Cigital News
Software [In]security: vBSIMM Take Two (BSIMM for Vendors Revised)
Software [In]security: vBSIMM Take Two (BSIMM for Vendors Revised)
Gary McGraw and Sammy Migues introduce a revised, compact version of the BSIMM for vendors called vBSIMM, which can be thought of as a foundational security control for vendor management of third-party software providers.