The Building Security In Maturity Model (BSIMM, pronounced “bee simm”) is a study of existing software security initiatives. By quantifying the practices of many different organizations, we can describe the common ground shared by many as well as the variation that makes each unique. We know reports can be boring which is why we picked out some key facts so you can jump right in to the data. https://www.bsimm.com

1. Number of software security
activities measured by the BSIMM
BSIMM
0
112
1:75
Numbersby
the
Number of years
BSIMM has been
around (started
in 2008)
Average number of
people in a satellite
13.9
Average
number
of people
in an SSG
Average
ratio of SSG
members to
developers
Percent of BSIMM
participants that
incorporate BSIMM’s
12 core activities
into their SSI 64
100Percent of BSIMM participants that have an SSG and
agree that it’s key to the success of their initiative
10
Average point increase
seen in the raw
scores of the
26 firms
re-measured
131
100
Percent of the 10
lowest-scoring
firms that have
a satellite
Percent of the 10
highest-scoring
firms that have
a satellite
www.BSIMM.com
Total number
of firms studied
by BSIMM.
Copyright © 2015 Cigital, Inc
✔
1047