Harrisburg University Encouraging Security Architecture Development Questions

There are two separate questions 

Q.1)

There are several “encouraging security architecture developments” like below :   

1) The Open Group has created an Enterprise Security Architect certification. One of their first certified architects has subsequently created a few enterprise security reference architectures.   

2) The SANS Institute hosted three “What Works in Security Architecture” Summits.   

3) The IEEE initiated a Center for Secure Design. The Center published a “Top 10 Design Flaws” booklet.  

4) Adam Shostack published Threat Modeling: Designing for Security, and renowned threat modeler, John Steven, has told me that he’s working on his threat modeling book.   

5) Anurag Agrawal of MyAppSecurity has been capturing well-known attack surfaces and their technical mitigations within his commercial threat modeling tool, “Threat Modeler.”

Choose 2 or 3 three items from the list above and provide an update to their development status.  Make sure you provide some background on your selection and then provide the update of the development.

Q.2)

What does a peer review process look like? When does an assessment require peer review? Who should perform the peer review?