owasp/pscfOWASP framework providing structured security capabilities for software products, derived from regulatory and industry standards analysis to guide secure product management, implementation, and compliance.
This is the OWASP framework for building security capabilities into your product delivery process and teams.
The main website for the PSCF is on Prods.ec and includes many more details about the Framework along with explanatory videos.
We created the Product Security Capability Framework to provide a clear way of thinking about software product security and the delivery activities that lead to building and maintaining the right level of security for your customers and your organisation.
This framework is designed to be the foundation of:
The framework currently consists of six (6) process areas and thirty-six (36) capabilities.
The current 1.0 version of the framework is available here in Google Sheets and anyone with can comment and contribute there.
The Sheet allows someone to do an assessment of their own organisation's capabilities and get a report.
The full text and multimedia site is available on Prods.ec
