Based on discussions with customers and our own internal reviews, it was clear that we needed to create a frame work that would support the kind of innovation, state-of-the-art process es, and cultural shifts necessary to make a fundamental advance in the security of our software products.