Web Banner
Back to Pre-Conference Training Page

Back to Conference Home Page

Secure Your SDLC using OWASP SAMM - ASAP!

One-Day Interactive (Classroom) Training - OWASP New Zealand Day 2023

Abstract

Incorporating a mix of lectures and workshops, this training delivers an in-depth view of and practical implementation of the OWASP Software Assurance Maturity Model (SAMM). SAMM provides an effective and measurable way for organizations to analyze and improve their software security posture.

Course Details

Dates: Tuesday, 4 July 2022

Time: 8:45 a.m. to 5:30 p.m. (NZST)

Instructor: Raafey Khan, Cyber CX

Course Fee: NZ $500.00 (plus GST and ticketing fees)

Registration Site: https://events.humanitix.com/owaspnz2023-training

Maximum Enrolment: 36 attendees

Course Outline

Part One: SDLC Overview and OWASP SAMM Introduction

Part Two: Applying OWASP SAMM

Part Three: OWASP SAMM Tools

Part Four: OWASP SAMM Best Practices

Course Description

Building security into the software development and management practices of a company can be a daunting task. There are many elements to the equation: company structure, different stakeholders, technology stacks, tools and processes, and so forth. Implementing software assurance can have a significant impact on the organization. Yet, trying to achieve this without a good framework is most likely leading to just marginal and unsustainable improvements. OWASP SAMM gives you a structural and measurable framework to do just that. It enables you to formulate and implement a strategy for software security that is tailored to the risk profile of your organization.

The goal of this one-day training, which is conceived as a mix of presentations and interactive workshops, is for the participants to get a more in-depth view of and practical feel for the OWASP SAMM model. The training is set up in three parts:

In case you haven’t started a secure software initiative in your organization yet, this training should provide you with the necessary foundations and ideas to do so. Be prepared for the highly effective and applicable treatment of this large domain!

And, in case you’re concerned about confidentiality issues, all participants are expected to adhere to the Chatham House Rule.

Your Instructor

Raafey Khan

An eternal security optimist, Raafey’s goal is to help organisations understand their cyber risk and why they should at least try to embed security into their development processes.

Raafey leads the Application Security team for CyberCX globally, with a focus on automating everything and making security simple for development teams.