CERT-SEI

TSP-Secure

The issue

CERT researchers are tackling the need to build software that is free from known vulnerabilities.

Our approach

Knowing that secure software is not built by accident, we integrated secure coding techniques into the Team Software Process (TSP) so that high quality, secure software can be developed with predictable cost and schedule results.

The results

TSP-Secure addresses secure software development in multiple ways:

  • provides the means to plan for security
  • helps to build self-directed development teams and then expects these teams to manage their own work
  • helps to manage quality throughout the product development life cycle
  • includes security awareness training for developers

Learn more

TSP-Secure

SEI Blog