What is BSIMM?

The Building Security In Maturity Model (BSIMM) is a framework for measuring and improving software security initiatives. It provides a way for organizations to benchmark their security practices against those of other firms and identify areas for improvement. BSIMM uses data from real-world software security programs to create a descriptive model, rather than a prescriptive one. It helps organizations understand where they stand in terms of software security maturity and provides guidance on how to evolve their programs based on observed industry practices.