From 44d9fa43c1c22134f2c4c04481d3c262ce895f55 Mon Sep 17 00:00:00 2001 From: Aram Hovsepyan Date: Tue, 10 Dec 2024 09:32:05 +0100 Subject: [PATCH] #303 fix --- content/en/resources/mappings.md | 23 ++++++++++++++++------- 1 file changed, 16 insertions(+), 7 deletions(-) diff --git a/content/en/resources/mappings.md b/content/en/resources/mappings.md index 83c6bcce..9397d9d0 100644 --- a/content/en/resources/mappings.md +++ b/content/en/resources/mappings.md @@ -8,16 +8,25 @@ author = "" weight = 3 +++ -## OpenCRE +## Direct Mappings -The SAMM model pages on the website have links to OpenCRE in every stream. By linking SAMM to {{< external-link "https://www.opencre.org/" "OpenCRE">}}, we’ve made it easier for our users to find relevant and useful resources with every stream, as well as to see how SAMM aligns with other security standards such as NIST SSDF, ISO27K, PCI-DSS, OWASP ASVS, and NIST 800-53. - -Learn more in the [OWASP SAMM now connects to OpenCRE](/blog/2023/09/20/owasp-samm-now-connects-to-opencre/) blog post. - -## SAMM-NIST SSDF +### Mapping between NIST SSDF and SAMM In collaboration with NIST, we created mappings based on the {{< external-link "https://csrc.nist.gov/projects/olir" "National Online Informative Reference (OLIR) Program">}}. An Informative Reference shows the relationships between the Reference Document elements (NIST SSDF Tasks) and a Focal Document element (OWASP SAMM Streams). This effectively helps users understand the characterization of the nature of each relationship. You can find the mapping in {{< external-link "https://docs.google.com/spreadsheets/d/1AsIbEHK_csuYkUx8tSZvHBFlywYZ5wBejfJHi8AvnZM" "this spreadsheet">}}. Note that we created the NIST SSDF to SAMM mapping. The reverse mapping is automatically generated and in the current version it is a crosswalk mapping. -More on this in the [Tackling App Security with SAMM-NIST SSDF Mapping](/blog/2023/02/06/samm-ssdf-mapping/) blog post. \ No newline at end of file +More on this in the [Tackling App Security with SAMM-NIST SSDF Mapping](/blog/2023/02/06/samm-ssdf-mapping/) blog post. + +### Mapping between BSIMM 14 and SAMM +The SAMM core team has created mappings between OWASP SAMM and BSIMM 14 standards. You can find the mapping in {{< external-link "https://docs.google.com/spreadsheets/d/1WiQcn7wFzSM8xg78SqkIM1QF2C48jBCYi_N_6kOq174" "this spreadsheet">}}. + +### Mapping between IEC-62443-4-1 and SAMM +The SAMM core team has created mappings between OWASP SAMM and BSIMM 14 standards. You can find the mapping in {{< external-link "https://docs.google.com/spreadsheets/d/1WiQcn7wFzSM8xg78SqkIM1QF2C48jBCYi_N_6kOq174" "this spreadsheet">}}. + + +## Mappings with OpenCRE + +The SAMM model pages on the website have links to OpenCRE in every stream. By linking SAMM to {{< external-link "https://www.opencre.org/" "OpenCRE">}}, we’ve made it easier for our users to find relevant and useful resources with every stream, as well as to see how SAMM aligns with other security standards such as NIST SSDF, ISO27K, PCI-DSS, OWASP ASVS, and NIST 800-53. + +Learn more in the [OWASP SAMM now connects to OpenCRE](/blog/2023/09/20/owasp-samm-now-connects-to-opencre/) blog post.