It's helpful to have a measuring stick for any process improvement. The OWASP DevSecOps Maturity Model (DSOMM) provides opportunities to harden DevOps strategies and shows how these can be prioritized. With the DSOMM, you work with your DevOps team to assess the security state of your software factory/build pipelines. After evaluating, you plan to increase the security of various deficient areas. If you pay attention to news on the Internet, you know that the software supply chain has become a particular area of concentration for attackers. It acts as an input to your software construction process, making the deploy build systems prime targets. To protect the software factory, protect the build pipelines by ensuring they are resistant to the most popular attacks. See the Top 10 CI/CD Security Risks project for a detailed dive into the top ten risks. Conclusion The delivery of software has changed drastically in the past ten years.