The SSF is promoting the creation of ASAPs by organizations that produce
application software. According to the SSF, these ASAPs should embrace the
following set of broad principles to improve the security of software:
u There must be executive level commitment to secure software.