Secure Software Development Framework
The SSDF is NIST's framework, published as Special Publication 800-218, describing the secure development practices organizations should follow across the whole lifecycle. It groups practices into preparing the organization, protecting software, producing well-secured software, and responding to vulnerabilities. US government software suppliers must attest to following it, which has made it a common baseline across the industry.