[Owasp-leaders] Introducing the ASVS version 3.0

Fri Oct 9 21:23:04 UTC 2015

Daniel,

I am incredibly impressed at the radical openness during the creation of 
this standard. You and Andrew made the main doc "world edit" and let 
anyone - including several anonymous folks - contribute to the standard. 
I think this level of transparency and radical openness around AppSec 
standards is exactly what the OWASP mission is all about.

It was a big honor to be a part of it in some way. A big hat tip to you 
and Andrew. It would not have happened without all of your hard work.

Aloha Nui Loa,

-- 
Jim Manico
Global Board Member
OWASP Foundation
https://www.owasp.org

On 10/9/15 11:12 PM, daniel cuthbert wrote:
> hello all,
>
> I'm really proud to announce that the latest Application Security 
> Verification Standard (ASVS) 3.0 is ready.
>
> https://www.owasp.org/index.php/Category:OWASP_Application_Security_Verification_Standard_Project#Version_3_.282015.29
>
> This release was phenomenal to be involved with, mostly due to the 
> sheer amount of enthusiasm and effort by the community as a whole. 
> From the session we had in Amsterdam, where major changes were 
> suggested and acted upon, to the peer review process using Google Docs.
>
> Both Andrew, Jim and I feel this is the best release to date and I 
> wanted you leaders to have the first look before we go announcing it 
> (i've edited the wiki, but will keep quiet until you have all had a 
> chance to read it)
>
> Thanks again to all those who contributed, this is a flagship 
> production by OWASP and i'm incredibly proud.
>
> Cheers
>
> Daniel