Microsoft and ISec Partners just published a joint whitepaper about Microsoft SDL and the return of Investment to help IT architects and business architects to :
· Understand and communicate the benefits of a structured approach to software security.
· Develop and use metrics for ROI to guide process improvement.
· Get meaningful results from a new program or optimize existing efforts on a limited budget.
You can read more information here.