From d8edd284e30e432d5c41ecd351e7faffe01e0c6f Mon Sep 17 00:00:00 2001 From: Richard Tweed Date: Wed, 24 Jun 2026 17:02:29 +0100 Subject: [PATCH] Explain why this project exists --- README.md | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/README.md b/README.md index a87de57..82511a0 100644 --- a/README.md +++ b/README.md @@ -2,6 +2,18 @@ [![License: CC BY-SA 4.0](https://img.shields.io/badge/License-CC%20BY--SA%204.0-blue.svg)](https://creativecommons.org/licenses/by-sa/4.0/) +## Why? + +Many organisations have a need for initial security training, and an +[LMS](https://en.wikipedia.org/wiki/Learning_management_system) that accepts +SCORM. This means that they can show their auditor(s) for SOC2 and ISO27001 +that they're providing relevant training for secure coding practices, and now +AI agents. +This course is an attempt to do this publicly so multiple organisations can +collaborate at making this training useful, rather than just toil for compliance. + +## What? + A SCORM 1.2 e-learning course on secure code development, interleaving the **OWASP Top 10:2025** (classic application security) with the **OWASP Top 10 for Agentic Applications 2026** (AI-agent security). It is organised into seven