Models for Assessing the Cost and Value of Software Assurance
• SEI Report
Publisher
Software Engineering Institute
Abstract
It is not enough to simply estimate the cost of doing secure software assurance: you must also justify it from a value perspective. This paper presents IT valuation models that represent the most commonly accepted approaches to the valuation of IT and IT processes. These models can be categorized into four initial types: investment based, cost based, environmental/contextual, and quantitative estimation. However, the general conclusion is that there are only two valid ways to approach valuation of the secure software assurance process: quantitative and environmental.
Cite This SEI Report
Drommi, A., Shoemaker, D., Ingalsbe, J., Bailey, J., & Mead, N. (2013, May 21). Models for Assessing the Cost and Value of Software Assurance. Retrieved September 12, 2026, from https://www.sei.cmu.edu/library/models-for-assessing-the-cost-and-value-of-software-assurance/.
@techreport{drommi_2013,
author={Drommi, Antonio and Shoemaker, Dan and Ingalsbe, Jeff and Bailey, John and Mead, Nancy},
title={Models for Assessing the Cost and Value of Software Assurance},
month={May},
year={2013},
institution={Software Engineering Institute, Carnegie Mellon University},
url={https://www.sei.cmu.edu/library/models-for-assessing-the-cost-and-value-of-software-assurance/},
note={Accessed: 2026-Sep-12}
}
Drommi, Antonio, Dan Shoemaker, Jeff Ingalsbe, John Bailey, and Nancy Mead. "Models for Assessing the Cost and Value of Software Assurance." Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, May 21, 2013. https://www.sei.cmu.edu/library/models-for-assessing-the-cost-and-value-of-software-assurance/.
A. Drommi, D. Shoemaker, J. Ingalsbe, J. Bailey, and N. Mead, "Models for Assessing the Cost and Value of Software Assurance," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, 21-May-2013 [Online]. Available: https://www.sei.cmu.edu/library/models-for-assessing-the-cost-and-value-of-software-assurance/. [Accessed: 12-Sep-2026].
Drommi, Antonio, Dan Shoemaker, Jeff Ingalsbe, John Bailey, and Nancy Mead. "Models for Assessing the Cost and Value of Software Assurance." Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 21 May. 2013. https://www.sei.cmu.edu/library/models-for-assessing-the-cost-and-value-of-software-assurance/. Accessed 12 Sep. 2026.
Drommi, Antonio; Shoemaker, Dan; Ingalsbe, Jeff; Bailey, John; & Mead, Nancy. Models for Assessing the Cost and Value of Software Assurance. Software Engineering Institute. 2013. https://www.sei.cmu.edu/library/models-for-assessing-the-cost-and-value-of-software-assurance/