OWASP SCVS Standard

Official OWASP Software Component Verification Standard (SCVS) account. Measure and improve software supply chain assurance.

[OWASP® Foundation @owasp]

OWASP Members change the world. Your membership helps shape the organization and drives our projects and community. If you are not a member or are due for renewal within 60 days, please join or renew today and get 10-25% off!

https://t.co/87vap2mFAl > Memberships > Apply

[TC54 @EcmaTC54]

Earlier today, Technical Committee 54 was officially convened within @EcmaIntl as a royalty-free task group. #TC54 is chartered with standardizing #OWASP @CycloneDX_Spec, standards and algorithms that advance transparency and sharing of this information across the supply chain.

[Andrew van der Stock, OWASP ED @owasped]

We published OWASP's response to the ONCD RFI on Open Source Security, mainly to do with memory-safe languages.

More details: https://t.co/e9howUWpw8

A huge thank you to all the OWASP Leaders who contributed.

For media, please contact me on [email protected]

[OWASP SCVS Standard @OWASP_SCVS]

We’re proud to announce the immediate availability of the SCVS BOM Maturity Model. The model allows organizations to evaluate #SBOM quality and mature and optimize their investment in software and system transparency.

https://t.co/B9sx3QddLW

#OWASP

[OWASP SCVS Standard @OWASP_SCVS]

We’re proud to announce the immediate availability of the SCVS BOM Maturity Model. The model allows organizations to evaluate #SBOM quality and mature and optimize their investment in software and system transparency.

https://t.co/B9sx3QddLW

#OWASP

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

@owasp Foundation Joins Ecma International to Drive Software Transparency and Standardization of OWASP #CycloneDX.

Press release: https://t.co/roJRePF56f

Blog post: https://t.co/Ca36juv43C

#SBOM #SoftwareTransparency #SaaSBOM #HBOM #CBOM #EO14028

[OWASP SCVS Standard @OWASP_SCVS]

Check out this article by Chris Hughes, then head over to https://t.co/2kZjK8sD51 to read the standard and see how SCVS can help your organization measure and improve software supply chain assurance.

#OWASP #SBOM #SoftwareSupplyChain

[Clint Gibler @clintgibler]

🗒️ @owasp Software Component Verification Standard (SCVS)

Overview by Chris Hughes on the 3 levels of maturity across 6 control categories

* Inventory
* SBOM
* Build Environment
* Package Management
* Component Analysis
* Pedigree and Provenance

https://t.co/Caz7H0Vdwj

[Clint Gibler @clintgibler]

🗒️ @owasp Software Component Verification Standard (SCVS)

Overview by Chris Hughes on the 3 levels of maturity across 6 control categories

* Inventory
* SBOM
* Build Environment
* Package Management
* Component Analysis
* Pedigree and Provenance

https://t.co/Caz7H0Vdwj

[OWASP SCVS Standard @OWASP_SCVS]

We're happy to announce that SCVS now has a dedicated website where project information can be found, the standard can be read, and in the near future the BOM Maturity Model can be explored.

https://t.co/2kZjK8sD51

#OWASP #SBOM #SoftwareSupplyChain

[OWASP SCVS Standard @OWASP_SCVS]

Reminder: Our next project meeting is on:

July 21 at 14:00 UTC (9:00 CDT / 10:00 EDT).

Meeting ICS:
https://t.co/ocxHwuCg9s…

Agenda:
- Continue work on BOM maturity model

To Join:
in: https://t.co/6GgKCwLkzR

#SBOM #SoftwareSupplyChain #OWASP

[Rob Bos @RobBos81]

The recording of my session at NDC Security is available!

Learn about possible attacks against you supply chain and how to prevent against them:

[OWASP SCVS Standard @OWASP_SCVS]

@harshbothra_ OWASP Software Component Verification Standard which allows organizations to measure and improve software supply chain assurance.

https://t.co/M86qLNBrGO

[R M ⚡🇺🇦 @kingthorin_rm]

@Jhaddix @owasp projects:
@zaproxy
@owasp_wstg
@owasp_juiceshop
@OWASPTop10
@OWASP_SKF
@OWASPControls
@OwaspSAMM
@CoreRuleSet
@OWASP_MSTG
@OWASP_ASVS
@DependencyTrack
@OWASP_SCVS
@Owasp_DevSlop
@defectdojo
@SecureCodeDojo
@OWASPCornucopia
@appsensor
@OWASPiGoat

#AppSec

[OWASP® Foundation @owasp]

ALL OWASP MEMBERS

DID YOU VOTE YET? If not, you still have time to vote in the OWASP 2021 Global Board of Directors Election.

PLEASE CHECK YOUR EMAIL FOR YOUR BALLOT.

YOUR VOTE COUNTS!

VOTE NOW!

[OWASP® Foundation @owasp]

Join #owasp as we celebrate our 20th Anniversary on Sept. 24! Register now for this 24-hour live, virtual, global FREE event. Agenda will include 5 keynotes, 4 tracks with speakers from around the world, and more! https://t.co/9jQ9h5SO6M

[OWASP SCVS Standard @OWASP_SCVS]

Mark your calendars! Come celebrate the 20th anniversary of @OWASP with a tremendous lineup of speakers and industry experts. In relation to SCVS, #SBOM will be presented by @stevespringett and @coderpatros from @CycloneDX_Spec, a flagship OWASP Standards project.

[OWASP SCVS Standard @OWASP_SCVS]

SBOM is a foundational, level 1 behavior in #OWASP SCVS.

The recommendations from NTIA aligns to the requirements in SCVS.

[CycloneDX SBOM Spec (OWASP) @CycloneDX_Spec]

The U.S. NTIA published their recommendations on the minimum elements of an #SBOM.

https://t.co/coh8EHNhSZ

CycloneDX, an #OWASP SBOM standard, has capabilities that far exceed the minimum, allowing organizations to adopt and mature their #cybersecurity use cases over time.

[OWASP SAMM @OwaspSAMM]

Propose your topic for our #OWASP SAMM User Day - May 27th, 2021 - details here: https://t.co/EljxSHOmsz

[OWASP SCVS Standard @OWASP_SCVS]

The OWASP Software Component Verification Standard project is conducting the 2021 State of the SBOM Survey. Community participation is valuable as we assess the current and future role that Software Bill of Materials play in the industry.

https://t.co/Ty0FQYuxIB

#SBOM #OWASP

[OWASP SCVS Standard @OWASP_SCVS]

Detecting a #SolarWinds style attack is difficult. But you can dramatically reduce the likelihood of creating similar incidents by adopting #OWASP SCVS. It includes practical advice to measure and improve your #SoftwareSupplyChain.

https://t.co/o7oAUQciQY