NIST SP 800-218: Secure Software Development Framework (SSDF)

The four practice groups a vendor evidences for credential B: Prepare the Organization, Protect the Software, Produce Well-Secured Software, Respond to Vulnerabilities.