Culture and Organization -> Education and Guidance: Conduction of collaborative team security checks
Risk and Opportunity
Risk: Development teams limited insight over security practices.
Opportunity: Mutual security testing the security of other teams project enhances security awareness and knowledge.
Usefulness and Requirements of this Activity
Required knowledge: High (two disciplines)
Required time: High
Required resources (systems): Low
OWASP SAMM VERSION 2
- Mutual security testing is not explicitly required in ISO 27001 may be