Question: how many controls/activities does bsimm have in sdlc?
Answer: 1. Measure yourself with the BSIMM. BSIMM9 includes five specific activities (out of 116) that are relevant to controlling the software security risk associated with third-party vendors.