Microsoft clearfies confusions surrounding SDL and Creative Commons:
"All organizations, including for-profit enterprises, may copy, distribute and transmit any SDL content released under Attribution, Non-Commercial, Share Alike (cc by-nc-sa) terms. This means that businesses are free to incorporate SDL content we release under CC license into their internal process documentation and development methodologies and to use SDL content to advance development of secure software, provided the terms of license are followed. Microsoft released SDL content under this CC license to enable individuals, organizations and businesses to incorporate security and privacy into software development practices. Microsoft, however, doesn't extend this license grant to organizations or individuals whose primary purpose is to generate revenue by reselling SDL content."