Timo Pagel -- DevSecOps Maturity Model

Timo Pagel has been in the IT industry for over fifteen years. After a system administrator and web developer career, he advises customers as a DevSecOps consultant and trainer. His focus is on security test automation for software and infrastructure and assessment of complex applications in the cloud. In his spare time, he teaches “Web and Application Security” at various universities. Timo joins us to talk about the OWASP DevSecOps Maturity Model or DSOMM. We explore maturity models, this specific one, how you can use it, and how to get started. We hope you enjoy this conversation with... After a career as a system administrator and web developer, he advises customers as a DevSecOps consultant and trainer.

The Application Security Podcast is brought to you by Security Journey.

About Security Journey
Timo Pagel has been in the IT industry for over 15 years.
→ Learn more about Security Journey

Connect with Timo Pagel:
→ OWASP DevSecOps Maturity Model (DSOMM)
→ OWASP SAMM

Mentioned in this episode:
→ OWASP DevSecOps Maturity Model (DSOMM)
→ OWASP SAMM
→ BSIMM
→ OWASP Application Security Verification Standard (ASVS)

Follow the Application Security Podcast:
➜ Home
➜ X
➜ LinkedIn
➜ YouTube
➜ Instagram
➜ Facebook

Chapters:
00:00 Meet Timo Pagel: DevSecOps Maturity Model
03:23 I'm curious now, what was it that this mentor/professor, what did
07:37 We think about DevSecOps maturity model, here's one way that I
08:45 Timo, what is your recommendation for how someone can use the
12:03 For your specific levels then, can you walk us through the
15:48 Yeah. Let me trace through one with you just because I
17:45 Yeah, no problem. So thinking about DSOM and how it works
25:48 Yeah. Makes sense. So let me give you a scenario here
29:25 That's awesome. Yeah. And I'm sure you're making that— that's for