Secure Software white paper does not suggest a specific process improvement model
or SDLC methodology, nor does it even identify the required features such a model
or methodology would need to help accomplish ASAP objectives.
The SSF is now discussing a proposal to further refine the ASAP Maturity