“It's meant to be a big requirement database so you can go through a forking process and build your own standard.”

Transcript evidence from Jim Manico and Katy Anton -- The Future of the OWASP Proactive Controls.