The SSDF framework has been divided into four major practice groups. It is precisely done to divide tasks in specifically, so that they can be better managed. These practices groups include:
• Prepare the Organization (PO)
• Protect the Software (PS)
• Produce Well Secured Software (PW)
• Respond to Vulnerabilities (RV)