It needs lot of restructuring. Can you do the following:

1. Send first 3 chapters for proof reading. There are many English language issues which need to be fixed by professional proof readers.
2. For best practices, there are many practices which are not clear and not measurable. You need to revise all practices. You need to reduce their numbers and merge requirements, design, testing etc practices for each core security concepts. Just make this benchmark that each core security concept should not have more than 20 practices.

I have attached some comments from your supervisory committee. In the revision of practices please use their comments for improvement.

Can you send me the revised version (1-3 chapters proof read and chapter 4 of revised practices) in 10 days (6 Oct). After this revision, we will start working on the model.