» Microsoft Security Development Lifecycle (SDL) at http://msdn.microsoft.com/en-us/security/cc448177.aspx
» The Microsoft SDL and the CWE/SANS Top 25 at http://blogs.msdn.com/sdl/archive/2009/01/27/sdl-and-thecwe-sans-top-25.aspx
» New York State "Application Security Procurement Language" at http://www.sans.org/appseccontract
» "Enhancing the Development Life Cycle to Produce Secure Software" at https://www.thedacs.com/techs/