Add a control for SDLC process

[funnelfiasco]

In discussing #302 in this week's meeting, we agreed that it's worth entertaining a proposal to add a control for:

SDLC/Continuous Improvement - related to Maintenance and Requirements above - Do we want to add criteria to advocate for projects to follow some type of an SDLC process?

It was noted in the meeting that various Level 3 controls already cover this implicitly.

[evankanderson]

Presumably, this criteria would look something like a level 3 control in the QA area that documents the software development lifecycle (SDLC) process for the project?