Processes and Practices Working Group

Collaborations

Collaborating with NDIA/DoD System Assurance Guidebook efforts
- Practical guidance for the Government acquisition community, industry, academia, and other commercial and government partners
- Synthesis of knowledge gained from existing practice, recommendations, policy, and mandate, rather than reinventing the wheel
- Recap of important concepts and principles from foundational documents, standards, and mandates, and discussion of them in the larger context of systems assurance as presented by the White Paper
Collaborating with efforts to achieve system and software assurance through CMMI-compliant processes
- Industry Working Group formed to explore options and strategies for extending the CMMI for assurance concerns
  - Participation from Motorola; Lockheed Martin; Booz Allen, Hamilton; CSC, DHS
  - Starting point Motorola Secure Software Development Model (MSSDM, ISO/IEC 21827 the System Security Engineering Capability Maturity Model (SSE-CMM)) and Lockheed Martin Software Safety & Security Guidebook for Engineering Best Practices and Certification & Accreditation Requirements
Collaborating with ISO/IEC/IEEE 15026, System and Software Assurance efforts