BSIMM is a compilation of real-world data and analysis designed to help software developers build security into their products from the start. It was less than two years ago, in September 2009, when three leaders from the security firms Cigital and Fortify went public with a set of best practices culled from studying nine software security initiatives. In August, they will roll out a new version of the model, which will include data from 60 initiatives, according to Gary McGraw, CTO of Cigital.”]
Source: https://www.csoonline.com/article/2128694/secure-coding-news-flash–bsimm3-coming-in-august.html