Several blogs I follow have mentioned that SafeCode has released there Fundamental Practices for Secure Software Development guide. I had thought that this was released a while ago actually and the document is dated October 8th. Oh well, it is a good reference regardless.
The mission of SafeCode.org is "SAFECode is dedicated to increasing trust in information and communications technology products and services through the advancement of proven software assurance methods." They have a number of different organizations contributing to this effort, like Microsoft, EMC, Symantic and others.
I got to it by reading this article Secure Software Development Practices 'not rocket science'.