Software Engineering Institute

Software is a growing component of modern business- and mission-critical systems. As a result, software assurance is becoming increasingly important to organizations across all sectors. A key aspect of software assurance is keeping security and resilience risks within an acceptable tolerance across the systems lifecycle. The Security Engineering Framework (SEF) is a collection of software-focused engineering practices for managing security and resilience risks across the systems lifecycle. This quick-start guide provides a high-level view of those SEF practices.

This quick-start guide summarizes the goals and practices described in the SEI report Security Engineering Framework (SEF): Managing Security and Resilience Risks Across the Systems Lifecycle.