areas for improving and assessing the maturity of the security engineering
processes used to produce information security products, trusted systems,
and security capabilities in information systems. The scope of the processes
addressed by the SSE-CMM encompasses all activities of the system security