u Systems Security Engineering Capability Maturity Model (SSE-CMM)—[98]
Originally defined by the National Security Agency (NSA), and now an
international standard (ISO/IEC 21827), SSE-CMM enables a system
development organization to add security practices into their systems