provide dedicated section on security champions

Author: jgadsden

.github/workflows/ci.yaml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v1.9.1
+        uses: lycheeverse/lychee-action@v1.10.0
         with:
           # skip the jekyll files
           args: --verbose --no-progress --max-retries 5 --exclude-path './_includes/*.html' '**/*.md' '*.md'

.github/workflows/housekeeping.yaml

@@ -35,7 +35,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v1.9.1
+        uses: lycheeverse/lychee-action@v1.10.0
         with:
           # skip the jekyll files
           args:  --verbose --no-progress --max-retries 5 --exclude-path './_includes/*.html' '**/*.md' '*.md'

.github/workflows/pr.yaml

@@ -15,7 +15,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Link Checker
-        uses: lycheeverse/lychee-action@v1.9.1
+        uses: lycheeverse/lychee-action@v1.10.0
         with:
           # skip the jekyll files
           args: --verbose --no-progress --max-retries 5 --exclude-path './_includes/*.html' '**/*.md' '*.md'

.wordlist.txt

@@ -475,4 +475,5 @@ DPO
 CISO
 iteratively
 ai
-Serverless
+Serverless
+proscriptive

_data/draft.yaml

@@ -22,9 +22,6 @@ docs:
 - title: '2.5 OWASP Top 10'
   url: foundations/owasp_top_ten
 
-- title: '2.6 Security champions'
-  url: foundations/security_champions
-
 - title: '3. Requirements'
   url: requirements
 
@@ -274,16 +271,28 @@ docs:
 - title: '8. Culture building and Process maturing'
   url: culture_building_and_process_maturing
 
-- title: '8.1 Security Champions Playbook'
-  url: culture_building_and_process_maturing/security_champions_playbook
+- title: '8.1 Security Culture'
+  url: culture_building_and_process_maturing/security_culture
+
+- title: '8.2 Security Champions'
+  url: culture_building_and_process_maturing/security_champions
+
+- title: '8.2.1 Security champions program'
+  url: culture_building_and_process_maturing/security_champions/security_champions_program
+ 
+- title: '8.2.2 Security Champions Guide'
+  url: culture_building_and_process_maturing/security_champions/security_champions_guide
+
+- title: '8.2.3 Security Champions Playbook'
+  url: culture_building_and_process_maturing/security_champions/security_champions_playbook
 
-- title: '8.2 Software Assurance Maturity Model'
+- title: '8.3 Software Assurance Maturity Model'
   url: culture_building_and_process_maturing/software_assurance_maturity_model
 
-- title: '8.3 Application Security Verification Standard'
+- title: '8.4 Application Security Verification Standard'
   url: culture_building_and_process_maturing/asvs
 
-- title: '8.4 Mobile Application Security'
+- title: '8.5 Mobile Application Security'
   url: culture_building_and_process_maturing/mobile_application_security
 
 - title: '9. Operation'

_data/release.yaml

@@ -22,9 +22,6 @@ docs:
 - title: '2.5 OWASP Top 10'
   url: foundations/owasp_top_ten
 
-- title: '2.6 Security champions'
-  url: foundations/security_champions
-
 - title: '3. Requirements'
   url: requirements
 
@@ -274,16 +271,28 @@ docs:
 - title: '8. Culture building and Process maturing'
   url: culture_building_and_process_maturing
 
-- title: '8.1 Security Champions Playbook'
-  url: culture_building_and_process_maturing/security_champions_playbook
+- title: '8.1 Security Culture'
+  url: culture_building_and_process_maturing/security_culture
+
+- title: '8.2 Security Champions'
+  url: culture_building_and_process_maturing/security_champions
+
+- title: '8.2.1 Security champions program'
+  url: culture_building_and_process_maturing/security_champions/security_champions_program
+
+- title: '8.2.2 Security Champions Guide'
+  url: culture_building_and_process_maturing/security_champions/security_champions_guide
+
+- title: '8.2.3 Security Champions Playbook'
+  url: culture_building_and_process_maturing/security_champions/security_champions_playbook
 
-- title: '8.2 Software Assurance Maturity Model'
+- title: '8.3 Software Assurance Maturity Model'
   url: culture_building_and_process_maturing/software_assurance_maturity_model
 
-- title: '8.3 Application Security Verification Standard'
+- title: '8.4 Application Security Verification Standard'
   url: culture_building_and_process_maturing/asvs
 
-- title: '8.4 Mobile Application Security'
+- title: '8.5 Mobile Application Security'
   url: culture_building_and_process_maturing/mobile_application_security
 
 - title: '9. Operation'

draft/02-toc.md

@@ -22,7 +22,6 @@ permalink:
 2.3 [Principles of security](#principles-of-security)  
 2.4 [Principles of cryptography](#principles-of-cryptography)  
 2.5 [OWASP Top 10](#owasp-top-ten)  
-2.6 [Security champions](#security-champions)  
 
 3 **[Requirements](#requirements)**  
 3.1 [Requirements in practice](#requirements-in-practice)  
@@ -112,10 +111,14 @@ permalink:
 7.9 [OWASP Snakes and Ladders](#owasp-snakes-and-ladders)  
 
 8 **[Culture building and Process maturing](#culture-building-and-process-maturing)**  
-8.1 [Security Champions Playbook](#security-champions-playbook)  
-8.2 [Software Assurance Maturity Model](#software-assurance-maturity-model)  
-8.3 [Application Security Verification Standard](#application-security-verification-standard)  
-8.4 [Mobile Application Security](#mobile-application-security)  
+8.1 [Security Culture](#security-culture)  
+8.2 [Security Champions](#security-champions)  
+8.2.1 [Security champions program](#security-champions-program)  
+8.2.2 [Security Champions Guide](#security-champions-guide)  
+8.2.3 [Security Champions Playbook](#security-champions-playbook)  
+8.3 [Software Assurance Maturity Model](#software-assurance-maturity-model)  
+8.4 [Application Security Verification Standard](#application-security-verification-standard)  
+8.5 [Mobile Application Security](#mobile-application-security)  
 
 9 **[Operation](#operation)**  
 9.1 [ModSecurity Core Rule Set](#modSecurity-core-rule-set)  

draft/04-foundations/00-toc.md

@@ -26,7 +26,6 @@ Sections:
 2.3 [Principles of security](#principles-of-security)  
 2.4 [Principles of cryptography](#principles-of-cryptography)  
 2.5 [OWASP Top 10](#owasp-top-ten)  
-2.6 [Security champions](#security-champions)  
 
 ----
 

draft/04-foundations/toc.md

@@ -27,7 +27,6 @@ Sections:
 2.3 [Principles of security](03-security-principles.md)  
 2.4 [Principles of cryptography](04-crypto-principles.md)  
 2.5 [OWASP Top 10](05-top-ten.md)  
-2.6 [Security champions](06-security-champions.md)  
 
 ----
 

…ture-building-process-maturing/00-toc.md draft/10-culture-process/00-toc.mddraft/10-culture-building-process-maturing/00-toc.md renamed to draft/10-culture-process/00-toc.md draft/10-culture-building-process-maturing/00-toc.md renamed to draft/10-culture-process/00-toc.md

@@ -26,16 +26,20 @@ The maturity of security processes and culture is wide ranging, with indicators
 
 Sections:
 
-8.1 [Security Champions Playbook](#security-champions-playbook)  
-8.2 [Software Assurance Maturity Model](#software-assurance-maturity-model)  
-8.3 [Application Security Verification Standard](#application-security-verification-standard)  
-8.4 [Mobile Application Security](#mobile-application-security)  
+8.1 [Security Culture](#security-culture)  
+8.2 [Security Champions](#security-champions)  
+8.2.1 [Security champions program](#security-champions-program)  
+8.2.2 [Security Champions Guide](#security-champions-guide)  
+8.2.3 [Security Champions Playbook](#security-champions-playbook)  
+8.3 [Software Assurance Maturity Model](#software-assurance-maturity-model)  
+8.4 [Application Security Verification Standard](#application-security-verification-standard)  
+8.5 [Mobile Application Security](#mobile-application-security)  
 
 ----
 
 The OWASP Developer Guide is a community effort; if there is something that needs changing then [submit an issue][issue1000].
 
-[issue1000]: https://github.com/OWASP/www-project-developer-guide/issues/new?labels=enhancement&template=request.md&title=Update:%2010-culture-building-process-maturing/00-toc
+[issue1000]: https://github.com/OWASP/www-project-developer-guide/issues/new?labels=enhancement&template=request.md&title=Update:%2010-culture-process/00-toc
 [sammg]: https://owaspsamm.org/model/governance/
 [sammgeg]: https://owaspsamm.org/model/governance/education-and-guidance/
 [sammgegoc]: https://owaspsamm.org/model/governance/education-and-guidance/stream-b/