To be fair, OWASP does publish some excellent frameworks focused on enhancing broad-based organizational security posture, like their SAMM (Software Assurance Maturity Model) project:

https://owaspsamm.org/