The background for your assignment is that you are on the security team at your organization. You need to inform the development team at your organization of the OWASP Top 10 and explain why these security risks need to be accounted for in the web application development process. Consider this to be a form of security awareness training.
OWASP updated the Top 10 in 2021 – here is the chart they have on their site showing the diffierences:
You will pick one OWASP Top 10 security risk from the 2021 list – e.g. A01 or A09, etc., and create presentation materials for various stakeholders in the development process. Stakeholders include developers, testers, technical managers, and non-technical managers. Your goal is to help these development process stakeholders understand how these risks affect web security, how they should prevent them, and what best practices they should employ to minimize all risks.
Your presentation materials should include an example of an incident involving the security risk that made national news. It is appropriate to include supporting material from the Common Weakness Enumeration (CWE) site.
As part of your presentation submission you will need to explain the details of your organization in terms of what kind of industry it is in and what sort of product or service it provides, e.g., small family-owned grocery store with online shopping for delivery or pickup functionality. Rememeber that you are role-playing in this assignment.
