Maturity of Practice

SEI Report
In this paper, Julia Allen identifies indicators that organizations are addressing security as a governance and management concern, at the enterprise level.
Publisher

Software Engineering Institute

Abstract

Updates to this material are, in part, either adapted or excerpted from Software Security Engineering: A Guide for Project Managers.

This article identifies several indicators that organizations are addressing security as a governance and management concern at the enterprise level. It summarizes how some organizations, trade associations, and market sectors are proceeding. Many of the references and links in this article provide more detailed implementation guidance.

Cite This SEI Report

Allen, J. (2013, May 23). Maturity of Practice. Retrieved September 13, 2026, from https://www.sei.cmu.edu/library/maturity-of-practice/.

@techreport{allen_2013,
author={Allen, Julia},
title={Maturity of Practice},
month={May},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/maturity-of-practice/},
note={Accessed: 2026-Sep-13}
}

Allen, Julia. "Maturity of Practice." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, May 23, 2013. https://www.sei.cmu.edu/library/maturity-of-practice/.

J. Allen, "Maturity of Practice," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 23-May-2013 [Online]. Available: https://www.sei.cmu.edu/library/maturity-of-practice/. [Accessed: 13-Sep-2026].

Allen, Julia. "Maturity of Practice." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 23 May. 2013. https://www.sei.cmu.edu/library/maturity-of-practice/. Accessed 13 Sep. 2026.

Allen, Julia. Maturity of Practice. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/maturity-of-practice/