Software security maturity is often diluted down to the OWASP Top 10, leaving organizations with a simplistic view of their real risk. If your organization plans to formalize an application security program, or just don't know where to start, come to this talk to find out the pitfalls and opportunities of using Software Assurance Maturity Model (SAMM) to guide a successful AppSec program.