The final version of NIST SSDF 1.1 (Secure Software Development Framework) was issued on March 22nd. In September 2021, a draft version of the framework was published. Many of the differences are centered around the various examples provided rather than high-level practices and tasks.When deciding which practices to implement, NIST recommends balancing risk against cost, feasibility, and applicability. To ensure software security, automation of as many checks and processes as possible is a key feature to consider.