OWASP Top Ten: The "Top Ten", first published in 2003, is regularly updated.[6] It aims to raise awareness about application security by identifying some of the most critical risks facing organizations.[7][8][9] Many standards, books, tools, and organizations reference the Top 10 project, including MITRE, PCI DSS,[10] the Defense Information Systems Agency (DISA-STIG), the United States Federal Trade Commission (FTC),[11] and many[quantify] more. OWASP Software Assurance Maturity Model: The Software Assurance Maturity Model (SAMM) project is committed to building a usable framework to help organizations formulate and implement a strategy for application security that is tailored to the specific business risks facing the organization. OWASP Development Guide: The Development Guide provides practical guidance and includes J2EE, ASP.NET, and PHP code samples.