talk to the SAMM team and other community members to ask questions and share your experiences with SAMM. Connection details below: At 21:30 CET, which is 3:30 pm EDT/EST. meetup.com/owasp-samm/events…

Who to contact for #OWASPSAMM services? SAMM practitioners. Read more about - How do SAMM Practitioners get on the list? owaspsamm.org/blog/2022/12/0… While the OWASP SAMM project is selective about practitioners we list, it does NOT imply we endorse, recommend, or favor any of them.

A regular concern of #OWASP #SAMM users is how to address Activities or Quality Criteria they believe are not applicable to their assessment’s scope. So, “Is it valid to declare an Activity Not Applicable?” Read more: “The Not Applicable Question”: owaspsamm.org/blog/2023/02/2…

Just a reminder - Don't forget that March 8th is the next SAMM community call. At 21:30 CET, which is 3:30 pm EST. Zoom call details on our Meetup page, don't forget to join the OWASP SAMM Meetup page: meetup.com/owasp-samm/ #SAMM #OWASP

Don't worry if you didn't manage to join the #OWASP 2023 Global #AppSec Dublin and see the presentation 'Bootstrap and increase your software assurance with OWASP #SAMM v2.1' - by Sebastien Deleersnyder and Bart De Win, because you can now view the video. youtu.be/kd8WAjuXZLE

Don't forget that March 8th is the next SAMM community call. At 21:30 CET, which is 3:30 pm EST. Zoom call details on our Meetup page, don't forget to join and become a member of our OWASP SAMM Meetup page: meetup.com/owasp-samm/ #SAMM #OWASP

xitter.cf/shehackspurple/status/… #OWASPSAMM

Tackling App Security with SAMM-NIST SSDF Mapping - In our latest #SAMM blog we dive into a comprehensive mapping between SAMM and NIST SSDF. You can read the article in full on our website - click here to read more: owaspsamm.org/blog/2023/02/0…

Don't forget today is the February - #SAMM community call. At 21:30 CET, which is 3:30 pm EST. - Project updates, incl. the NIST SSDF Mapping - Deep dive in one of the SAMM practices Details #project-samm Slack channel on #OWASP or our Meetup page: meetup.com/owasp-samm/

The #OWASP SAMM Deep-dive sessions cover the Security Practices in the #SAMM model, in this one we discuss Implementation and Secure Build. We've recorded these sessions during our SAMM community calls. View the recording here on our YouTube channel: youtu.be/d1nA_xnhQA4

The OWASP SAMM Deep-dive sessions cover the Security Practices in the SAMM model, in this one we discuss Design I Threat Assessment. We've recorded these sessions during our SAMM community calls. View the recording here on our YouTube channel: youtu.be/v2qM0W_FCYU

Today we have our first monthly SAMM community call of 2023 (each 2nd Wednesday of the month). At 21:30 CET, which is 3:30 pm EST. Agenda: - SAMM project update - "Ask us anything" session with the core team Zoom call details on our #project-samm Slack channel on OWASP. #SAMM

The OWASP SAMM Deep-dive sessions cover the Security Practices in the SAMM model, in this one we discuss Design I Security Requirements. We've recorded these sessions during our SAMM community calls. View the recording here on our YouTube channel: youtube.com/watch?v=Q69fPPIX…

The OWASP SAMM Deep-dive sessions cover the Security Practices in the SAMM model, in this one we discuss Implementation I Secure Deployment. We've recorded these sessions during our SAMM community calls. View the recording here on our YouTube channel: youtube.com/watch?v=t_tZ4tVY…

Today we have our monthly #SAMM community call (each 2nd Wednesday of the month). At 21:30 CET, which is 3:30 pm EST. Agenda: - SAMM Guidance - #OWASP 2022 SAMM Survey Zoom call details #project-samm Slack channel on OWASP. Contribute to SAMM: owaspsamm.org/contributing/

The OWASP SAMM Deep-dive sessions cover the Security Practices in the SAMM model, in this one we discuss Design I Threat Assessment. We've recorded these sessions during our SAMM community calls. View the recording here on our YouTube channel: hubs.la/Q01vBpqF0

Comparing BSIMM & SAMM a blog by Brian Glas - A comparison pulled from the published information for each model to help organizations understand which of these two models may be a better fit for their needs. Read more: owaspsamm.org/blog/2020/10/2…

The OWASP SAMM Deep-dive sessions cover the Security Practices in the SAMM model, in this one we discuss Implementation and Secure Build. We've recorded these sessions during our SAMM community calls. View the recording here on our YouTube channel: youtu.be/d1nA_xnhQA4

OWASP SAMM Train the Trainer - As we considered our goals to expand awareness and enable more software professionals to use SAMM, we realized there’s something we need to make that happen - more trainers. Find out more: owaspsamm.org/blog/2021/11/3… #SAMM #OWASPSAMM #Securesoftware

During our November community call, we shared the outcomes of our recent #SAMM Core Team Summit. Which included: Introducing SAMM practitioners, SAMM summit outcomes and the SAMM Survey results. View the latest community recording on YouTube: youtu.be/_YLWqT5I4Bg #OWASP