[Owasp-cmm] SAMM Case Studies

[Pravir Chandra]

Hey James.

For your case study, we can discuss next week since I think we'll both be in Portugal for the OWASP Summit.

In fact I'm running a working session on 11/4 to discuss several aspects of the SAMM beta and all are invited to attend and provide feedback:
 - proposed changes to the framework
 - proposed changes to terminology
 - proposed changes to activities
 - case studies
 - additional roadmaps
 - self-assessments and scorecards
 - real-world trials and data collection

Hopefully by the end of the week, we'll be well on our way to a new revision.

Additional details are available off of the OWASP wiki page for the working session at http://www.owasp.org/index.php/OWASP_Working_Session_-_Software_Assurance_Maturity_Model


Thanks and anyone planning on attending should sign up on the wiki page!

p.

------Original Message------
From: james at architectbook.com
To: Pravir Chandra
Cc: owasp-cmm at lists.owasp.org
Cc: Brian Chess
Sent: Oct 28, 2008 12:00 PM
Subject: SAMM Case Studies

Pravir, could you outline the process in which you envision case studies to occur? I have gotten approval for my employer to be a participant in your case study under the agreement that the work be published in an open source manner. Our media relations policy otherwise would restrict us publishing on vendor paper.

Please advise...