White paper arguing that process flow diagram-based threat modeling is better than data flow diagram-based threat modeling.
An overview of the DevSecOps approach to Agile application development, implementing security controls throughout the CDLC.
Securing your critical assets: A comparison of NIST CSF vs. ISO 27001.