owaspsamm / website Goto Github PK

The Learn more link in the cookie consent banner pointed to this URL, which is no longer available
https://www2.owasp.org/www-policy/operational/privacy

This is the current version of OWASP's privacy policy:
https://owasp.org/www-policy/operational/privacy

Update and contact OWASP to change the current draft for a final version.

After removing the contact form from the main menu when we added the resources section, we need to add the contact form back through other pages and add it to the community menu.

Use the info in these documents to update the page:

• https://docs.google.com/document/d/1YZihONR0KUvGx4F9OWPVaf_ktPLC4vk-6d_uo3Bx7O8/edit?usp=sharing
• https://docs.google.com/document/d/1RmdvKke3tgtt7K-TLSSHhI7i2-A1xQbfWYe9XqOuYWI/edit?usp=sharing

Registration link:
https://www.eventbrite.com/e/owasp-global-appsec-washington-dc-2023-tickets-519195877847

Call for presentations form:
https://forms.gle/2xYo8z4w7VyoxTqf8

In the following places I found links that still point to the old GitHub repository (https://github.com/OWASP/samm):

1. on every page - in the footer (GitHub symbol)
2. https://owaspsamm.org/assessment/ - link to spreadsheet

Add guidance in many forms (mappings, projects, references, tools, best practices, ...) to the SAMM activities.
We bootstrap this with an MVP using Google Docs and Forms to insert/update the SAMM Guidance.

In this MVP we will bootstrap 30 Guidance Docs (one per SAMM Stream).
Each of these Guidance Docs will be linked form the Model pages on the website.

Wiki link in website readme.md is broken

Update the link to the Google Sheets Assessment link to point to the 2.0.6 version of the Google Sheets as Google doesn't like to allow stomping the same file for versioning.

https://docs.google.com/spreadsheets/d/1a8aH4_nwZq9M_5_t_tX8DGpblivKdzQcwU_T6t8OEYQ/view

Also, please remove the reference to the ConcordUSA tool as it is not actively maintained or reflective of the current SAMM.
Can add references to SAMMY and Sammwise if appropriate.

In July, at the latest, once it becomes obsolete.

Draft is available in Google Drive for core team 'Blogs' folder.

The diagram showing an overview of the model on the about page ist using a completely different color scheme then the one established previously in the (Excel or Google) spreadsheet toolbox or the original overview diagram of SAMM v2.

I would suggest sticking to the established colours for all resources.

The "Learn More" link in the cookie consent banner on the OWASP SAMM website leads to a 404 page at the moment.

One the Events page, the link to the AppSec NZ 2021 OWASP SAMM: Status and Roadmap is now 404. The external site link has been changed.

The new link is: https://appsec.org.nz/conference-2021/speakers.html

At this moment there does not seem to be an obvious way to view the activity identifiers (such as eg. G-PC-A-1) next to the actual text. I suggest to have these identifiers mentioned on the website and pdf (perhaps even the assessment sheet?), so there is a uniform way to mention and link activities

Add Intrasoft & Optiv to the practitioners list

https://owaspsamm.org/about/

Add Galah Cyber and GuidePoint Security LLC

Trying to translated filled out 1.5v assessments into the v2 format. Do you have a tool that I would be able to use to translate it into the v2 format so we could identify just the new questions being asked?

Appreciate any help you may be able to give. :)

Create a blog to announce the SAMM Practitioners

Users should contact us for admission to SUD23 if they have a full pass for the conference

Add link to the newsletter page in the resources section.

Part 1

• Update User Day page on the website with announcement of date and place for SUD23
• Create banner for home page but don't display yet

https://owaspsamm.org/guidance/quick-start-guide/
https://owaspsamm.org/blog/2023/05/24/determining-scope-when-implementing-samm/

owaspsamm/core#56

Toreon appears twice
Reported by @KGABSWEDEN

Create a blog post for the website detailing how SAMM fits in to an ISO27001 certified ISMS

Extend deadline for submissions to Sep 25.

Derived from owaspsamm/samm-suite#40

the recording from the virtual Global AppSecEU 2022 is online here - https://docs.google.com/spreadsheets/d/1kimShFGWATiajvqvc89n-4jFoMahtXO0oCRpdnEHdtc/edit#gid=481705626 (added a column) - can you add this to the Archive on https://owaspsamm.org/events/?

Update link to get invitation here:
https://owaspsamm.org/contributing/
https://owaspsamm.org/faq/

https://owaspsamm.org/user-day/2021/

Link at the bottom of the page doesn't point to the right URL

owaspsamm/samm-suite#42

• Issue with meetup link
• Remove numbers from page names

Reported by @KGABSWEDEN