Application Security Program Quick Start Guide

The Application Security Program Quick Start Guide Placeholder Contents Preface About this guide Audience Day 1 Evaluation *Key Questions: Management Security IT Ops Engineering Groups (inc. QA)/Development *Day 2 **Key Activities: Asset Discovery Asset Risk Prioritization Communication Plan *Day 3 **Key Activities: Vulnerability Assessments Vulnerability delivery *Day 4 **Key Activities: Measured Metrics *Day 5 **Key activities: Compensating Controls Mitigating Controls Remediation Prioritization Licensing The OWASP Application Security Program Quick Start Guide is free to use. It is licensed under the Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International license. You are free to: Share — copy and redistribute the material in any medium or format Adapt — remix, transform, and build upon the material for non-commercial use The licensor cannot revoke these freedoms as long as you follow the license terms.

Credits Project lead and authors GabrielGumbs JeremiahGrossman Robert Hansen Jerry Hoff Other contributors Co-authors, contributors and reviewers: MattJohansen Further Information Application Security Program Quick Start Guide The OWASP Application Security Program Quick Start Guide is also available as Free downloadable PDF For full information about the Application Security Program Quick Start Guide, including mailing list details, the forward plan, how to contribute, the project status, and alternative media, see the project page: The Application Security Program Quick Start Guide Project Page