Fortify, Cigital Offer Security Benchmarks
New study provides real-world data on leading software security initiatives
March 10, 2009
![Network Computing logo Network Computing logo](https://eu-images.contentstack.com/v3/assets/bltde8121fc52c5c8f3/blt3f3d0318f746b1c2/65a530e4187606040a1d8b8c/placeholder.png?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
LONDON -- Fortify Software, the market leader in Software Security Assurance solutions, and Cigital, the largest consulting firm specializing in software security, announced today the release of the Building Security In Maturity Model (BSIMM),” the industry’s first-ever set of benchmarks for developing and growing an enterprise-wide software security program.
Based on in-depth interviews with leading enterprises such as Adobe, EMC, Google, Microsoft, QUALCOMM, Wells Fargo, and Depository Trust & Clearing Corporation (DTCC), the BSIMM pulls together a set of activities practiced by nine of the 25 most successful software security initiatives in the world. Unlike some industry standards, BSIMM is a structured set of practices based on real-world data rather than philosophy and ideas. BSIMM provides insight on what successful organizations actually do to build security into their software and mitigate the business risk associated with insecure applications.
“Microsoft’s Security Development Lifecycle (SDL) was one of the first real enterprise software security methodologies, and we are always eager to share our ideas and best practices with the industry,” said Steve Lipner of Microsoft. “BSIMM provides a public ‘yardstick’ for measuring the progress of any organization’s own software assurance program.”
Fortify Software Inc.
You May Also Like
Maximizing cloud potential: Building and operating an effective Cloud Center of Excellence (CCoE)
September 10, 2024Radical Automation of ITSM
September 19, 2024Maximizing Manufacturing Efficiency with Real-Time Production Monitoring
September 25, 2024