OpenSAMM and BSIMM Domains

Open SAMM- Governance

Centered on the processes and activities related to how an organization manages overall software development activities.

BSIMM- Governance

Includes those practices that help organize, manage, and measure a software security initiative.

OpenSAMM - Construction

Concerns the processes and activities related to how an organization defines goals and creates software within development projects.

BSIMM - Intelligence

Includes those practices that result in collections of corporate knowledge used in carrying out software security activities throughout the organization.

OpenSAMM - Verification

Focused on the processes and activities related to how an organization checks and tests artifacts produced throughout software development.

BSIM- SSDL Touchpoints

Includes those practices associated with the analysis and assurance of particular software development artifacts and processes.

OpenSAMM- Deployment

Entails the processes and activities related to how an organization manages the release of software that has been created.

BSIMM - Deployement

Includes those practices that interface with traditional network security and software maintenance organizations.