The Application Security Program Quick Start Guide

Placeholder

Contents

• Preface
  • About this guide
  • Audience

• Day 1

''''' **Key Activities: '''''

• • • Evaluation

*Key Questions:

• Management
• Security
• IT Ops
• Engineering Groups (inc. QA)/Development

*Day 2 **Key Activities:

• Asset Discovery
• Asset Risk Prioritization
• Communication Plan

*Day 3 **Key Activities:

• Vulnerability Assessments
• Vulnerability delivery

*Day 4 **Key Activities:

• Measured Metrics

''' *Day 5''' **Key activities:

• Compensating Controls
• Mitigating Controls
• Remediation Prioritization

Licensing

The OWASP Application Security Program Quick Start Guide is free to use. It is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International license. You are free to:

• Share — copy and redistribute the material in any medium or format
• Adapt — remix, transform, and build upon the material for non-commercial use

The licensor cannot revoke these freedoms as long as you follow the license terms.

Credits

Project lead and authors

• Gabriel Gumbs
• Jeremiah Grossman
• Robert Hansen
• Jerry Hoff

Other contributors

Co-authors, contributors and reviewers:

• Matt Johansen

Further Information

Application Security Program Quick Start Guide

The OWASP Application Security Program Quick Start Guide is also available as

• Free downloadable PDF

For full information about the Application Security Program Quick Start Guide, including mailing list details, the forward plan, how to contribute, the project status, and alternative media, see the project page:

• The Application Security Program Quick Start Guide Project Page