Secure Software Systems

Introduction

Managing a secure software systems development life cycle is a complex and challenging prospect that is based on applying product, portfolio, process, program, and project management in the right portions at the right times. Each of the management areas is applied at the right level, and elements of the area support, drive, and inform the elements of the other areas. The key to making everything work effectively is communication.

Different organizations will often have differing opinions about which management area is primary, but the key is that all are needed, and neglecting any one area from consideration can contribute to failures in the organization. Figure 5.1 displays how different management areas overlap. When they overlap, ...