LOGIN | REGISTER NOW | SUBSCRIBE
 
print Printable version 
Most Read Latest News Blog Resources
Does Windows cost Microsoft opportunities?
Microsoft's decision to focus .NET on Windows is stifling innovation due to the specter of...

Mono brings .NET to Android
At Microsoft MIX, Mono will unveil the ability to port .NET applications to the Android op...

OSBC focus turns to best practices for open-source adoption
Businesses are no longer asking why they should adopt, but how do they use open source leg...

Digg!  Digg
Reddit  Reddit
Slashdot  Slashdot
Share on facebook  Facebook
Share on Twitter  Twitter

Cigital, Fortify tailor security model for Europe


By Jeff Feinman
November 12, 2009 — 
Cigital and Fortify Software have created BSIMM Europe (Building Security In Maturity Model for Europe), an extension of the security benchmark model that the two companies created in March of this year.

Executives of the two companies said that BSIMM Europe, announced today, describes a set of security actions practiced by nine European firms. Those companies include Nokia, asset management company Standard Life, messaging services provider SWIFT, Telecom Italia and Thomson Reuters. The four other companies weren’t named.

“Software security is a worldwide phenomenon,” said Gary McGraw, CTO of Cigital. “Using BSIMM, an organization can determine where its software security initiative stands, figure out how to evolve its initiative strategically, or even get a brand new initiative off the ground. BSIMM is a tool for identifying realistic business goals and implementing those technical software security activities that make the most sense for an organization.”

For the original BSIMM study, representatives from Cigital and Fortify did interviews with and collected data from nine companies, including Adobe, EMC, Google and Microsoft. The model is divided into 12 practices, falling under the categories of governance, intelligence, software security development life-cycle touch points, and deployment. There are 110 BSIMM security actions in total, according to Cigital.


Related Search Term(s): Cigital, Fortify, security


Share this link: http://www.sdtimes.com/link/33905
 

Add comment


Name*
Email*  
Country     


  • Comment
  • Preview
Loading



 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 
Download Current Issue
ISSUE 3/15/2010 PDF

Need Back Issues?
DOWNLOAD HERE

Receive the print Edition?


 
blogs tab
Google Code turns 5
Google Code Turns 5, and adds a Paxos Algorithm to make the system more stable and reliable.
03/17/2010 11:16 AM EST

Test your Visual Studio 2010 know-how
Microsoft is offering free beta certification exams for Visual Studio 2010.
03/17/2010 11:08 AM EST

Microsoft lifts the hood on IE9
Microsoft is previewing IE9.
03/16/2010 01:10 PM EST

 

Events calendar tab
EclipseCon
3/22/2010 to 3/25/2010
Santa Clara, Calif.
The Eclipse Foundation

DevConnections
4/12/2010 to 4/14/2010
Las Vegas
Penton Media

MySQL Conf. and Expo
4/12/2010 to 4/15/2010
Santa Clara, Calif.
O'Reilly Media

High Performance Computing Linux Financial Markets
4/19/2010
New York City
Flagg Management

Informix User Conf.
4/25/2010 to 4/28/2010
Overland Park, Kans.
IIUG