have been made to define a process capability maturity model (CMM) that
includes security activities and checkpoints to increase the likelihood that
secure software or systems will be engineered under those processes. The most
noteworthy examples of security-enhanced CMMs are—