Security Capability Map

Eight domains, assessed against how each is actually assessed, designed, implemented, and verified in practice.