ASPM is the holistic process of evaluating, managing, and enhancing the security stance of an organization's custom applications.