Assurance and Information Security Measurement (Draft Version 2.0).
This document defines an approach for quantifying and assessing the
degree to which software assurance techniques have been integrated
into SDLC processes, and for evaluating the effectiveness of such