Skip to content

Category Archives: Maturity

BSIMM: A Descriptive Model of Software Security

Gary McGraw discusses prescriptive vs. descriptive models, and why/how BSIMM helps model the reality of software security initiatives in our industry.

Posted 28 January 2010 † mikeware § Build Security In ‡ Comments (0) °

Building Security In Maturity Model (BSIMM)

A lot has been said about what companies *should do* to build secure software. Ever wonder what companies *really do*? Now you can — the Building Security In Maturity Model (BSIMM) recently went public.

Posted 11 March 2009 † mikeware § Build Security In ‡ Comments (0) ° Tagged: , ,