1. Compare the BSIMM and OpenSAMM maturity models to answer the following: a. List three similarities of the models. b. List three dissimilarities of the models. c. Which model would use for web application projects? Why? d. Which model would you prefer for gap analysis? Explain your answer.

Database System Concepts
7th Edition
ISBN:9780078022159
Author:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Chapter1: Introduction
Section: Chapter Questions
Problem 1PE
icon
Related questions
Question
100%

Hello I need help with these question for my Secure Software Development class. Thank you and please no copy and paste.

### Assignment - Maturity Models

1. Compare the BSIMM and OpenSAMM maturity models to answer the following:
   
   a. **List three similarities of the models.**
   
   b. **List three dissimilarities of the models.**
   
   c. **Which model would you use for web application projects? Why?**
   
   d. **Which model would you prefer for gap analysis? Explain your answer.**
   
2. Given the following results of a gap analysis (based on OpenSAMM) of where a software vendor is currently and where they want to be, list the activities for each of the three security practice areas that would enable them to achieve their goal.

#### Gap Analysis Results:

**Design Review:**
- Current State: 0
- Desired State: 2

**Code Review:**
- Current State: 0
- Desired State: 3

**Security Testing:**
- Current State: 1
- Desired State: 2

#### Graphs Explanation:

- Each security practice area (Design Review, Code Review, Security Testing) is depicted as a bar graph.
- The bar graph is divided into two sections: the current state and the desired state.
- Design Review shows a current progress of 0 and a target of 2.
- Code Review shows a current progress of 0 and a target of 3.
- Security Testing shows a current progress of 1 and a target of 2.
Transcribed Image Text:### Assignment - Maturity Models 1. Compare the BSIMM and OpenSAMM maturity models to answer the following: a. **List three similarities of the models.** b. **List three dissimilarities of the models.** c. **Which model would you use for web application projects? Why?** d. **Which model would you prefer for gap analysis? Explain your answer.** 2. Given the following results of a gap analysis (based on OpenSAMM) of where a software vendor is currently and where they want to be, list the activities for each of the three security practice areas that would enable them to achieve their goal. #### Gap Analysis Results: **Design Review:** - Current State: 0 - Desired State: 2 **Code Review:** - Current State: 0 - Desired State: 3 **Security Testing:** - Current State: 1 - Desired State: 2 #### Graphs Explanation: - Each security practice area (Design Review, Code Review, Security Testing) is depicted as a bar graph. - The bar graph is divided into two sections: the current state and the desired state. - Design Review shows a current progress of 0 and a target of 2. - Code Review shows a current progress of 0 and a target of 3. - Security Testing shows a current progress of 1 and a target of 2.
Expert Solution
trending now

Trending now

This is a popular solution!

steps

Step by step

Solved in 4 steps

Blurred answer
Knowledge Booster
Windows
Learn more about
Need a deep-dive on the concept behind this application? Look no further. Learn more about this topic, computer-science and related others by exploring similar questions and additional content below.
Similar questions
  • SEE MORE QUESTIONS
Recommended textbooks for you
Database System Concepts
Database System Concepts
Computer Science
ISBN:
9780078022159
Author:
Abraham Silberschatz Professor, Henry F. Korth, S. Sudarshan
Publisher:
McGraw-Hill Education
Starting Out with Python (4th Edition)
Starting Out with Python (4th Edition)
Computer Science
ISBN:
9780134444321
Author:
Tony Gaddis
Publisher:
PEARSON
Digital Fundamentals (11th Edition)
Digital Fundamentals (11th Edition)
Computer Science
ISBN:
9780132737968
Author:
Thomas L. Floyd
Publisher:
PEARSON
C How to Program (8th Edition)
C How to Program (8th Edition)
Computer Science
ISBN:
9780133976892
Author:
Paul J. Deitel, Harvey Deitel
Publisher:
PEARSON
Database Systems: Design, Implementation, & Manag…
Database Systems: Design, Implementation, & Manag…
Computer Science
ISBN:
9781337627900
Author:
Carlos Coronel, Steven Morris
Publisher:
Cengage Learning
Programmable Logic Controllers
Programmable Logic Controllers
Computer Science
ISBN:
9780073373843
Author:
Frank D. Petruzella
Publisher:
McGraw-Hill Education