I recently came across the Synopsys Building Security In Maturity Model (BSIMM) report and found myself enthusiastically agreeing with a number of points that it makes.