There are a few maturity models out there that one could apply to threat modelling however none that fit the mold. i am in search for a maturity model/framework to leverage as a yard stick to measure progress in threat modelling practice and threat modelling program.
I wanted to seek expertise, advice and guidance from the community as to what folks are using or have used as a maturity framework that seem to work.