Building Security In Maturity Model (BSIMM)

The Building Security In Maturity Model (BSIMM) is a good framework to follow for secure software development.  Those who are familiar with the various Capability Maturity Models may be a bit surprised: this model doesn't come from the same institution and doesn't follow the same pattern.  It's more of a breakdown framework, with a checklist of points to address, with some assignment to limited maturity levels.