Rick Hefner

Pilot Results Applying the System Security Engineering CMM

INCOSE International Symposium, Aug 1, 1997

The Systems Security Engineering Capability Maturity Model (SSE‐CMM) describes the essential char... more The Systems Security Engineering Capability Maturity Model (SSE‐CMM) describes the essential characteristics of an organization's security engineering process that must exist to ensure good security engineering. The model also highlights the relationship between security engineering and systems engineering.

Effective Systems Engineering Training

The need for systems engineering training is steadily increasing, as both the defense and commerc... more The need for systems engineering training is steadily increasing, as both the defense and commercial markets take on more complex "systems of systems" work. A variety of universities and commercial training vendors have assembled courses of various lengths, format, and content to meet this need. This presentation looks at the requirements for systems engineering training, and discusses techniques for increasing its effectiveness. Several format and content options for meeting these requirements are compared and contrasted, and an experience-based curriculum is shown.

Download

Forum: Assurance Lessons Learned

Annual Computer Security Applications Conference, Dec 8, 1997

A process standard for system security engineering: development experiences and pilot results

The Systems Security Engineering Capability Maturity ModelsM (SSE-CMMsM) describes the essential ... more The Systems Security Engineering Capability Maturity ModelsM (SSE-CMMsM) describes the essential characteristics of an organization's security engineering process. The standard was developed by a unique government-industry consortium of leading security providers and acquirers. This paper summarizes the model and presents lessons learned in the model I s development and from pilot appraisals.

Download

Aligning strategies: organizational, project, individual [IT governance]

ABSTRACT Current IT literature emphasizes the importance of adopting a governance strategy based ... more ABSTRACT Current IT literature emphasizes the importance of adopting a governance strategy based on an organization&#39;s customer market, and inherent technology and personnel capabilities. However, practical experience has shown that many organizations with sound strategies fail, often because the strategies are not aligned with IT project tactics or individual priorities. This paper explores the idea of aligning organizational, project, and individual strategies, using the capability maturity model, an industry best-practices model, as a reference. Key points are illustrated with an industrial example.

Lessons learned with the systems security engineering capability maturity model

This paper describes the principles upon which the SSE-CMM is based, the structure of the model, ... more

Download

Poster Title: CMMI Compliance in COTS-Based Development

Lecture Notes in Computer Science, 2004

The Capability Maturity Model Integrated (CMMI) provides a reference model of industry best-pract... more The Capability Maturity Model Integrated (CMMI) provides a reference model of industry best-practices for software and systems engineering. Like its predecessor, the Capability Maturity Model for Software (SW-CMM), the wording of the CMMI seems to reflect custom development of a new software product or system. However, the model was intended to apply to all types of systems development, including the

CMMI Compliance in COTS-Based Development

The Capability Maturity Model Integrated (CMMI) provides a reference model of industry best-pract... more The Capability Maturity Model Integrated (CMMI) provides a reference model of industry best-practices for software and systems engineering. Like its predecessor, the Capability Maturity Model for Software (SW-CMM), the wording of the CMMI seems to reflect custom development of a new software product or system. However, the model was intended to apply to all types of systems development, including the extensive use of COTS.

essons Learne 'meering Capability Maturity

Tlus pager describes the principles upon whch the SSECMM is based, the structure of the model, an... more

A corporate approach to technology transition

This paper discusses the approach used by TRW for technology transfer, both internally and extern... more This paper discusses the approach used by TRW for technology transfer, both internally and externally. The approach is based on the definition of Technology Change Management activities, as specified in the Software Engineering Institute's Capability Maturity Model (CMM). The discussion will focus on TRW's approach and techniques used, as well as lessons learned in implementation. This approach was found to be useful for lower maturity organizations, and provides a strong bond between corporate technologists and process improvement specialists.

Download

Things they never taught you in CMM school

... Rick Hefner, Ph.D. TRW One Space Park - R2/2012 Redondo Beach, CA 90278 310.812.7290, Rick.He... more

A corporate approach to technology transition

Proceedings of the 32nd Annual Hawaii International Conference on Systems Sciences. 1999. HICSS-32. Abstracts and CD-ROM of Full Papers

This paper discusses the approach used by TRW for technology transfer, both internally and extern... more This paper discusses the approach used by TRW for technology transfer, both internally and externally. The approach is based on the definition of Technology Change Management activities, as specified in the Software Engineering Institute's Capability Maturity Model (CMM). The discussion will focus on TRW's approach and techniques used, as well as lessons learned in implementation. This approach was found to be useful for lower maturity organizations, and provides a strong bond between corporate technologists and process improvement specialists.

format_quoteMost TRW organizations operate at CMM Level 2, with significant divisions exceeding Level 3, showcasing advancement in software process maturity.format_quote

Download

Lessons learned with the systems security engineering capability maturity model

Proceedings of the 19th international conference on Software engineering - ICSE '97, 1997

This paper describes the principles upon which the SSE-CMM is based, the structure of the model, ... more

Download

Network Security About the Authors

A CMM® is a reference model of mature practices for a specified engineering discipline. A project... more A CMM® is a reference model of mature practices for a specified engineering discipline. A project developer or organization can compare practices to the model to identify potential improvements. Many companies have used CMMs to improve their software and systems engineering practices [1, 2]. The field of security engineering has several well-accepted criteria for evaluating security products, systems, and services [3, 4, 5, 6]. However, it lacks a comprehensive framework for evaluating security engineering practices. The SSE-CMM provides a way to measure and improve capability in applying security engineering principles, and to address capability-based assurance. Project History The NSA initiated development of the SSE-CMM to foster improvement in the security engineering process and to augment existing assurance methods. In 1995 the agency formed a government industry consortium with wide representation from the security engineering acquisition and supplier communities. Organizatio...

Download

Leading Complex Projects Effectively

Product Integration Verification

management

The Systems Security Engineering Capability

The Systems Security Engineering Capability Maturity ModelsM (SSE-CMMsM) describes the essential ... more The Systems Security Engineering Capability Maturity ModelsM (SSE-CMMsM) describes the essential characteristics of an organization's security engineering process. The standard was developed by a unique government-industry consortium of leading security providers and acquirers. This paper summarizes the model and presents lessons learned in the model I s development and from pilot appraisals.

Download

USC-CSE TECHNOLOGY WEEK Executive Workshop, February 10,1999

Pilot Results Applying the System Security Engineering CMM

INCOSE International Symposium, 1997

The Systems Security Engineering Capability Maturity Model (SSE‐CMM) describes the essential char... more The Systems Security Engineering Capability Maturity Model (SSE‐CMM) describes the essential characteristics of an organization's security engineering process that must exist to ensure good security engineering. The model also highlights the relationship between security engineering and systems engineering.

Things they never taught you in CMM school

Proceedings 26th Annual NASA Goddard Software Engineering Workshop

... Rick Hefner, Ph.D. TRW One Space Park - R2/2012 Redondo Beach, CA 90278 310.812.7290, Rick.He... more

Uploads

Papers by Rick Hefner

Log In