The Software Assurance Maturity Model (SAMM) is the OWASP framework for evaluating and improving the maturity of security practices in the software development lifecycle. It defines business functions (Governance, Design, Implementation, Verification, Operations) and progressive maturity levels to build measurable application security programs adaptable to the organizational context.