dimension [SEI]. SDLC maturity is not necessarily measurable in code. Levels might
include:
1) No security awareness; or, awareness with little or no prioritization
2) Basic defenses against obvious attacks; grep analysis