System Security Engineering Capability Maturity Model (SSE-CMM) and its Applications

Author: Authored by SSE-CMM Project Team, Translated by Cai Wantong et al.
Publisher:
Publish Date: 2004-05-01
Features: The ability of an organization or enterprise to engage in engineering directly affects the quality of the engineering. Internationally, the Capability Maturity Model (CMM) is commonly used to assess an organization's engineering capabilities. According to statistical process control theory, all successful enterprises share a common characteristic: they possess a set of rigorously defined, well-managed, and measurable work processes. The CMM model believes that highly mature enterprises have a high probability of consistently producing high-quality products, while engineering risks are minimal. To introduce the CMM model into the field of systems safety engineering, relevant international organizations jointly developed the Systems Safety Engineering Capability Maturity Model (SSE-CMM). This model, based on the CMM model, transforms systems safety engineering into a well-defined, mature, and measurable advanced engineering discipline through the management of safety engineering. The model has been recommended for use as an international standard. This book focuses on introducing the 2.0 version of the SSE-CMM model and its evaluation methods. It is divided into ten chapters: Introduction to SSE-CMM, CMM Concepts, Model Architecture, SSE-CMM Usage, General Practices, Basic Practices, Introduction to SSAM, Evaluation Method Phases, Guidelines for Initiating Organizations, and Guidelines for Evaluating Organizations. The appendix provides evaluation plans and standardized forms used during the evaluation process. This book is the first publication in China to provide a detailed introduction to this model and is suitable for companies and enterprises engaged in information technology security, as well as their relevant management and technical personnel. It is also suitable for organizations and individuals involved in systems safety evaluation.

The ability of an organization or enterprise to engage in engineering directly affects the quality of the engineering. Internationally, the Capability Maturity Model (CMM) is commonly used to assess an organization's engineering capabilities. According to statistical process control theory, all successful enterprises share a common characteristic: they possess a set of rigorously defined, well-managed, and measurable work processes. The CMM model believes that highly mature enterprises have a high probability of consistently producing high-quality products, while engineering risks are minimal. To introduce the CMM model into the field of systems safety engineering, relevant international organizations jointly developed the Systems Safety Engineering Capability Maturity Model (SSE-CMM). This model, based on the CMM model, transforms systems safety engineering into a well-defined, mature, and measurable advanced engineering discipline through the management of safety engineering. The model has been recommended for use as an international standard. This book focuses on introducing the 2.0 version of the SSE-CMM model and its evaluation methods. It is divided into ten chapters: Introduction to SSE-CMM, CMM Concepts, Model Architecture, SSE-CMM Usage, General Practices, Basic Practices, Introduction to SSAM, Evaluation Method Phases, Guidelines for Initiating Organizations, and Guidelines for Evaluating Organizations. The appendix provides evaluation plans and standardized forms used during the evaluation process. This book is the first publication in China to provide a detailed introduction to this model and is suitable for companies and enterprises engaged in information technology security, as well as their relevant management and technical personnel. It is also suitable for organizations and individuals involved in systems safety evaluation.