search menu icon-carat-right cmu-wordmark

Security Quality Requirements Engineering (SQUARE)

This collection describes SQUARE, a process that helps organizations build security into the early stages of the production lifecycle.

Software Engineering Institute


Requirements problems are the primary reason that projects are significantly over budget and past schedule, have significantly reduced scope, and deliver poor-quality applications that are little used once delivered, or are cancelled altogether.

One source of these problems is poorly expressed or analyzed quality requirements, such as security and privacy. Requirements engineering defects cost 10 to 200 times more to correct during implementation than if they are detected during requirements development. Moreover, it is difficult and expensive to significantly improve the security of an application after it is in its operational environment.

Security Quality Requirements Engineering (SQUARE) is a nine-step process that helps organizations build security, including privacy, into the early stages of the production lifecycle. Instructional materials are available for download that can be used to teach the SQUARE method.

Collection Items