एप्लिकेशन सुरक्षा प्रोग्राम किट
AppSec प्रोग्राम चलाएँ: SAMM परिपक्वता, Secure by Design रोडमैप, SSDF साक्ष्य, सिक्योरिटी चैंपियन, थ्रेट मॉडल, समीक्षाएँ, पेनटेस्ट और PSIRT।
रणनीति
OWASP SAMM Assessment Template
पूर्णOWASP SAMM v2 assessment: 15 practices and 30 streams, original prompts per level, scoring formulas, current vs target scores, findings, phased roadmap, metrics
OWASP SAMM v2 (core v2.2.0)Secure by Design Roadmap Template (CISA Pledge)
पूर्णSecure by Design roadmap: executive owner, 3 principles, 7 pledge goals with measures, memory-safety roadmap, bad practices check, evidence, reporting
CISA Secure by Design (Oct 2023); Secure by Design Pledge (May 2024)SSDF Self-Assessment and Attestation Template (NIST SP 800-218)
पूर्णSSDF 1.1 self-assessment by task (PO, PS, PW, RV), status scale and scoring, evidence, POA&M, exceptions, v1.2 draft and AI profile supplements, attestation
NIST SP 800-218 SSDF 1.1; SP 800-218r1 ipd; SP 800-218A
अभ्यास
Security Champions Programme Charter Template (OWASP)
पूर्णSecurity champions charter: vision, goals, selection, time allocation, training path, duties, rituals, metrics, recognition, rotation, OWASP and SAMM mapping
OWASP Security Champions Guide; OWASP SAMM v2 Education and GuidanceSecure Coding Standard Template
मानकSecure coding rules by area with do/don't code examples, SAST/DAST/secret scanning tooling and an exceptions process
थ्रेट मॉडलिंग
सत्यापन
Security Design Review Template (OWASP ASVS 5.0)
पूर्णDesign-time security review by the 17 OWASP ASVS 5.0 chapters: scope, DFD, threats, level, findings, remediation, sign-off
OWASP ASVS 5.0Penetration Test Report Template (PTES, OWASP WSTG)
पूर्णPentest report: executive summary, scope and rules of engagement, PTES phases, WSTG coverage, CVSS ratings, findings, retest
PTES; OWASP Web Security Testing Guide