The first step in improving the security level is to assess the current degree of maturity. This highlights areas in which you are already strong and those where there is still room for improvement. SEC Consult utilizes established standards like OWASP SAMM for maturity level assessments.
A gap analysis compares the current security level with the desired target level. Based on this gap analysis, the next steps required for improvement can be planned.