SAFECode just released a new paper called Fundamental Practices for Secure Software Development. This is a collaboration of different people from different companies (SAP, EMC, Symantec, Juniper, Nokia and Microsoft).

As you probably know, SAFECode is a Forum to share good practices around development of secure software. It is about learning from each other but about sharing knowledge with the outside world as well.

Roger