Process Improvement Should Link to Security: SEPG 2007 Security Track Recap
• SEI Report
Publisher
Software Engineering Institute
CMU/SEI Report Number
CMU/SEI-2007-TN-025DOI (Digital Object Identifier)
10.1184/R1/6582452.v1Abstract
Security is a very visible issue these days for software. New software products are continuously reported to be vulnerable to attack and compromise; organizations must support an expensive unending update-and-upgrade cycle. Process improvement has been proposed as a mechanism for addressing security challenges, but the Capability Maturity Model Integration (CMMI) approach does not specifically address security, so the linkages for the Software Engineering Process Group (SEPG) community are unclear. The security track at the SEPG 2007 conference was developed to provide a forum for identifying the appropriate ties between process improvement and security. This document summarizes the content shared at the conference and identifies several subsequent steps underway toward strengthening those ties.
Cite This SEI Report
Woody, D. (2007, September 1). Process Improvement Should Link to Security: SEPG 2007 Security Track Recap. (SEI Report CMU/SEI-2007-TN-025). Retrieved September 4, 2026, from https://doi.org/10.1184/R1/6582452.v1.
@techreport{woody_2007,
author={Woody, Dr. Carol},
title={Process Improvement Should Link to Security: SEPG 2007 Security Track Recap},
month={Sep},
year={2007},
number={{CMU/SEI-2007-TN-025},
institution={Software Engineering Institute, Carnegie Mellon University},
doi={10.1184/R1/6582452.v1},
url={https://doi.org/10.1184/R1/6582452.v1},
note={Accessed: 2026-Sep-4}
}
Woody, Dr. Carol. "Process Improvement Should Link to Security: SEPG 2007 Security Track Recap." (CMU/SEI-2007-TN-025). Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, September 1, 2007. https://doi.org/10.1184/R1/6582452.v1.
D. Woody, "Process Improvement Should Link to Security: SEPG 2007 Security Track Recap," Software Engineering Institute, Carnegie Mellon University. Software Engineering Institute, SEI Report CMU/SEI-2007-TN-025, 1-Sep-2007 [Online]. Available: https://doi.org/10.1184/R1/6582452.v1. [Accessed: 4-Sep-2026].
Woody, Dr. Carol. "Process Improvement Should Link to Security: SEPG 2007 Security Track Recap." (SEI Report CMU/SEI-2007-TN-025). Software Engineering Institute, Carnegie Mellon University, Software Engineering Institute, 1 Sep. 2007. https://doi.org/10.1184/R1/6582452.v1. Accessed 4 Sep. 2026.
Woody, Dr. Carol. Process Improvement Should Link to Security: SEPG 2007 Security Track Recap. CMU/SEI-2007-TN-025. Software Engineering Institute. 2007. DOI: 10.1184/R1/6582452.v1. https://doi.org/10.1184/R1/6582452.v1