List of Contributions

Hello Nigel, Right you are, I have totally forgotten about the 27002, to be honest, I have not read that 27002, but I have talked to people who have and they seem to think it is an excellent standard. I personally prefer OWASP SAMM over the NIST standards. I find NIST very confusing, but OWASP standards ...

Hello Doug, They are not meant to be a replacement but an addendum. The 2700x series focuses on design and development while the NIST/OWASP frameworks focus on making the design process secure. It is part of the whole shift-left ideology but this has changed over time and now with the introduction ...

Hello Allison, Did you find a speaker? I got a few people who could very eloquently cover this topic and many more. Let us know if there is anything I can do to help Cheers, Ric ------------------------------ Ric Campo ------------------------------