A process standard for system security engineering: development experiences and pilot results

The Systems Security Engineering Capability Maturity Model/sup SM/ (SSE-CMM/sup SM/) describes the essential characteristics of an organization's security engineering process. The standard was developed by a unique government-industry consortium of leading security providers and acquirers. This paper summarizes the model and presents lessons learned in the model's development and from pilot appraisals.