ISO/IEC 21827:2008 specifies the Systems Security Engineering - Capability Maturity Model« (SSE-CMM«), which describes the essential characteristics of an organization's security engineering process that must exist to ensure good security engineering. ISO/IEC 21827:2008 does not prescribe a particular process or sequence, but captures practices generally observed in industry. The model is a standard metric for security engineering practices covering the following:
The objective is to facilitate an increase of maturity of the security engineering processes within the organization. The SSE-CMM« is related to other CMMs which focus on different engineering disciplines and topic areas and can be used in combination or conjunction with them.
SDO | ISO: International Organization for Standardization |
Document Number | ISO/IEC 21827 |
Publication Date | Not Available |
Language | en - English |
Page Count | |
Revision Level | |
Supercedes | |
Committee | ISO/IEC/JTC 1/SC 27 |