1. Identify the four recognized business functions and each security practice of

OpenSAMM.

2. Identify and describe the four maturity levels for security practices in SAMM.

3. What are some activities an organization could perform for the security practice

of Threat Assessment?

4. What are the three security verification levels of the OWASP Application

Security Verification Standard (ASVS) Project?

5. According to the OWASP Developer Guide, what are some guidelines for

handling credit cards on websites?

6. When should the testing process be introduced in the Software Development

Lifecycle (SDLC)?

7. According the OWASP Code Review Guide, why is error handling important?