Making OpenSAMM More Effective in a DevOps World
Explore a comprehensive conference talk from AppSecEU 2016 in Rome that delves into enhancing OpenSAMM's effectiveness in DevOps environments. Learn about software assurance frameworks, SAMM structure, and practical implementation. Discover strategies for data collection, benchmarking, and streamlining processes to minimize impact on development teams. Gain insights into the challenges of Agile vs DevOps, opportunity costs, and showing value early. Understand the importance of data-driven benchmarking, flexible depth assessment, and communicating value through gamification. Examine the ROI of OpenSAMM, automation opportunities, and ownership considerations. Conclude with practical tips on making OpenSAMM more engaging and effective in modern software development practices.