https://www.pivotpointsecurity.com/what-is-the-nist-sp-800-218-draft-secure-software-development-framework-and-why-should-we-as-an-org-selling-software-to-the-usg-care/