Timo Pagel -- DevSecOps Maturity Model

Timo Pagel has been in the IT industry for over fifteen years. After a system administrator and web developer career, he advises customers as a DevSecOps consultant and trainer. His focus is on security test automation for software and infrastructure and assessment of complex applications in the cloud. In his spare time, he teaches “Web and Application Security” at various universities. Timo joins us to talk about the OWASP DevSecOps Maturity Model or DSOMM. We explore maturity models, this specific one, how you can use it, and how to get started. We hope you enjoy this conversation with... After a career as a system administrator and web developer, he advises customers as a DevSecOps consultant and trainer.The Application Security Podcast is brought to you by Security Journey.About Security JourneyTimo Pagel has been in the IT industry for over 15 years.→ Learn more about Security JourneyConnect with Timo Pagel:→ OWASP DevSecOps Maturity Model (DSOMM)→ OWASP SAMMMentioned in this episode:→ OWASP DevSecOps Maturity Model (DSOMM)→ OWASP SAMM→ BSIMM→ OWASP Application Security Verification Standard (ASVS)Follow the Application Security Podcast:➜ Home➜ X➜ LinkedIn➜ YouTube➜ Instagram➜ FacebookChapters:00:00 Meet Timo Pagel: DevSecOps Maturity Model03:23 I'm curious now, what was it that this mentor/professor, what did07:37 We think about DevSecOps maturity model, here's one way that I08:45 Timo, what is your recommendation for how someone can use the12:03 For your specific levels then, can you walk us through the15:48 Yeah. Let me trace through one with you just because I17:45 Yeah, no problem. So thinking about DSOM and how it works25:48 Yeah. Makes sense. So let me give you a scenario here29:25 That's awesome. Yeah. And I'm sure you're making that— that's for