Fork me on GitHub

Identification of the degree of the implementation

DevSecOps Maturity Model
DimensionSub-DimensionLevel 1: Basic understanding of security practicesLevel 2: Understanding of security practicesLevel 3: High understanding of security practicesLevel 4: Advanced understanding of security practives at scale
Build and DeploymentBuild
Build and DeploymentDeployment
Culture and Org.Education and Guidance
Culture and Org.Culture and Org.
Culture and Org.Process
      Information GatheringMonitoring
      Information GatheringLogging
      InfrastructureInfrastructure Hardening
      Test and VerificationDynamic depth for applications
      Test and VerificationStatic depth for applications
      Test and VerificationTest-Intensity
      Test and VerificationConsolidation
      Test and VerificationApplication tests
        Test and VerificationDynamic depth for infrastructure
        Test and VerificationStatic depth for infrastructure