This document outlines the security-related process improvements we have put in place at Microsoft.We've been working on defining this for about two years now, and I'm really excited that we've now made it public :)

http://msdn.microsoft.com/security/sdl