Hacker News Reader

it is cool to see someone mention SAMM. I have been obsessed with this framework since it’s inception and am hoping more and more companies adopt it over time (and let it grow with their company). Often times these frameworks are only feasible to use once you have a pretty large security team at your company that can spend their entire job to parse schemas like the one posted. I wrote a post recently talking about how to make SAMM more obtainable to smaller companies starting out thinking about security https://www.lunasec.io/docs/blog/security-guide-for-startups...

This appears to be more literally a schema for information sharing based on https://schema.ocsf.io/ which is probably a better link for the original submission.

to save others the search, since I hadn't heard of it before

> OWASP SAMM

"Software Assurance Maturity Model"

https://owaspsamm.org/

And the commercial fork: https://www.bsimm.com/