owaspsamm / benchmark Goto Github PK

The benchmark data model contains a set of metadata. (industry, region, assessor, org/suborg, assessmentmethod, ...)

For all of this data, we need a clear description of what is considered valid metadata and how to pick&provide the metadata when contributing a SAMM assessment to the benchmark.

Sollicit a timeboxed review of the OWASP SAMM Benchmark use cases- ensuring that we captured all usecases and nuances.
This can run in parallel to other benchmark related work

Create a proposed way forward for scaling the benchmark initiative by working with practitioners as proxies to the data contributors