Looking for informaton on Drupal core security process, audits and benchmarking I'm looking for information on Drupal's security processes, any audits carried out, benchmarking against securty standards, what happens security-wise before a new Drupal release etc...

The most useful info i have found thus far is here: 

http://drupalsecurityreport.org/

and here:

https://www.drupal.org/security-team

But it doesn't give much detail on internal processes or on accreditations etc.

Danny.
There are 2 websites you should look at, http://buytaert.net/greg-knaddison-and-drupal-security and http://crackingdrupal.com.