sf2framework.com

The Software Factory Security Framework (SF2) is a public framework that helps security leaders scale security capabilities while aligning with business goals. It offers a strategic two-axis positioning model, an investment portfolio approach, and contextual modifiers to adapt security programs for organizations of any size.