This document outlines the security-related process improvements we have put in place at Microsoft.

http://msdn.microsoft.com/security/sdl