Software Assurance Maturity Model (SAMM) - OWASP Foundation

? Guidance related to security activities must be prescriptive - All the steps in building and assessing an assurance program should be simple, well-defined, ...