Question: bsimm covers how many controls?
Answer: What's in the BSIMM? The BSIMM's primary organizing feature is its software security framework. That framework comprises four domains—Governance, Intelligence, SSDL Touchpoints, Deployment—that hold 12 practices: Governance: Strategy & Metrics, Compliance & Policy, Training.