“That's why a maturity model like OWASP SAM is good because it keeps track of everything, the state of everything, and then you try to move the lever somewhere a little bit.”

Transcript evidence from Dag Flachet -- Kaizen for your Appsec Program.