“We began by looking through what we identified as commonly used or widely recognized literature, including best practice literature, NIST publications, internationally recognized standards, OWASP, of course, the Common Weakness Enumerators that we reference throughout the framework.”

Transcript evidence from Tommy Ross — The BSA Framework for Secure Software.