Which of the following is the description for the Level 1 OWASP threat assessment maturity practice?
a. Identify and understand the high level threats to the organization and
individual projects
b. Map compensating controls to each threat against the internal and thirdparty software
c. Increase the accuracy of the threat assessment and improve granularity of
per-project understanding.
