sei.cmu

The Seven Virtues of Reconciling Agile and Earned Value Management (EVM)

Wilson, S., Place, P., and Korzec, K., 2023: The Seven Virtues of Reconciling Agile and Earned Value Management (EVM). Carnegie Mellon University, Software ...
sei.cmu

5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them

Wrubel, E., Creel, R., and O'Hearn, B., 2025: 5 Essential Questions for Implementing the Software Acquisition Pathway and the Tools to Tackle Them. Carnegie Mellon University, Software Engineering ...
Software Engineering Institute

Q-Day Countdown: Are You Prepared?

In this webcast, Brett Tucker, Dan Justice, and Matthew Butkovic will discuss the challenges to be expected with the realization of quantum computing capabilities.
Software Engineering Institute

Cybersecurity Maturity Model Certification Rule Finalized for Defense Industrial Base

Beginning November 10, defense contracts may require assessments under the CMMC program, which the SEI co-created, but implementation will be phased.
sei.cmu

Dangers of AI for Insider Risk Evaluation (DARE)

Artificial Intelligence (AI) holds the promise of reducing insider risk incidents, but it comes with a unique set of challenges. This paper outlines the potential pitfalls of leveraging AI for insider ...
sei.cmu

Best Practices for Cloud Security

Faatz, D., 2018: Best Practices for Cloud Security. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed September 26, 2025, https ...
sei.cmu

Using ChatGPT to Analyze Your Code? Not So Fast

Sherman, M., 2024: Using ChatGPT to Analyze Your Code? Not So Fast. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed October 1 ...
sei.cmu

A Framework for DevSecOps Evolution and Achieving Continuous-Integration/Continuous-Delivery (CI/CD) Capabilities

Hughes, L., and Jackson, V., 2021: A Framework for DevSecOps Evolution and Achieving Continuous-Integration/Continuous-Delivery (CI/CD) Capabilities. Carnegie Mellon ...
sei.cmu

The Team Software Process (TSP)

This report describes the TSP and how it was developed. Starting with a brief background discussion of software quality, the report provides an overview of the basic elements of teamwork. The Team ...
sei.cmu

Taking DevSecOps to the Next Level with Value Stream Mapping

Brown, N., 2021: Taking DevSecOps to the Next Level with Value Stream Mapping. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...
sei.cmu

2000 CERT Advisories

CERT/CC advisories are now part of the US-CERT National Cyber Awareness System. We provide these advisories, published by year, for historical purposes. This report details the description, impact, ...
sei.cmu

10 Lessons in Security Operations and Incident Management

Ruefle, R., 2024: 10 Lessons in Security Operations and Incident Management. Carnegie Mellon University, Software Engineering Institute's Insights (blog), Accessed ...