BSIMM (Building Security In Maturity Model) was launched in 2009 by Cigital CTO Gary McGraw. The goal from the beginning has been to help software developers use real-world data and analysis designed to build security into their products from the start, rather than try to bolt it on later. The average maturity of the membership is declining, said McGraw, who added that the average age of the participating companies is lower. The number of verticals has also expanded, he said, into insurance, health care and IoT (Internet of Things)”]
Source: https://www.csoonline.com/article/3128918/bsimm7-older-then-younger-now.html