All Episodes
The AppSec Management Podcast — 46 episodes
Appsec Management With SAMMY
AI in AppSec, May 2026 Update
Introduction to EU DORA
CRA Standards
Introduction to Secure Control Frameworks
How to build and manage your appsec program.
NIS2 Directive: Everything you need to know
NIST SSDF 1.2: an introduction
Women in cybersecurity, what it really looks like, and where you can fit
Can we do Application Security with AI? An analysis of Claude Code Security.
Understanding the Cyber Resilience Act (CRA): What Software and Product Companies Need to Know
Frameworks and maturity models explained
The Reality of AppSec Risk Management using CVEs and CVSS scores
The science of security metrics
What is the cost of a Data Breach?
How to comply with CRA
OWASP ASVS, an introduction
The New OWASP TOP 10, what has changed and why.
Top Application Security Failures at Fortune 500 Companies
CVE and CVSS are broken.
Privacy Threat Modeling: Learn all about it from two experts in the field!
SAMM Assessment: Everything you need to know from industry experts
Embedding Security into the SDLC: How Sign In Solutions uses SAMMY & OWASP SAMM
An introduction to BSIMM, Building Security in Maturity Model
How to integrate ZAP into Gitlab.
Appsec case study: Attendance Radar
Defect Management Best Practices
Preparing for CRA
OWASP SAMM vs OWASP DSOMM
Introduction to OWASP DSOMM
Using ASVS with SAMM.
Software Security Requirements Explained: Why It Matters and How to Implement It Effectively
Mistakes to avoid in implementing OWASP SAMM
Stories from practical use of OWASP SAMM
How to implement ISO27001
Getting started with the Cyber Fundamentals (Cyfun) framework.
How to choose good metrics in AppSec
Introduction to the SSDLC
Implementing OWASP SAMM: A practical guide
What is FISMA and how to comply with it?
Security's Four Layers: SDLC to Information Security
Contingency planning with NIST 800-34
NIST 800-53: A practical guide.
Implementing NIST SSDF
OWASP SAMM a comprehensive introduction.
The EU Cyber Resilience Act or CRA