通过记录从实施这些实践中获得的关键经验教训，补充了CII之前对项目安全最佳实践的研究。由NIST赞助。

Complements previous CII research into best practices for project security by documenting key lessons learned from implementing these practices. Sponsored by NIST.