informIT: nine things everybody does

[gem at cigital.com (Gary McGraw)]

hi sc-l,

informIT just published my February column, once again co-authored by Brian Chess and Sammy Migues.  This is the third 
in the series of articles about the maturity model.  We have decided to call it the Building Security In Maturity Model 
(BSIMM).

The latest article covers 13 of the 110 activities in the model.  Of those 14, all nine of the organizations in our 
study did nine.  The other 4 are done by most organizations (but not all nine), and were added to ensure coverage of 
the Software Security Framework.

http://www.informit.com/articles/article.aspx?p=1326511

We will release the complete BSIMM model soon under a creative commons license.  Stay tuned for that!

gem

company www.cigital.com
podcast www.cigital.com/silverbullet
podcast www.cigital.com/realitycheck
blog www.cigital.com/justiceleague
book www.swsec.com