SAMM

OWASP SAMM is a framework for measuring and improving an organization's overall software security program, covering governance, design, implementation, verification, and operations. Rather than testing one application, it assesses how mature the whole development process is and provides a roadmap for improvement. Security leaders use it to benchmark their program and prioritize investments.