Update to BSIMM 7

[marcellobellini]

Updated activities from BSIMM 6 to BSIMM 7 according to changes mentioned in https://go.bsimm.com/hubfs/BSIMM/BSIMM7.pdf page 65

Here are the the changes we made according to that paradigm:

1. AM1.1 Build and maintain a top N possible attacks list became AM2.5
2. AM1.4 Collect and publish attack stories became AM2.6
3. AM1.6 Build an internal forum to discuss attacks became AM2.7
4. CR1.1 Use a top N bugs list (real data preferred) became CR2.7
5. CR2.2 Enforce coding standards became CR3.5