Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions

SEI Report
In this paper, Rita Creel identifies acquirer activities and resources necessary to support contractor efforts to build secure software-intensive systems.
Publisher

Software Engineering Institute

Abstract

When systems are built under government contract, the acquirer and contractor share responsibility for the outcome, not only in terms of cost, schedule, and performance, but also with respect to quality attributes such as security. Using an acquisition life cycle framework, this article identifies acquirer activities, products, and resources that are necessary to establish and support contractor efforts to build secure software-intensive systems.

Cite This SEI Report

Creel, R. (2013, July 2). Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions. Retrieved September 11, 2026, from https://www.sei.cmu.edu/library/assuring-software-systems-security-life-cycle-considerations-for-government-acquisitions/.

@techreport{creel_2013,
author={Creel, Rita},
title={Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions},
month={Jul},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/assuring-software-systems-security-life-cycle-considerations-for-government-acquisitions/},
note={Accessed: 2026-Sep-11}
}

Creel, Rita. "Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, July 2, 2013. https://www.sei.cmu.edu/library/assuring-software-systems-security-life-cycle-considerations-for-government-acquisitions/.

R. Creel, "Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 2-Jul-2013 [Online]. Available: https://www.sei.cmu.edu/library/assuring-software-systems-security-life-cycle-considerations-for-government-acquisitions/. [Accessed: 11-Sep-2026].

Creel, Rita. "Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 2 Jul. 2013. https://www.sei.cmu.edu/library/assuring-software-systems-security-life-cycle-considerations-for-government-acquisitions/. Accessed 11 Sep. 2026.

Creel, Rita. Assuring Software Systems Security: Life Cycle Considerations for Government Acquisitions. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/assuring-software-systems-security-life-cycle-considerations-for-government-acquisitions/