Question: how many controls bsimm have?
Answer: Measure yourself with the BSIMM BSIMM9 includes five specific activities (out of 116) that are relevant to controlling the software security risk associated with third-party vendors.